Hello
Run malwarebyte again select Perform full scan, then click Scan.
When the scan is complete, click OK, then Show Results to view the results.
Be sure that everything is checked, and click
Remove Selected.
Download HostsExpert:
http://www.majorgeeks.com/Hoster_d4626.html
Choose one of the servers at Majorgeeks....save the file on your desktop
Unzip HostsXpert 4.2 - Hosts File Manager to a convenient folder such as C:\HostsXpert 4.2 - Hosts File Manager
Run HostsXpert 4.2 - Hosts File Manager from its new home
Click on "File Handling".
Click on "Restore MS Hosts File".
Click OK on the Confirmation box.
Click on "Make Read Only?"
Click the X to exit the program.
Note: If you were using a custom Hosts file you will need to replace any of those entries yourself.
Please download Combofix:
http://subs.geekstogo.com/ComboFix.exe
And save to the desktop.
Open notepad and copy/paste the text in the quotebox below into it:
Name the file as
CFScript
and Save it on the desktop
Killall::
Snapshot::
File::
c:\windows\system32\raguhiri.dll
c:\windows\system32\mogeviga.dll
C:\WINDOWS\system32\zinefowo.dll
c:\windows\system32\rotapote.dll
c:\windows\system32\kasivaga.dll
c:\windows\system32\kawenola.dll
http://img.photobucket.com/albums/v6...FScriptB-4.gif
Once saved, refering to the picture above, drag CFScript.txt into ComboFix.exe, and post back the resulting report, as
attached file
Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall