WIndowsXpMC - looks like Media Center Edition
OK, we have to rescan everything again.....
STEP 1. Download
Malwarebytes' Anti-Malware (aka MBAM):
http://www.malwarebytes.org/mbam.php to your desktop.
(Malwarebytes is free to use as a manual scanner. Payment is only required if you wish to have it run and update automatically which is not necessary for our purposes)
* Double-click
mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to
Update Malwarebytes' Anti-Malware and
Launch Malwarebytes' Anti-Malware, then click
Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select
Perform Quick Scan, then click
Scan.
* When the scan is complete, click OK, then
Show Results to view the results.
* Be sure that everything is checked, and click
Remove Selected.
* When completed, a log will open in Notepad.
*
Post the log back here.
The log can also be found here:
C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\
log-date.txt
Or at C:\Program Files\Malwarebytes' Anti-Malware\Logs\
log-date.txt
STEP 2. Download
GMER:
http://www.gmer.net/files.php, by clicking on
Download EXE button.
Alternative downloads:
-
http://majorgeeks.com/GMER_d5198.html
-
http://www.softpedia.com/get/Interne...ers/GMER.shtml
Double click on downloaded
.exe file, select
Rootkit tab and click the
Scan button.
Do NOT use the computer while GMER is running!
When scan is completed, click
Save button, and save the results as
gmer.log
Warning ! Please, do not select the "Show all" checkbox during the scan.
Post the log to your next reply.
IMPORTANT! If for some reason GMER refuses to run, try again.
If it still fails, try to UN-check "Devices" in right pane.
If still no joy, try to run it from Safe Mode.
STEP 3. Download
MBRCheck to your desktop
Double click
MBRCheck.exe to run (Vista and Windows 7 users, right click and select
Run as Administrator).
It will show a black screen with some data on it.
A report called
MBRcheckxxxx.txt will be on your desktop
Open this report and post its content in your next reply.
DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!