Requirements: On an uninfected PC connected to the Internet, download the following programs to a thumbdrive. We will need this to fix the infected computer.
Instructions:
- Shut down the computer as soon as you realize there is a problem. Pop-ups, program errors, dll errors, fake Anti-Virus scanners, and similar are signs there is a problem. Shut down the computer normally, or hold the power button in until the computer shuts off.
- Power on the computer, and hit F8 before the Windows Startup screen appears. Select Safe Mode.
- Login if asked to, if not select Yes to continue.
- Click on the Start menu, select Run, type msconfig and press Ok, or type msconfig into the Start menu search box and press Enter.
- Under the General tab, select Diagnostic Startup. Press Apply.
- Under the Services tab, check the Hide All Microsoft Services box, and uncheck any services you don't recognize in the window.
- Under the Startup tab, select Disable All. Press Apply and Ok.
- Don't restart the computer yet.
- The System Restore Utility backs up selected files automatically to the Restore folder. Quite often are infected files stored there as backup files, and many Virus Scanners are unable to delete these files. If you suspect your computer may be infected, it is recommended that you disable the System Restore Utility to remove the infected files from the Restore folder.Select your OS for directions on how to disable the System Restore Utility - XP, Vista, 7
- While in Safe Mode, insert your USB thumbdrive and open it in My Computer.
- Open Combofix.exe, select Ok when it asks. Let Combofix scan and remove any infections it finds. It should restart the computer when it is done. When it restarts, boot up into Windows normally.
- Login if asked to, open your thumbdrive in My Computer again, and run Combofix.exe once more.
- Open up SmitFraudFix.exe from your thumbdrive. Press any key to continue when asked. Type 2, and press enter. When the scan is complete, restart your computer.
- If you had a fake Anti-Virus Scanner infection, open up Remove Fake Antivirus.exe from your thumbdrive. Press Start, and press Yes. When the scan and removal is Complete, restart the computer again.
- Install Microsoft Security Essentials, or your choice of Anti-Virus Software when the computer returns back to the desktop.
- Restart if asked to, and when the computer restarts, run a Full Scan in Microsoft Security Essentials.
×