First: read the following article, and follow suggestions/instructions if required

Warnings Regarding P2P Sharing Sites

Next Please Do the Following:


1. Set System and Hidden files and folders to show:

For Vista:

• Click the (Vista Icon) and click on Computer.
• Click Organize and click on Folder and Search Options.
• Click on the View tab.
• Un-check the Hide Protected Operating System Files (Recommended) box.
• Under Hidden files and folders, click Show hidden files and folders.
• If you see a warning message, click Yes.
• Click Apply.
• Click OK.

For XP:

• Right-Click My Computer choose Explore, click on Tools, Folder Options.
• Click the View tab.
• Place a tick next to Display content of System folders, (answer OK to warnings)
• Under Hidden files and folders, click Show hidden files and folders.
• If you see a warning message, click Yes.
• Click Apply.
• Click OK.

For 98/2000/ME:

• Double-click the My Computer icon
• Click on the View menu, click Folder Options
• Advanced Settings box, under the "Hidden files" folder, click Show all files.
• If you see a warning message, click Yes.
• Click Apply.
• Click OK.

2. Disable System Restore to prevent re-infection.
(If you have/use it.)

Vista:

• Click the (Vista Icon) and right click on Computer and select Properties.
• Click on System Protection (click OK if you are prompted with a warning).
• Un-check all of the boxes in the list of Available Disks for Automatic Restore Points.
• Click Apply.
• Click OK.

WinXP.

• Click the Start button.
• Right-click My Computer, and then click Properties.
• On the System Restore tab, check Turn off System Restore or Turn off System Restore on all drives.

WinME.

• Click Start > Settings > Control Panel.
• Double-click the System icon.
• If the System icon is not visible, click View all Control Panel options to display it.
• On the Performance tab, click File System.
• On the Troubleshooting tab check Disable System Restore.
• Click OK. Click Yes, when you are prompted to restart Windows.

3. Please download and run Malwarebytes as follows.

• Please download Malwarebytes' Anti-Malware from one of these places:
  • Majorgeeks.com
  • besttechie.net
• Double Click mbam-setup.exe to install the application.
• Make sure a check-mark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
• If an update is found, it will download and install the latest version.
• Once the program has loaded, select "Perform Quick Scan", then click Scan.(The scan may take some time to finish,so please be patient.)
• When the scan is complete, click OK, then Show Results to view the results.
• Make sure that everything is checked, and click Remove Selected.
• When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)

The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
Copy&Paste the entire report in your next reply along with the HijackThis log.

Please Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.

4. Download and Run HijackThis! (HJT) from Trend Micro

First download the newest version of HijackThis! from either
Bleeping Computers or
Trend Micro

Save the file to your desktop, when you run HJT make sure that you install it into it's own folder, otherwise it will install as a temp location and will not give you accurate information.

Click on Run Scanner and Save a Log File
When it has finished, a text file will have been saved, copy and paste the entire log back into your thread. Do not attempt to fix anything yourself with HijackThis! it can cause very serious damage to your computer and programs. Wait until you are given instructions by one of the Security Team.


When you post:

• Please include all requested logs from this PreWork.
• Post NEW THREADS ONLY here; [NEW] Hijackthis! Logs - PC Help Forum - Free Computer Help, Windows, Hardware, Software and more!
• If you have a current thread; post the logs in your thread, and one of the staff will move your thread to the HJT Forum for you.
• Please include a detailed description of the problem you are having, be as specific as possible, and tell us any symptoms, scans you may have already done, other than PreWork, and also any hard or software that you may have installed prior to the odd behavior starting.
• When a security analyst replies to your thread, it will be moved to the In Progress section.
  
  

To Include a log - Simply copy and paste it into your thread.
To Attach a log - From the menu bar, click on theicon. Click on the
Browse button, and locate the file you wish to attach.
Click on Open, then click the Upload button, close the
window. (Do not attach logs unless explicitly requested)

Please do not follow any instructions from any user or staff member other than those listed in the Please Read Before Following Advice thread.





The PCHF Security Team