Disable Windows DefenderWe need to disable your Windows Defender Real-time Protection as it may interfere with the fixes that we need to make.
- Open Windows Defender
- Click on Tools > Option
- Scroll down and uncheck Use real-time protection (recommended)
- After you uncheck this, click on the Save button and then exit Windows Defender
- Now on your keyboard press and hold Ctrl+Alt and then press the Delete key tow times to bring up the Task Manager.
- Locate MSASCui.exe then right click on it and choose End Process. Click Yes on the Task Manager Security Warning.
.
After all of the fixes are complete it is very important that you enable real-time protection again.
----------
Disable Ad-Aware as it may interfere with repairs
- Click the Settings button, Auto Scans tab, and under Scan on Ad-Aware startup
- Be sure both selections for No automated scan are checked (green).
- Then click Save and close Ad-Aware.
.
----------
Open HijackThis and select
Do a system scan only.
Place a check mark next to the following entries: (if there)
- R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
- O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
- O17 - HKLM\System\CCS\Services\Tcpip\..\{DE29503C-DC84-4376-B98F-74A264518032}: NameServer = 85.255.112.177,85.255.112.117
- O17 - HKLM\System\CCS\Services\Tcpip\..\{ECE83E20-69E7-4581-9AD9-6BAC8C3922D3}: NameServer = 85.255.112.177,85.255.112.117
- O17 - HKLM\System\CS1\Services\Tcpip\Parameters: NameServer = 85.255.112.177,85.255.112.117
- O17 - HKLM\System\CS2\Services\Tcpip\Parameters: NameServer = 85.255.112.177,85.255.112.117
- O17 - HKLM\System\CCS\Services\Tcpip\Parameters: NameServer = 85.255.112.177,85.255.112.117
.
Important: Close all windows except for HijackThis and then click
Fix checked.
Exit HijackThis.
----------
1. Right-click the network icon in the System Tray.
2. From the pop-up menu, select "Diagnose and Repair".
3. Click "Automatically get new IP settings for the network adapter 'Local Area Connection'". At this stage there is annoyingly no "Reset network adapter" option.
4. In the "Windows needs your permission to continue" box, click Continue.
5. Wait for the "Repairing" window to complete (takes a while).
6. In the Windows Network Diagnostics window, click "Reset the network adapter 'Local Area Connection'".
7. You should see "The problem has been resolved".
8. Click Close.
----------
Download
Malwarebytes' Anti-Malware (MBAM)- Double-click mbam-setup.exe and follow the prompts to install the program.
- At the end, be sure a checkmark is placed next to the following:
- Update Malwarebytes' Anti-Malware
- Launch Malwarebytes' Anti-Malware
- Then click Finish.
- If an update is found, it will download and install the latest version.
- Once the program has loaded, select Perform quick scan, then click Scan.
- When the scan is complete, click OK, then Show Results to view the results.
- Be sure that everything is checked, and click Remove Selected.
- When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
- The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
- Copy and Paste the entire report in your next reply.
Extra Note: If MBAM encounters a file that is difficult to remove, you will be presented with 1 of 2 prompts, click OK to either and let MBAM proceed with the disinfection process, if asked to restart the computer, please do so immediately.
