Yes I'm just fixing one, it basically hijakcs legit files and then replaces them and puts the legit one's in a bak folder, so we have to reinstall the legit and remove the bad ones!
hi, welcome to TSG.
Download hijack this from the link below.Please do this. Click here:
to download HijackThis. Click scan and save a logfile, then post it here so
we can take a look at it for you. Don't click fix on anything in hijack this
as most of the files are legitimate.
Download FindAWF.exe and save it to your desktop.
* Double-click on the FindAWF.exe file to run it.
* It will open a command prompt and ask you to "Press any key to continue".
* Press any key and the FindAWF tool will begin scanning your computer for the infected AWF files and the backups the trojan created.
* It may take a few minutes to complete so be patient.
* When it is complete, it will open a text file in notepad called AWF.txt which will automatically be saved to your desktop or whatever location you ran the file from.
* Come back here to this thread and copy and paste the contents of the AWF.txt file in your next reply.
post a hijack this log and the AWF log!
Member of ASAP Alliance of Security Analysis Professionals
under the name khazars