Expert: Brian Benosky - 9/4/2010

Question
Hello,

My computer got infected with this malware and has all the typical symptoms with browser getting redirected to random sites and a fake antivirus that opens up. Can you help me remove this trojan?

Answer
Hello Anamijit

Please download Malwarebytes' Anti-Malware to your desktop from here:
http://www.besttechie.net/tools/mbam-setup.exe
Double-click mbam-setup.exe and follow the prompts to install the program.
* At the end, be sure a checkmark is placed next to
      o Update Malwarebytes' Anti-Malware
      o and Launch Malwarebytes' Anti-Malware
* then click Finish.
* If an update is found, it will download and install the latest version.
* Once the program has loaded, select Perform full scan, then click Scan.
* When the scan is complete, click OK, then Show Results to view the results.
* Be sure that everything is checked, and click Remove Selected.
* When completed, a log will open in Notepad.  Please save it to your desktop.

Next, please download TrendMicro HijackThis! from the following link:
http://www.trendsecure.com/portal/en-US/_download/HJTInstall.exe
* Save HJTInstall.exe to your desktop.
* Doubleclick on the HJTInstall.exe icon on your desktop.
* By default it will install to C:\Program Files\Trend Micro\HijackThis.
* Click on Install.
* It will create a HijackThis icon on the desktop.
* Once installed, it will launch Hijackthis.
* Click on the Do a system scan and save a logfile button. It will scan and the log should open in notepad.
* Click on "Edit > Select All" then click on "Edit > Copy" and Paste the entire contents of the log in a follow-up to me, along with
the Malwarebytes' Anti-Malware log.


Brian