Our chat has ended, but you can still continue to ask me questions here until you are satisfied with your answer. Come back to this page to view our conversation and any other new information.

What happens now?

If you haven’t already done so, please rate your answer above. Or, you can reply to me using the box below.

Deborah, try the above steps, if this does not resolve the issue let me know so we can continue to narrow down where the infection is hiding :)

Deborah, were you able to test out the above steps? I am still here for you, I have seen your multiple questions, they have been closed out, I did not want you to get charged for the additional questions.

Use this chat here to respond to me.

If the above does not work please respond to me so we can continue troubleshooting :)

Sounds great, Thanks Deborah, i'll be standing by

Deborah, can you test something for me while I try to duplicate your problem?

Download and install Firefox from this like

http://tinyurl.com/jeremyfirefoxdownload

If it asks to run or save choose Run

I want to see if the issue is IE related or if it occurs in Firefox as well to better narrow it down.

Sounds like it :)

You may even want to scan Malwarebytes once again in Normal Mode (the mode you are currently booted into) to see if it picks it up again

Also on Internet Explorer let's disable all plugins to see if that helps

Click Tools then choose Internet Options (if you do not see tools press alt on the keyboard to reveal this menu)

Click the Programs Tab

Click Manage Addons

Disable everything EXCEPT Microsoft Items, Adobe Items, Sun Microsystem Items, and Apple Items

Then click the Search Providers on the left

Make sure nothing strange is set as your default provider, if it is click on a trusted provider then choose Set as Default

Then you want to click on the strange provider (if applicable) and press Remove to delete it

(just seen your message as I was writing this below)

A certificate error could either be from an incorrect date, time or timezone set on the computer, (double click the clock in the bottom right hand corner of the screen to check this, if it's incorrect manually adjust to fix this)

Or it could be the malware trying to redirect and Firefox is preventing it.

We need to run 2 different scanners

One scanner we should use that I was thinking of is TDSS Killer

Click this link http://tinyurl.com/jeremytdss

If it asks to run or save choose Run

When it opens Double click the TDSSKiller.exe file and press open

When it opens press the Start Scan button

Reboot

Then click this file http://tinyurl.com/jeremyhitman

If it asks to run or save choose Run

This program is a 30 day trial, but it will work for what we need it to do today, I would recommend just using the trial, but that's just me (I'm cheap :) )

Scan with both above tools and see what happens.

Let's see if this helps :)

Ahh sorry about that

Let's see what happens.

Can you check something for me?

Click Start, then choose Run

In the runbox type notepad

Click File then open

In the filename box type C:\windows\system32\drivers\etc\hosts then push enter

Can you copy and paste the contents to me?

Let's check something else.

In Internet Explorer
Click Tools then Internet Options

Click the connections tab

choose Lan Settings

What information do you see under here?

Try this one Deborah

http://tinyurl.com/jeremytdss2

This is a stubborn little bugger :)

Thanks Deborah, if I dont hear from you the rest of the night have a wonderful night :)

Me too

No problem Deborah :)

I made sure, I closed out the other question so you would not be double billed :)

Not a problem at all, come see me if you ever need anything Deborah :)