Computer infected with Fakealert!grb

When I unzip the folder and double click tdsskiller it doesn't do anything…. the program wont even start… I have tried downloading it twice

Still won't work. Even in safe mode.

I don't know why it won't run but Combofix should have removed any RootKit. How's it running?

Its running fine minus the ctfmon.exe and the numerous weird iexplore.exe's running. This computer is connected to another computer using remote desktop…. Do you think that possibly that is where the virus keeps on coming back from?

Sure could be. Run MBAM on the remote PC

The remote computer is clean, no threats found.

http://www.eset.eu/online-scanner
Go here to run an online scannner from ESET.
Click the green ESET Online Scanner button.
Read the End User License Agreement and check the box: YES, I accept the Terms of Use.
Click on the Start button next to it.
You may receive an alert on the address bar that "This site might require the following ActiveX control…Click here to install…". Click on that alert and then click Insall ActiveX component.
A new window will appear asking "Do you want to install this software?"".
Answer Yes to download and install the ActiveX controls that allows the scan to run.
Click Start.
Check Remove found threats and Scan potentially unwanted applications.
Click Scan to begin.
If offered the option to get information or buy software. Just close the window.
Wait for the scan to finish
Use notepad to open the logfile located at C:\Program Files\EsetOnlineScanner\log.txt
Copy and paste that log as a reply to this topic.

It came up clean, no threats found.

I would say you're ready to go

I realize that everything keeps on coming back clean, but is there any reason for the iexplore to constantly be popping up? Either way thanks again for all of the help man!

I realize that everything keeps on coming back clean, but is there any reason for the iexplore to constantly be popping up? Either way thanks again for all of the help man!

Can you explain that better?
Are you talking about IE?

You talking about this? C:\32788r22fwjfw\iexplore.exe

Everytime I google something, I constantly get weird redirects too… And as far as the iexplore thing goes, in task manager there are always two processes, if not more, running called iexplore.exe and one is using 263,628 K. Something just doesn't seem right with them.

Please download DDS and save it to your desktop.

• Disable any script blocking protection
• Double click dds.scr to run the tool.
• When done, DDS.txt will open.
• Click Yes at the next prompt for Optional Scan.
• Save both reports to your desktop.

—————————————————

Please Please copy / paste the scan reults.

DDS.txt