This stupid hostile intruder "Help Assistant" has been causing issues on my computer since Monday.

Avira has alerted me all the time about something hidden in the mbr or somthing like that. Who knows.

Anyway...I need some simple steps to defeat this infection. Can anyone help, because I cannot do anything on the computer right now, and am about to reformat and reinstall using your guy's tutorial I saw. When I did a search for reformat, I saw the tutorial on this site by some person called dragon master.

Help please.

Hello. If you can log on to at least do these steps, then you may be able to remove it enough. If you really want to do a reformat and reinstall, then do the first two steps, beforehand. Usually in the MBR, it sits there. So, even a reformat and reinstall will probably not help. However, if you do the first two steps, you can freely do the reformat.

Please download and save HelpAsst_mebroot_fix.exe

• Double click to run the tool.
  
• When complete, run mbr -f then reboot.
  
• After reboot, provide the mbr log.

====

Please download Stealth MBR Rootkit Detector by GMER from GMER.net, and save to your Desktop.

• Double-click mbr.exe to start the program.
  
• When done scanning, it will save a log on the Desktop called mbr.log.
  
• Please post the contents of that log in your next reply.

=====

Please download Profiles by noahdfear.

• Save it to your desktop.
• Double-click profiles.exe and post its log when you reply

======

Please download RootRepeal from GooglePages.com.

• Extract the program file to your Desktop.
  
• Run the program RootRepeal.exe.
  
• Click Settings > Options. Drag the slider to High Level. Then, click the Red X.
  
• Go to the Report tab and click on the Scan button.
  
  
  
• Select ALL of the checkboxes and then click OK and it will start scanning your system.
  
  
• If you have multiple drives you only need to check the C: drive or the one Windows is installed on.
  
• When done, click on Save Report
  
• Save it to the Desktop.
  
• Please copy/paste the contents of the report in your next reply.
  

Please remove any e-mail address in the RootRepeal report (if present).

====

In your next reply, if possible:

-MBR log
-MBR log 2
-Profiles log
-RootRepeal log

Still with us?