very difficult to remove as malwarebytes claims the system is clean but google searches still take you to the wrong sites.
http://www.bleepingcomputer.com/forums/topic294623.html
We need to run this special tool.
- Download TDSSKiller and save it to your Desktop.
- Extract its contents to your desktop and make sure TDSSKiller.exe (the contents of the zipped file) is on the Desktop itself, not within a folder on the desktop.
- Go to Start > Run (Or you can hold down your Windows key and press R) and copy and paste the following into the text field. (make sure you include the quote marks) Then press OK.
“%userprofile%\Desktop\TDSSKiller.exe” -l TDSSKiller.txt -v
- If it says “Hidden service detected” DO NOT type anything in. Just press Enter on your keyboard to not do anything to the file.
- If prompted to reboot, please do so.
- When it is done, a log file should be created on your desktop called “TDSSKiller.txt” please copy and paste the contents of that file here.