Problem I can't seem to solve help please

[Liske]

Hello this is the first time ive used this website and thank you in advance.

My farther downloaded some spyware programs thinking they would delete so called spyware "on the computer". Anyway ive tryed many diffrent things deleted most of the virus(s) and is now left with signs of it showing when on a internet brower appearing and stopping me from accessing websites and telling me i have spyware, i have fun ccleaner,AdwareSE, Blocked the viruses from running on Zone Alarm and scanned with AVG free, ive used Hijack this Auto problem showing on another website but still this problem remains it has disabled most of my start menu (Including log of,run, computer and all programs but this has now been fixed and displayed a "VIRUS ALERT" next to my clock which has now also been fixed the virus doesnt seem to restart these problems when i reboot.)

 

[Bobbye]

I can start you off, but another helper will have to help you run the additional programs. Unfortunately, he made it worse by downloading the malware programs that were giving 'less than accurate' reports.

Please reopen Hijack This and scan. Check the boxes next to all the entries listed below:

O2 - BHO: QXK Olive - {FE0F4B4F-A5A0-4529-BC78-1B04220F45E6} - C:\WINDOWS\nfavxwdbpgs.dll
O3 - Toolbar: fdkowvbp - {88E2C28F-80C8-49BA-94A3-A5D4930B4A23} - C:\WINDOWS\fdkowvbp.dll
O18 - Filter hijack: text/html - (no CLSID) - (no file)
O21 - SSODL: eqvwamkl - {DF7F0EF4-B8AB-40AD-9D82-56D335B5E407} - C:\WINDOWS\eqvwamkl.dll
O23 - Service: Turbine Message Service - Soundtrack (SoundtrackTurbineMessageService) - Unknown owner - C:\Program Files\Turbine\Turbine Download Manager - Soundtrack\TurbineMessageService.exe (file missing)
O23 - Service: Turbine Network Service - Soundtrack (SoundtrackTurbineNetworkService) - Unknown owner - C:\Program Files\Turbine\Turbine Download Manager - Soundtrack\TurbineNetworkService.exe (file missing)

Now close all windows other than HiJackThis, then click Fix Checked. Close HiJackThis. Reboot into safe mode.

Using Windows Explorer (to get there right-click your Start button and go to "Explore"), please delete these folders (if present):

%LOCAL_SETTINGS%\ temp\ mxstat.exe
%LOCAL_SETTINGS%\ temp\ nsstat.exe
%LOCAL_SETTINGS%\ temp\ videoaccesscodecinstall.exe
%LOCAL_SETTINGS%\ temp\ vpnsxd.exe
%LOCAL_SETTINGS%\ temp\ vpnxlw.exe
%PROGRAM_FILES%\ mediastarcodec\ mediastarcodec.ocx
%PROGRAM_FILES%\ mediasupplycodec\ mediasupplycodec.ocx
%PROGRAM_FILES%\ richvideocodec\ richvideocodec.ocx
%PROGRAM_FILES%\ smartvideocodec\ smartvideocodec.ocx
%PROGRAM_FILES%\ videoaccesscodec\ videoaccesscodec.ocx
%SYSTEM%\ icwc.exe
%SYSTEM%\ syswin6000.exe
%WINDOWS%\ asvdnmo.dll
%WINDOWS%\ bgntlvo.dll
%WINDOWS%\ dnqdlpmsom.dll
%WINDOWS%\ duocore.dll
%WINDOWS%\ epxonwo.dll
%WINDOWS%\ fqwmwdn.exe
%WINDOWS%\ gormet.dll
%WINDOWS%\ hdtip.dll
%WINDOWS%\ kthemup.exe
%WINDOWS%\ monhop.exe
%WINDOWS%\ movctrlfqd.dll
%WINDOWS%\ msddx.dll
%WINDOWS%\ msmdev.dll
%WINDOWS%\ msmhost.dll
%WINDOWS%\ msqnx.dll
%WINDOWS%\ mxduo.dll
%WINDOWS%\ nsduo.dll
%WINDOWS%\ nssfrch.dll
%WINDOWS%\ ocgrep.dll
%WINDOWS%\ pmkret.dll
%WINDOWS%\ qnxplugin.dll
%WINDOWS%\ werbetgxd.dll
%WINDOWS%\ wmpconf.dll
%WINDOWS%\ wmpdev.dll
%WINDOWS%\ wmpenv.dll
%WINDOWS%\ wmphost.dll
0.exe
76024_4315977_WebSoftCodecSetup.exe
76024_6224936_WebSoftCodecSetup.exe
76025_7324123_WebSoftCodecSetup.exe
76031_8517549_WebSoftCodecSetup.exe
a80.exe
AccessMediaDownload.exe
antiviirus.exe
blopenvdol.dll
blopenvwvf.dll
bxsbang.dll
c-setup.exe
c.exe
dmxpgl.exe
duocore.dll
eagle.exe
econf32.exe
egvl.exe
flycodec(1).exe
flycodec(2).exe
FlyCodec.exe
gormet.dll
hdtip.dll
hpzcsvsdv342a.exe
iktzudll2.exe
install .exe
install_cb.exe
install_cn.exe
install_cr.exe
is22.exe
jokvip.exe
kthemup.exe
leorop.dll
main.exe
mediaentertainmentcodec.ocx
mediatubecodec.exe
mediatubecodec[1].exe
MediaTubeCodec_ver1.1052.3.exe
MediaTubeCodec_ver1.1172.0.exe
MediaTubeCodec_ver1.1231.0.exe
MediaTubeCodec_ver1.1293.1.exe
MediaTubeCodec_ver1.1425.1.exe
MediaTubeCodec_ver1.1425.10.exe
MediaTubeCodec_ver1.1425.2.exe
MediaTubeCodec_ver1.1425.3.exe
MediaTubeCodec_ver1.1425.6.exe
MediaTubeCodec_ver1.1454.2.exe
mediatubecodec_ver1.459.2.exe
MediaTubeCodec_ver1.470.0.exe
MediaTubeCodec_ver1.615.1[2].exe
MediaTubeCodec_ver1.769.0.exe
MediaTubeCodec_ver1.938.1.exe
MediaTubeCodec_ver1.955.0.exe
mediavideocodec.ocx
microsoft.system.help.dll
monhop.exe
msdrv.exe
msmdev.dll
mxduo.dll
mxstat.exe
newmediacodec.ocx
newmediacodecinstaller (2).exe
newmediacodecinstaller.exe
nopzet.dll
nsduo.dll
opa.dll
paradise.raw(6).exe
pmkret.dll
retnsrp.dll
richvideocodec.ocx
RunOnceDrive.dll
sconf32.dll
search.dll
setup.exe
Setup_ver1.1170.0.exe
sockapptrn.exe
StarCodec.exe
StarCodec_ver.1.5785.0.exe
StarCodec_ver.1.5816.0.exe
StarCodec_ver1.5567.0.exe
system(2).exe
system.dll
system.exe
theclicker.exe
tmp1977062.exe
tmp1979516.exe
tmp1979556.exe
tmp2104966.exe
tmp2105657.exe
tmp282916.exe
tmp3.exe
tmp4028893.exe
tmp4028903.exe
tmp501861.exe
tmp503924.exe
ttvbonnlq.exe
ttvbonwrt.exe
VideoAccessCodec.ocx
videoaccesscodecinstall (1).exe
videoaccesscodecinstall (2).exe
videoaccesscodecinstall (3).exe
videoaccesscodecinstall (4).exe
videoaccesscodecinstall(1).exe
videoaccesscodecinstall(5).exe
videoaccesscodecinstall.exe
vpncore.exe
vscodecsetup.exe
websoft-a_com.exe
websoftcodecsetup.exe
werbetlsp.dll
WMcodec_update.exe
wmpconf.dll
wmpdev.dll
wmpenv.dll
wmphost.dll
wmplayer.dll
wmsound.dll
xxxmediacodec(2).exe
XXXmediacodec.exe
XXXmediaCodec_ver1.5245.0.exe

After that, Reboot, and post a new HijackThis log here in a reply

FYI: that 02 entry is: Adware downloader causing false spyware warnings and connecting to rogue "security sites", a member of the Trojan-Downloader.Zlob.Media-Codec aka NewMediaCodec malware family

Trojan.NewMediaCodec is a program that typically purports to be a needed upgrade to Windows Media Player in order to view adult oriented videos on certain websites.
Spource: Castlecops