Many viruses

[frannip]

holy cow what a mess

I PURCHASED SpyDoctor because all the anti-whatever "free" applications I had didn't catch the infections that SpyDoctor did (even with recent updates). Can't clean what isn't found, right? (that included malwarebytes). I purchased it via another PC that is clean and not the infected one.

I ran it, so far no more pop-ups, no more security alert warnings. Looks GOOD!! IE 7 and mozilla are both working well and no more "not found" websites on sites that I know are good (for example, mail.yahoo.com).

Also, AVG anti-virus was finding all those same viruses again but this time in the system restore saved files. I didn't know it was active. So I went and turned it off which I THINK deletes all the previous restore points. Just in case though, I'm running a full antivirus scan again.

Once that's done I will reboot, run all scans one last time, reboot again and THEN turn back on the system restore.

should I then run another HJT scan for your review??? Do you want any other logs to view? Reply and I'll attach whatever you want.

THANKS SO MUCH for all your help (everyone who's replied).

 

[kritius]

Download Deckard's System Scanner (DSS) to your Desktop. Note: You must be logged onto an account with administrator privileges.

1. Close all applications and windows.
2. Double-click on dss.exe to run it, and follow the prompts.
3. When the scan is complete, two text files will open - main.txt <- this one will be maximized and extra.txt<-this one will be minimized
4. Attach the main.txt and the extra.txt to your post. in your reply

This will force a HijackThis log as well so you dont need to worry about running one.

 

[frannip]

So far so good ...

Here is the attachments you've requested. I did take a peak and am not convinced that it's ok. Saw a couple sketchy lines. But so far the machine seems like its ok except a couple unusual things. When I rebooted SpyDr did not automatically start, I had to manually do it. The second reboot, AVG did not automatically start, I had to start it. Just seems like something is still trying to work its dirty magic.

Let me know your thoughts.