Really need help with CiD Virus

[Ruby202]

Hey again,
got a new thread lol

Here is my log file


thanks so much

 

[kimsland]

No

We require all the logs (there's 3 of them )
Have a look at:
UPDATED 8-step Viruses/Spyware/Malware Preliminary Removal Instructions

By the way, remove AVG Antivirus, and install Avira. Before you scan with updated Malwarebytes

 

[Ruby202]

ok thanks will do

Hey
here are the log files,
though the superantispyware didnt give me a logfile it just told me to restart my computer.

 

[kimsland]

Step 5

SuperAntiSpyware Home Edition Free Version
...

It's possible that the program will ask you to reboot in order to delete some files.

Obtain the SuperAntiSpyware log as follows:
Click on 'Preferences'.
Click on the 'Statistics/Logs' tab.
Under 'Scanner Logs' double click on 'SuperAntiSpyware Scan Log'.
It will then open in your default text editor,such as Notepad.
Attach the notepad file here on your reply

 

[Ruby202]

yay
got it

 

[kimsland]

You can uninstall SuperAntiSpyware now and Spybots S&D (this one should have already been uninstalled though )

Download Combofix
Lots of info on its use h e r e
Direct download h e r e

Save it to a location that you can easily find later (in Safe Mode) ie directly to C drive

Restart your computer to Safe Mode (by repeatedly pressing F8 on your keyboard before Windows starts)
Log into your Administrator account
Locate the previously downloaded Combofix
Double click on it to run, answering any prompts along the way
Note: during Combofix scan (lasting up to 10mins) your Desktop and clock may reset (all normal)

Once Combofix has finished, save the log file to be attached to a new reply
Restart back to Normal mode, and attach the Combofix log

 

[Ruby202]

There ya go

 

[kimsland]

Clear & Reset System Restore's Cache

Go to Start >> Run - type or copy/paste control sysdm.cpl,,4 and then press Enter
* Tick on the checkbox - Turn off System Restore on all drives
* Click Apply
Turn it back 'On' by unticking the same checkbox & click Apply, and then OK

How does it seem to be going now?

Edit:

Actually I haven't fully checked the HJT log yet, due to the above messing about
After restart, can you attach another HJT log

 

[Ruby202]

thanks i will do the above early 2moro as it is 1:32 am here lmao and i think im going to fall asleep on my keyboard, but yeh its actualy got no popups (crosses fingers) but i did an avira scan and it found like 19 trojans but i got rid of them at least its finding stuff id be panicing if it just didnt find anything and kept poping up.

I will get back to you 2moro with the hjk log

thanks
goodnight

 

[kimsland]

Well if you posted the HJT log now, in the morning you'd see what to do

 

[Ruby202]

there you go as you asked

 

[kimsland]

:zzz: .

 

[Ruby202]

lol what does that mean?

 

[kimsland]

There are no issues with your HJT log :grinthumb

The following are not required to start with Windows though, and will not have any ill effect if disabled (tick and fix)

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - Global Startup: Adobe Reader Speed Launch.lnk = C:\Program Files\Adobe\Acrobat 7.0\Reader\reader_sl.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Program Files\Java\jre6\bin\jqs.exe
O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe

Restart, confirm all is ok. Looking good

 

[Ruby202]

all is looking good thank you soo much
yous are lifesavers