Inactive Unsure about cleaned computer

[Blueken]

This all started around a month before. I had a rouge antivirus (XP Security) randomly pop into my computer as I was searching on Youtube. I downloaded Zone Alarm on the recommendation of a friend but it only invited another rouge antivirus (AVS Securiy Live). I used your 8 step virus removal guide among many others and managed to delete the rouge antiviruses. This included AVAST! which used a boot scan to destroy alot of files, including many false positives. I had to make a new user to do use anything as the run34dll.exe was missing.
Yesterday, while I was typing in Microsoft Word, a bubble appeared which said something about a virus infecting the computer. The next second, a new rouge antivirus appeared (Antivirus Soft). I had scanned the computer in safe mode using AVAST! (which I canceled the moment it asked for a boot scan). The first full scan of the computer was with Malwarebytes which only deleted one trojan registry.

When I tried to use rKill, it canceled its own process (the black screen appeared and said that it was killing known malware processes). Something also seems to be wrong with gmer aswell.

I have also downloadeded SuperAntispyware and scanned the computer with it. The program deleted many countless viruses and I'm unsure of what to do next.

Should I go on and clean the computer? Am I not still not clean? (I've attached logs to scanners I could get access to).

Help?

 

[Broni]

Something also seems to be wrong with gmer aswell.

What happens?

Please download ComboFix from Here or Here to your Desktop.

**Note: In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved directly to your desktop**

1. Please, never rename Combofix unless instructed.
2. Close any open browsers.
3. Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.
   • Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
   • Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.
   NOTE1. If Combofix asks you to install Recovery Console, please allow it.
   NOTE 2. If Combofix asks you to update the program, always do so.
   • Close any open browsers.
   • WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
   • Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
   • If there is no internet connection after running Combofix, then restart your computer to restore back your connection.
4. Double click on combofix.exe & follow the prompts.
5. When finished, it will produce a report for you.
6. Please post the "C:\ComboFix.txt"

**Note: Do not mouseclick combofix's window while it's running. That may cause it to stall**

Make sure, you re-enable your security programs, when you're done with Combofix.

DO NOT make any other changes to your computer (like installing programs, using other cleaning tools, etc.), until it's officially declared clean!!!

 

[Blueken]

Gmer scans the computer until it gets to a certain point and then it becomes non-responsive and closes down.


Now I can't even get into safe mode because the computer just constantly restarts before it gets to the user menu. I'm on a library computer now which is how I was able to get here.

 

[Broni]

Let's see, if we can look at your computer booting from an external source.

Please download OTLPE (filesize 120,9 MB)

• When downloaded double click on OTLPENet.exe and make sure there is a blank CD in your CD drive. This will automatically create a bootable CD.
• Reboot your system using the boot CD you just created.
  • Note : If you do not know how to set your computer to boot from CD follow the steps here
• Your system should now display a REATOGO-X-PE desktop.
• Depending on your type of internet connection, you should be able to get online as well so you can access this topic more easily.
• Double-click on the OTLPE icon.
• Ensure the box "Automatically Load All Remaining Users" is checked and press OK
• OTL should now start.
• Press Run Scan to start the scan.
• When finished, the file will be saved in drive C:\OTL.txt
• Copy this file to your USB drive if you do not have internet connection on this system
• Please post the contents of the OTL.txt file in your reply.