may have gotten "hi,hello" infection from unintended mail from friend

I went to the link on the first "Hi,Hello" trick email because it was from a friend. computer started acting strange, had to sign in to my yahoo home page every time. I changed my yahoo password and things seem back to normal. More "hi,hello" mailings from strangers have been sent to spam and deleted. I was warned that the problem could be waiting on a trigger to go off so I went to the malwarebytes site that came up from a hello virus search. The malwarebytes was recomended by trusted source. I studied hard and ran the read&run me first skipping no steps to best of abilities. Only got hits on rogue killer program. I am sending 2 rogue killer reports I have from 4 prog. runs as directed. other 3 programs showed nothing found and I only have one other report (log.xml)which would not upload, says invalid file. It just tells how many files checked and it took 124 seconds. I did not delete the three items on the roguekiller program run results following your instructions and because they are window registry items. The reports I am sending do not show what I saw after running rogue killer. Pardon my inexperience.
The laptop in question is working great as of now so I may not have a problem. I am running this test to be safe as I have had a bad case before.
Appreciate the help,
hbgb

 

Tim, to say I'm having a hard time would be a severe understatement.Rogue killer did not seem to download right (my computer would not allow me to save it going through the steps but it was there on the desktop after I tried. actually it was there twice cause I did it 2 times.)but was the only run to produce a good log on the desktop. I cannot find the mbamlog or mglog.zip where they should be so I am tempted to run the malwarebytes, hitmanpro and mgtools again to try and generate a log but am hesitant per your instructions to only run them once. I am attaching another log (hijackthislog) cause it is all I can find at the moment. I've watched the tutorals and might have learned a little but what are combo picks? Maybe the 4programs I'm trying to download and run is the best I can figure. What do you suggest, try to run the tools again accorking to original instructions?
Your help and patience are greatly appreciated,
hbgb

 

small window says C:\windows\system32\cmd.exe
small batch file is just used to automatically run all of the scans that are part of the mgtools coll. It is automatically run by mgtools .exe during the install and can be run anytime thereafter.
running scanwith GetUnkeys.bat by chas and shadowputer
zip I/O error ermission denied zip error could not create output file C:/MGlogs.zip running scans will GetRunKey.bat
note, ignore any errormessagesaboutnot finding any registry keys just wait for program to finish
access denied(several lines under one another
comp. needs permision to continue
click continue or cancel and is in continuous loop , will probably have to force a shutdown and restart (message is in black and white)
please advise
hbgb

 

Tim, sorry for the delay, computer is at work only. I got some help and found how easy it is to move from desktop to cdrive, duh. Learning every day here at camp...
no error messages came from running both scans.
dialogue said running scanwith getrunkey.bat note: ignore any err. mess.wait for prog to finish running. adding run keys <160 bytes sec.><deflated 80%>
next, running scan with shownew.bat.
WARNING if you see popup sayong steelweerks stopped working wait for close prog to appear and click to cont.
....never appeared.
scanning wait...finding copies of actprxy.dll...checking for .com files to delete, they will only print if deleted.
Listing COM, DLL, EXE, and SYS files in C:\Windows. Locating (previously mentioned files) in C:\Windows\system32 - recursive. Same for DLL,EXE and SYS. Then adding newfiles.txt, ffdata.txt, and winfiles.txt
then command prompt C:\Mgtools blinks at the bottom of black screen.
There may be a new mglogs zip file in cdrive, I am attaching to reply.
Thank you,gb

 

great if the scans find no trouble. I grew concerned when I had to sign in every time I went to my yahoo home page(though I chose to stay on for 2 weeks). The ATT yahoo macaffee av software gave a hint of an issue like a previous real virus "you're computer is at risk, I closed the popup and went directly to mcaffee thru start menu all showed to be on and protected so I ran a scan that showed 0 issues of any kind. It used to find at least some silly little something. That made me think something had highjacked macaffee like it did before. I'm still getting the hi or hello emails from strangers that go to spam and I delete without opening.
After okaying macaffe's warning about a possibly dangerous program and claimed it quarantined an infected file the combofix ran and a popup kept coming up that said windows cannot find NIRKMD . Make sure you type the name correctly and try again. I kept clicking ok and it went through 49 stages and it produced a log I will try to attach.
I think I got it done. I'll await your instructions.
Thanks,gb


gb