my comp won't shut off, is there a malware?

okay, I've no clue how to figure out if one thing is a malware, virus, or spyware.. but anyway... my comp won't shut off, even if I hold the power button... now, a friend told me to check the Windows Task Manager and check out the process tab. Then google everything to see what they're about.. and I'm suspecting quite a few to be dangerous... and oh, I'm still going through the list, but here's to of them so far:

alg.exe
svchost.exe (since I'm not sure what's running)
acs.exe
lsass.exe
winlogon.exe
avp.exe.exe (there's two, one under SYSTEM, and another under 'Owner', comp name)
& AdriILE.exe

well, I'm half way through checking everything out.. but anyway, yeah, I've been reckless of downloading and installing a bunch of stuff, now I'm trying to get everything back to normal... so, please help!

*ADDED*

also, oh no I forgot!

 

*ADDITIONAL*
csrss.exe
smss.exe
mDNSResponder.exe
acsd.exe
ctfmon.exe
wanmpsvc.exe


aahhh... sorry, some of them could be safe.. but, from what I found out, they could be virus/etc. in disguise.. so, can anyone tell me please how I can fix if there's any a problem... thanks very much..

 

http://www.majorgeeks.com/images/grenade.gifWelcome to MajorGeeks.com!http://www.majorgeeks.com/images/grenade.gif

Please follow the instructions in the below link and attach the requested logs when you finish these instructions.

• READ & RUN ME FIRST. Malware Removal Guide

• If something does not run, write down the info to explain to us later but keep on going.

• Do not assume that because one step does not work that they all will not.

Notes:

1. If you run into problems trying to run theREAD & RUN ME or any of the scans in normal boot mode. You can run steps in safe boot mode but make sure you tell us what you did later when you post logs. See the below if you do not know how to boot in safe mode:
   
   • Starting your computer in Safe mode
2. If you have problems downloading on the problem PC, download the tools on another PC and burn to a CD. Then copy them to the problem PC. You will have to skip getting updates if (and only if) your internet connection does not work. Yes you could use a flash drive too but flash drives are writeable and infections can spread to them.

 

hold on, I got the log from HijackThis... I'm going to do bigarrick's next:

• Edit by bjgarrick: Inline HJT log removed. READ & RUN ME sticky not followed.

 

how am I suppose to do READ & RUN... (please read)

I'm in the part where I have to go to Normal Startup.. I was in Selective Startup.. anyway, I have to restart right? but the problem of my computer is that it won't restart or turn off in the first place! please help!

 

Please see my previous post, see the procedure for your OS and then post the requested logs.

 

very quick question about RUN & READ ME

okay, I'm not using my computer that has a malware, but anyway, my problem was, I couldn't reboot or shut off the comp. Another thing was, in msconfig, I was in Selective Start Up. So, I had to go to Normal Startup right? but I couldn't restart, so I skipped that step. But when I did the SUPERAntiSpyware (I have XP), it removed a couple of adwares, so anyway, for some reason I manage to reboot the computer. Now it can reboot or shut off.
Now my question is, is it okay if I restart to the beginning and do it all over again? if not, can I redo the entire step once I finished it once?

oh, and currently the computer is shut off because for some reason, over night, the computer got an error (went to blue screen) when I was doing the Search&Destroy (SpyBot). So, I'll get to everything when I get home

Thank you

 

I'm completely sorry. Anyway. I posted a new thread

"okay, I'm not using my computer that has a malware, but anyway, my problem was, I couldn't reboot or shut off the comp. Another thing was, in msconfig, I was in Selective Start Up. So, I had to go to Normal Startup right? but I couldn't restart, so I skipped that step. But when I did the SUPERAntiSpyware (I have XP), it removed a couple of adwares, so anyway, for some reason I manage to reboot the computer. Now it can reboot or shut off.
Now my question is, is it okay if I restart to the beginning and do it all over again? if not, can I redo the entire step once I finished it once?

oh, and currently the computer is shut off because for some reason, over night, the computer got an error (went to blue screen) when I was doing the Search&Destroy (SpyBot). So, I'll get to everything when I get home

Thank you"

I qouted this from a new thread that I posted.. Also, I'm terribly sorry for creating that new thread, I should've posted it here.

 

Re: very quick question about RUN & READ ME

okay, so I just did all the instructions in RUN & READ ME. But, I skipped some like the ones I posted before. Also, in ComboFix, I didn't get the picture (in the instructions) where it says "TYPE 1 to continue, or 2 to abort", but I guess that's okay? Because everything else went fine. That may have happened because I probably didn't follow the directions properly, I guess.
Anyway, I can reboot the comp any time now too. Although, before I did all these, I installed Warcraft III and for some reason it doesn't play. I don't know if the Trojans/adwares has something to do with it. But anyway, here are my logs from:
SUPERAntiSpyware
MalwareBytes
ComboFix
& MGTools (although I'm not sure which ones you want, so I'll just post the first three for now)


PS: I also did the SpyBot one, if you need the log (do I have one), I can post it...
NOTES: From SUPERAntiSpyware, I believe that it removed two adwares, and this is when the computer was able to reboot. Then, in the SpyBot S&D, I think this was the one that was able to remove a Trojan (I think the name was Virtuamonde.dll. I'm not sure about the extension as well as the name. It was something like that)

Thank you very much.

 

I'm terribly sorry about the malwarebyte instructions... anyway, here they are:

well, I'm not sure if I did the MGLogs part correct... but, I believe that's the zip that you want.... but I re-did the C:\MGTools.exe again... but I'm not sure if there's going to be a second log..

thanks

 

thanks you very much... the computer doesn't have problems anymore... Although there's this one thing (about Kaspersky) but you don't have to answer it... Kaspersky's anti-spam is not working...

okay, thank you very much. When I get home, I will install Java Runtime 8.

Thanks again

 

two last things... do you want me to uninstall Windows Messenger? also, is it okay to remove all the spywares? Because I'll be more careful from now on, so I doubt I'll need it.

Oh, another thing... Kaspersky is detecting this 'Hidden Data Sending' done by SUPERAntiSpyware... is that normal?

 

I will remove all (SAS, MalwareByte, ComboFix, Cleaner, Spybot). Although, Kaspersky has been detecting that ComboFix bringing virus to the computer. Kaspersky is detecting threats and neutralizing them, and they're linked to ComboFix. So, I guess I'll uninstall them. And I did read that ComboFix is found as Heur.Invader by Kaspersky. But yeah, I just want to bring everything back to normal.

Thanks again