Help to read combofix log

Attach please the rest of the logs from running our malware removal procedure:

• SUPERantispyware
• Malware Bytes
• Root Repeal (If you were able to run it)
• C:\MGlogs.zip

 

Not seeing alot to do here, let's run the below and see how your computer behaves afterwards.

• Did avg alert you to this?
• What was the exact file path of the threat it was finding? Did it give a path?
• Are you experiencing any redirects?

Eseguito da: c:\users\Sh@wn\Downloads\ComboFix.exe <--- You need to move combofix directly onto the desktop as requested before we continue.

Now we need to use ComboFix

• Make sure that combofix.exe that you downloaded while doing the READ & RUN ME is on your Desktop but Do not run it!
  • If it is not on your Desktop, the below will not work.
• Also make sure you have shut down all protection software (antivirus, antispyware...etc) or they may get in the way of allowing ComboFix to run properly.
• If ComboFix tells you it needs to update to a new version, make sure you allow it to update.
• Open Notepad and copy/paste the text in the below quote box. Ensure you scroll down to select ALL the lines:

Code:

KILLALL::

Driver::
czrhyqly
wriuaawp
File::
c:\users\Sh@wn\AppData\Roaming\hwzypv.dat
c:\windows\system32\drivers\wriuaawp.sys

• Save the above as CFscript.txt and make sure you save it to the same location (should be on your Desktop) as ComboFix.exe
• At this point, you MUST EXIT ALL BROWSERS NOW before continuing!
• You should have both the ComboFix.exe and CFScript.txt icons on your Desktop.
• Now use your mouse to drag CFscript.txt on top of ComboFix.exe
  
  http://img.photobucket.com/albums/v666/sUBs/CFScriptB-4.gif
  
  
• Follow the prompts.
• When it finishes, a log will be produced named c:\combofix.txt
• I will ask for this log below

Note:

Do not mouseclick combofix's window while it is running. That may cause it to stall.

Now run CCleaner.

Now run the C:\MGtools\GetLogs.bat file by double clicking on it. Then attach the new C:\MGlogs.zip file that will be created by running this and answer any questions I may have asked.