Minor spyware/virus problem

[LanLing]

Hi everyone,
I'm guessing that my computer got infected by a minor spyware/virus, though not 100% sure, these are the symptoms:
- I was browsing the web then suddenly the screen went black and a few seconds later, a full-screen popup with red background by Microsoft Smartscreen came up, saying it has blocked the contents of a page I'm trying to visit as it's harmful to my computer. I was browsing in firefox and this fullscreen popup was opened in IE. I'm unable to close or move it, but otherwise it functions as any other IE window
- Task manager will open but remain stuck behind this fullscreen popup, so I'm unable to access it
- Alt-tab switching between programs work, however I still can't access task manager as it's not in the list of alt-tab
- Task bar at bottom is gone (start button, icons, tasks, etc)
- Ctrl+shift+del works normally, I'm able to log off/restart/etc
- The moment I try to log off/shut down/restart, the fullscreen popup will be gone revealing my normal windows, but only for a few seconds as my computer is shutting down/logging off. I cannot cancel the shutting down/logging off process
- This will happen every time upon logging in

The reason I call it minor is because I was able to get my normal computer back with just a system restore to a week ago, so it wasn't that powerful. But just to be 100% sure to eliminate this threat, is a system restore enough? Are all the spyware files gone? What else should I do at this point? I have Symantec Antivirus corporate edition (my father is an IT person so he got this full edition from his company).

Thanks.

 

[johnb35]

To be sure please do the following.

Please download Malwarebytes' Anti-Malware from here or here and save it to your desktop.

• Double-click mbam-setup.exe and follow the prompts to install the program.
• At the end, be sure a checkmark is placed next to
  • Update Malwarebytes' Anti-Malware
  • and Launch Malwarebytes' Anti-Malware
• then click Finish.
• If an update is found, it will download and install the latest version. Please keep updating until it says you have the latest version.
• Once the program has loaded, select Perform quick scan, then click Scan.
• When the scan is complete, click OK, then Show Results to view the results.
• Be sure that everything is checked, and click Remove Selected.
• A log will be saved automatically which you can access by clicking on the Logs tab within Malwarebytes' Anti-Malware

If for some reason Malwarebytes will not install or run please download and run Rkill.scr, Rkill.exe, or Rkill.com. If you are still having issues running rkill then try downloading these renamed versions of the same program.

EXPLORER.EXE
IEXPLORE.EXE
USERINIT.EXE
WINLOGON.EXE

But DO NOT reboot the system and then try installing or running Malwarebytes. If Rkill (which is a black box) appears and then disappears right away or you get a message saying rkill is infected, keep trying to run rkill until it over powers the infection and temporarily kills it. Once a log appears on the screen, you can try running malwarebytes or downloading other programs.



Download the HijackThis installer from here.
Run the installer and choose Install, indicating that you accept the licence agreement. The installer will place a shortcut on your desktop and launch HijackThis.

Click Do a system scan and save a logfile

Most of what HijackThis lists will be harmless or even essential, don't fix anything yet.

When the hijackthis log appears in a notepad file, click on the edit menu, click select all, then click on the edit menu again and click on copy. Come back to your reply and right click on your mouse and click on paste.

Post the logfile that HijackThis produces along with the Malwarebytes Anti-Malware log