Another URL:Mal, C:\windows\System32\svchost.exe problem

Viruses and worms
1

Greetings,

I believe my computer has been infected by a nasty little bugger, which Avast and also Malwarebyte are constantly blocking. If someone can help me out, it would be greatly appreciated. With this post, I have attached logs from Malwarebytes,OTL and aswMBR.

I also included Farbar Recovery Scan Tool.

Now, due to my lack of knowledge, I have also ran TDSSKiller, which I believe I shouldn’t from other similar help threads, which I will provide that in the next post.

Much thanks!

2

The TDSSKiller Log attached.

3

Hi archerz03. Welcome to avast! Forums

Right now our specialists must be out or in bed since most of them reside in Europe. So you must be patient and come back tomorrow.

It would be grate if you could attach a screen shotof the alert of whatever avast! or MBAM is blocking.

4

Hi archerz03,

For this tipe of malware we need to use powerfull tool. Run this diagnostic and I’ll check the logs tomorow and then I write the fix.

Please download Farbar Recovery Scan Tool (
http://www.mcshield.net/personal/magna86/Images/FRST_canned.png
) by Farbar and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

Once again we shall use FRST for additional checks. Re-run FRST/FRST64 by double-clicking:

[*]Type rpcss.dll into the Search: field in FRST then click the Search File(s) button.
[*]FRST will search your computer for files and when finished it will produce a log Search.txt in the same directory the tool is run.
[*]Please attach it to your reply.

5

Wow, thanks for the quick reply! You guys take your time. :slight_smile:

I have attached two screenshots, one from avast and the other from malwarebyte. The Object: from avast! and the Domain: from malwarebyte pop-ups changes.

I will post the logs from Farbar in the next post.

6

Attached is the Farbar Logs.

Thanks!