C:\Windows\System32\svchost.exe - URL:Mal

essexboy · 2015-08-10T17:45:25.000Z

Have you ever had any comodo products u=installed on this computer ?

system · 2015-08-10T17:59:19.000Z

Yes, it is installed on my computer (I don’t know why and I don’t know what for)

essexboy · 2015-08-10T18:20:15.000Z

What is it that is installed ?

system · 2015-08-10T19:01:24.000Z

I don’t know. It seems to be a web browser like Chrome but I’m not using it; just found a folder in my computer with that name.

system · 2015-08-11T16:48:58.000Z

Any solution for this?

essexboy · 2015-08-11T16:56:08.000Z

Yes uninstall that comodo product

system · 2015-08-11T17:21:09.000Z

How? I don’t see it in the list of programs (Control Panel)

essexboy · 2015-08-11T17:30:26.000Z

Could you give me the file path for it and I will use FRST

system · 2015-08-11T21:46:35.000Z

I destroyed the whole folder

essexboy · 2015-08-12T13:49:24.000Z

Have the alerts ceased ?

system · 2015-08-12T16:16:00.000Z

No. Actually, I have received 6 more this morning.

essexboy · 2015-08-12T16:37:34.000Z

Could you screenshot and attach the latest popup from avast please

system · 2015-08-13T22:40:40.000Z

There it is!

essexboy · 2015-08-14T12:32:20.000Z

OK lets kill the folder

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: C:\Windows\System32\CompatTel RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

system · 2015-08-14T14:38:56.000Z

Done!

essexboy · 2015-08-14T14:54:12.000Z

Have the alerts now ceased ?

system · 2015-08-14T18:35:42.000Z

No alerts so far.

Thank you very much!

essexboy · 2015-08-14T18:44:25.000Z

OK let me know tomorrow if all is well

system · 2015-08-17T20:26:08.000Z

Everything is ok now.

Thank you very much!

essexboy · 2015-08-17T20:54:59.000Z

Use delfix to tidy up

Announcements