Need Help with Syswow64/svchost.exe

Viruses and worms
1

I keep getting a warning and I need to know what to do. I hope someone can help.

Log:
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 29-10-2014 01
Ran by In the Flesh (administrator) on INTHEFLESH-PC on 29-10-2014 15:17:39
Running from C:\Users\In the Flesh\Desktop
Loaded Profile: In the Flesh (Available profiles: In the Flesh)
Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: English (United States)
Internet Explorer Version 11
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(AMD) C:\Windows\System32\atiesrxx.exe
(AMD) C:\Windows\System32\atieclxx.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(SEIKO EPSON CORPORATION) C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe
(Seiko Epson Corporation) C:\Windows\System32\escsvc64.exe
(Acer Incorporated) C:\Program Files (x86)\eMachines\Registration\GREGsvc.exe
(Acer Incorporated) C:\Program Files\eMachines\eMachines Updater\UpdaterService.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe
(Alcatel-Lucent) C:\Program Files (x86)\Common Files\Motive\McciCMService.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Malwarebytes Corporation) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILBE.EXE
(Spotify Ltd) C:\Users\In the Flesh\AppData\Roaming\Spotify\spotify.exe
(Spotify Ltd) C:\Users\In the Flesh\AppData\Roaming\Spotify\Data\SpotifyWebHelper.exe
(SEIKO EPSON CORPORATION) C:\Windows\System32\spool\drivers\x64\3\E_IATILBE.EXE
(AVAST Software) C:\Program Files\AVAST Software\Avast\avastui.exe
() C:\Program Files (x86)\eMachines\Hotkey Utility\HotkeyUtility.exe
(SEIKO EPSON CORPORATION) C:\Program Files (x86)\EPSON Software\Event Manager\EEventManager.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Users\In the Flesh\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\In the Flesh\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\In the Flesh\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\In the Flesh\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
() C:\Users\In the Flesh\AppData\Roaming\Spotify\Data\SpotifyHelper.exe
(Advanced Micro Devices Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\MOM.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(ATI Technologies Inc.) C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CCC.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe
(Microsoft Corporation) C:\Windows\System32\taskmgr.exe

2

Attach logs

Instructions here https://forum.avast.com/index.php?topic=53253.0

3

Malwarebytes Anti-Malware
www.malwarebytes.org

Scan Date: 10/29/2014
Scan Time: 3:34:43 PM
Logfile: Malwarebytes Anti-Malware.txt
Administrator: Yes

Version: 2.00.3.1025
Malware Database: v2014.10.29.07
Rootkit Database: v2014.10.22.01
License: Premium
Malware Protection: Enabled
Malicious Website Protection: Enabled
Self-protection: Disabled

OS: Windows 7 Service Pack 1
CPU: x64
File System: NTFS
User: In the Flesh

Scan Type: Threat Scan
Result: Completed
Objects Scanned: 356016
Time Elapsed: 26 min, 28 sec

Memory: Enabled
Startup: Enabled
Filesystem: Enabled
Archives: Enabled
Rootkits: Enabled
Heuristics: Enabled
PUP: Enabled
PUM: Enabled

Processes: 0
(No malicious items detected)

Modules: 0
(No malicious items detected)

Registry Keys: 0
(No malicious items detected)

Registry Values: 0
(No malicious items detected)

Registry Data: 0
(No malicious items detected)

Folders: 0
(No malicious items detected)

Files: 0
(No malicious items detected)

Physical Sectors: 0
(No malicious items detected)

(end)

4

aswMBR version 1.0.1.2161 Copyright(c) 2014 AVAST Software
Run date: 2014-10-29 16:11:47

16:11:47.429 OS Version: Windows x64 6.1.7601 Service Pack 1
16:11:47.429 Number of processors: 2 586 0x200
16:11:47.432 ComputerName: INTHEFLESH-PC UserName: In the Flesh
16:11:49.705 Initialize success
16:11:49.706 VM: initialized successfully
16:11:49.740 VM: Amd CPU supported virtualized
16:11:51.666 VM: supported disk I/O ataport.SYS
16:11:56.662 AVAST engine defs: 14102902
16:12:01.256 Disk 0 (boot) \Device\Harddisk0\DR0 → \Device\Ide\IdeDeviceP2T0L0-4
16:12:01.262 Disk 0 Vendor: WDC_WD5000AAKX-221CA1 17.01H17 Size: 476940MB BusType: 11
16:12:01.374 Disk 0 MBR read successfully
16:12:01.381 Disk 0 MBR scan
16:12:01.392 Disk 0 Windows 7 default MBR code
16:12:01.399 Disk 0 Partition 1 00 27 Hidden NTFS WinRE NTFS 20000 MB offset 2048
16:12:01.419 Disk 0 Partition 2 80 (A) 07 HPFS/NTFS NTFS 100 MB offset 40962048
16:12:01.432 Disk 0 default boot code
16:12:01.443 Disk 0 Partition 3 00 07 HPFS/NTFS NTFS 456838 MB offset 41166848
16:12:01.479 Disk 0 scanning C:\Windows\system32\drivers
16:12:11.976 Service scanning
16:12:33.452 Modules scanning
16:12:33.472 Disk 0 trace - called modules:
16:12:33.503 ntoskrnl.exe CLASSPNP.SYS disk.sys ataport.SYS PCIIDEX.SYS hal.dll msahci.sys
16:12:33.516 1 nt!IofCallDriver → \Device\Harddisk0\DR0[0xfffffa8004f19640]
16:12:33.529 3 CLASSPNP.SYS[fffff880011d143f] → nt!IofCallDriver → \Device\Ide\IdeDeviceP2T0L0-4[0xfffffa80049b0680]
16:12:34.980 AVAST engine scan C:\Windows
16:12:38.506 AVAST engine scan C:\Windows\system32
16:15:36.304 AVAST engine scan C:\Windows\system32\drivers
16:15:50.312 AVAST engine scan C:\Users\In the Flesh
16:21:05.116 Disk 0 MBR has been saved successfully to “C:\Users\In the Flesh\Desktop\MBR.dat”
16:21:05.137 The log file has been saved successfully to “C:\Users\In the Flesh\Desktop\aswMBR.txt”

5

Could you attach the FRST logs please