one more ! svchost.exe infected !

Hi,
First, sorry for my bad english.

When I use thunderbird just after start the pc, Avast open a pop up with

URL: hxxp://bestdriverstar.net/4141/…
Infection: URL:Mal
c: \windows\system32\svchost.exe

So, I have used FRST64, restarted the pc, and scan again with FRST64. Here is addition.txt and FRST.txt of the second scan of FRST64.
Is there someone who can say me what to do next, please.

Thanks a lot.

PHE

Could you let me know if this stops the alerts

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

Hi essexboy

Here the log.
No more avast pop up, now.

Thank a lot. Have a good day

PHE

Remove tools

Download and run Delfix
Select the options as shown

https://dl.dropboxusercontent.com/u/73555776/delfix.JPG

Hi essexboy,

It’s done. Something else to do ?

Nope that’s it … Enjoy :slight_smile:

Thank a lot Essexboy. (x10000 for all who forget to thank people like you)

Have a good day.