SysWOW64\svchost.exe alert

Viruses and worms
1

I’m getting this alert of a malicious website or file very frequently
It’s the same as in this topic i found via google. Should I do the same?

http://forum.avast.com/index.php?topic=132833.0

I ran already a couple of programs, wich didn’t work for me.
The only program wich seems to work is Roguekiller, although it’s only temporarily. After starting up my computer again, the alert reappeers, and I’m getting sick of it. I’ve asked a lot of people already, but no one seems to be able to help me

2

Hi,

Do not attempt other fixes from other threads.

Go here and attach the following logs. OTL MBAM & aswMBR

http://forum.avast.com/index.php?board=2.0

Then I can get someone.

3

The logs from OTL and MBAM are attatched to this post, but aswMBR freezes after a few minutes en crashes so I haven’t got a log of it yet

4

Hi,

I’m seeing a lot of “bloatware” on your system. As for aswMBR can you run in safe mode and try then??

Since OTL is what we need, I’ve asked a remover to come.can you confirm you live in Belgium?

5

I’ve tried a couple of times to run it in safe mode, but the same problem of it crashing keeps coming up!

ps. You’ve learned me a new word, never heard of bloatware before, had to google it :stuck_out_tongue:

thanks for your help!

6

Can you do something with an MBR report from Roguekiller? that seems to work if I run it!
I’ll add it here

7

Please download Farbar Recovery Scan Tool by Farbar and save it to your desktop.

Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them.
Only one of them will run on your system, that will be the right version.

[*]Double-click to run it. When the tool opens click Yes to disclaimer.
[*]Under Optional Scan ensure “List BCD” and “Driver MD5” are ticked.
[*]Press Scan button.
[*]It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
[*]The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

8

Here it is, this went very fast!

Thank you already for your help!

9

Step 1.

Download attached fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.

Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.

The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.

====================================================================

Step 2.

Please download AdwCleaner by Xplode and save to your Desktop.

Double click on AdwCleaner.exe to run the tool.

[*]Click on the Scan button.
[*]After the scan has finished click on the Clean button.

Press OK when asked to close all programs and follow the onscreen prompts.
Press OK again to allow AdwCleaner to restart the computer and complete the removal process.

[*]After rebooting, a logfile report (AdwCleaner[S0].txt) will open automatically.
[*]Post logfile will also be saved in the C:\AdwCleaner folder.

====================================================================

Step 3.

  1. Please download ComboFix by sUBs from here and save it to your Desktop.
    If you are unsure how ComboFix works please read this guide carefully.
    note: ComboFix must be downloaded to your Desktop.
  1. Temporarily disable your AntiVirus program, usually via a right click on the System Tray icon. They may interfere with Combofix.
    If you are unsure how to do this please read this or this Instruction.

Instructions how to disable avast:

[*]Right click on the avast! system tray icon (
http://www.mcshield.net/pg/images/avast5.png
) in the lower right corner of the screen and scroll up to avast! shield controls;
[*]In the menu that appears, choose Disable Permanently. When you are prompted to turn off security, click Yes.

Note: Do not forget to turn back on this option after the cleaning by choosing avast! shield controls > Enable all shield options.

  1. Run ComboFix. Click on I Agree!

ComboFix will check if there is a newer version of ComboFix available.
Click Yes if prompted to download.
ComboFix will display DISCLAIMER OF WARRANTY ON SOFTWARE.
Click Yes to allow ComboFix to continue.
If Recovery Console is not installed, ComboFix will offer download & installation.
Click Yes to allow ComboFix to install Recovery Console.
Note:Do not mouse-click Combofix’s window while it is running.
If you see a message like “Illegal operation attempted on a registry key that has been marked for deletion” just restart computer once more.

  1. When the tool is finished, it will produce a log report for you. (typical location: C:[b]ComboFix.txt[/b] )
    Attach log reports ( ComboFix.txt) back to topic.
10

These steps took some time, especcially the last step, but here they are!

11

Good, how is the situation now?

12

I haven’t had any alerts anymore, so I think it worked!

Thank you very much! It was driving me crazy not being able to get rid of it!

Thanks a lot!

13

Good :wink:

Please download DelFix by “Xplode” to your Desktop.

Run the tool and check the following boxes below;

[] Remove disinfection tools
[] Create registry backup
[*] Purge System Restore

Now click on “Run” button. Wait for the programme completes his work.
All the tools we used should be gone.
Tool will create and open an log report (DelFix.txt)
Note: The report will also be stored on C:\DelFix.txt

I don’t need DelFix log report.

14

Everything is gone, computer running smooth!

Thank you very much, you’ve made my day!