The instruction at "0x7c923845" referenced memory at "0x00000000".

General Topics
1

Since about Thanksgiving (over a month now), I’ve been getting problems with svchost.exe and Norton Antivirus is reporting intrusion attempts whenever I use a search engine to find a website. I was content with just allowing Norton to continue blocking the intrusions, but occasionally they get through and redirect my web traffic to an ad-based site. Also, svchost.exe generally either has the error described above or memory leaks to 600,000K+ in the task manager. I am decently computer literate, but I am having trouble following the helpful directions of others in the forum with this problem because it requires me to post logs, get specific help, etc.

I have run several virus scans. I ran a boot scan using Avast! I have ran Malwarebytes Anti-Malware, a Windows Live web scan, Norton Security Suite full scan, etc. I do not have logs of all these scans, but various virus related files have been found and removed by all of the programs.

Can somebody please walk me through this? I want to have this system running a little more cleanly than it currently is.

Thanks!

2
I want to have this system running a little more cleanly than it currently is.
Why not go for a entirely clean system?

First remove Norton (see HERE)

Than follow the instructions in the malware removal section in my signature.

3

Welcome to the forum genovm. :slight_smile:
Here are the instructions for removing your current anti virus program and installing avast!

How2RemoveYourAntiVirusProgram.html - https://docs.google.com/leaf?id=0B-vSic0iJgyeYTY4MGZlOWUtMTJkOS00NDNkLTgzMWUtOWZiM2NhNTE5YjRk&hl=en

How2Install avast! 5.x: Free Antivirus:
https://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=564

This should give you a clean install if you download all the required programs and then totally remove Norton and avast! rebooting your computer between each step and then re-installing avast! on a clean machine with no other antivirus programs present.

4

Alright, I have uninstalled the Norton Security Suite and installed Avast.

Next steps?

5

Enjoy avast! :slight_smile:

6

I was hoping to gain assistance in removing the problem that is redirecting my web traffic and blocking me from accessing the windows updates webpage. Right now I have to access the windows updates from a different webpage and manually install each one. If I try to access windows update in any browser, I get a message telling me the webpage is down. I am running a Windows XP Professional SP3 machine.

7

Have you done a Boot time scan with avast! and also a full scan with Malware Bytes ?
If not, please do that and let us know the results.
Hopefully Essexboy will step in here to give you further assistance.

8

Stepping ;D Could be TDL4 so we will check for that first

Please read carefully and follow these steps.

[*]Download TDSSKiller and save it to your Desktop.
[*]Extract its contents to your desktop.
[*]Once extracted, open the TDSSKiller folder and doubleclick on TDSSKiller.exe to run the application, then on Start Scan.

http://i466.photobucket.com/albums/rr21/JSntgRvr/TDSSKillermain.png

[*]If an infected file is detected, the default action will be Cure, click on Continue.

http://i466.photobucket.com/albums/rr21/JSntgRvr/TDSSKillerMal-1.png

[*]If a suspicious file is detected, the default action will be Skip, click on Continue.

http://i466.photobucket.com/albums/rr21/JSntgRvr/TDSSKillerSuspicious.png

[*]It may ask you to reboot the computer to complete the process. Click on Reboot Now.

http://i466.photobucket.com/albums/rr21/JSntgRvr/TDSSKillerCompleted.png

[*]If no reboot is require, click on Report. A log file should appear. Please copy and paste the contents of that file here.
[*]If a reboot is required, the report can also be found in your root directory, (usually C:\ folder) in the form of “TDSSKiller.[Version][Date][Time]_log.txt”. Please copy and paste the contents of that file here.

THEN

Download OTL to your Desktop

[*]Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.
[*]Select All Users
[*]Under the Custom Scan box paste this in

[b]netsvcs
%SYSTEMDRIVE%*.exe
/md5start
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
/md5stop
%systemroot%*. /mp /s
CREATERESTOREPOINT

[/b]

[*]Click the Quick Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.

[*]When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.