Avast WEBforum

Other => Viruses and worms => Topic started by: msmil on June 06, 2012, 08:48:35 PM

Title: globalroot\systemroot\svchost.exe
Post by: msmil on June 06, 2012, 08:48:35 PM
I am having problems with this-  I have avast in silent gaming mode bcz it is going off constantly.  I have read some other threads about this topic and I have attached the logs.  I ran combofix but I am still having the same problem. 

Thanks in advance
Title: Re: globalroot\systemroot\svchost.exe
Post by: CharleyO on June 06, 2012, 10:06:32 PM
***

If avast is going off constantly, what are the warnings given by avast?


***
Title: Re: globalroot\systemroot\svchost.exe
Post by: essexboy on June 06, 2012, 10:52:48 PM
Could you post a screenshot of the alert please and attach the OTL logs
Title: Re: globalroot\systemroot\svchost.exe
Post by: msmil on June 07, 2012, 12:42:21 AM
Infection Details
URL: "http://shopspotsshop.com/search?q
Process: "\\.\globalroot\systemroot\svchost.exe"
Infection: "URL:Mal"

Warn your friends to avoid this website
Threat stats for last 30 days
Blocked infected sites: 81,948,600
Infected domains: 487,175


Is this sufficent?
Title: Re: globalroot\systemroot\svchost.exe
Post by: msmil on June 07, 2012, 01:35:54 AM
Sorry, missed these
Title: Re: globalroot\systemroot\svchost.exe
Post by: essexboy on June 07, 2012, 08:44:10 PM
Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

If you have Malwarebytes 1.6 or better installed please disable it for the duration of this run
To disable MBAM
Open the scanner and select the protection tab
Remove the tick from "Start with Windows"
Reboot and then run OTL
(http://i1224.photobucket.com/albums/ee362/Essexboy3/mbamstop.jpg)

Run OTL
THEN

Download the latest version of TDSSKiller from here (http://support.kaspersky.com/downloads/utils/tdsskiller.exe) and save it to your Desktop.
 
 
[list=1]
 
(http://dl.dropbox.com/u/73555776/TDSSEnd.JPG)
 
Please copy and paste its contents on your next reply.