Author Topic: URL MAL svchost.exe PLEASE HELP!  (Read 2578 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
URL MAL svchost.exe PLEASE HELP!
« on: June 17, 2015, 01:58:24 AM »
 My avast keeps popping up every 2 minuets say it has blocked an infection from the file c:\\windows\system32\svchost.exe
I have ran multiple scans using avast and other virus scanners but none of them detect it.

Help is greatly appreciated in advance

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31072
  • Watching (over?) you
    • Malware removal, Biljart and other things.

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: URL MAL svchost.exe PLEASE HELP!
« Reply #2 on: June 17, 2015, 04:34:02 AM »
Monitoring...
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: URL MAL svchost.exe PLEASE HELP!
« Reply #3 on: June 17, 2015, 01:50:38 PM »
I have attached the logs from the scans that I have performed in order using the link that was provided.

I am still getting notifications of a threat detected though.

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: URL MAL svchost.exe PLEASE HELP!
« Reply #4 on: June 17, 2015, 02:03:30 PM »
Scan with ZOEK

Please download ZOEK by Smeenk and save it to your desktop (preferred version is the *.exe one)
Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

  • Right-click on icon and select Run as Administrator to start the tool.
  • Wait patiently until the main console will appear, it may take a minute or two.
  • In the main box please paste in the following script:
Code: [Select]
createsrpoint;
autoclean;
emptyalltemp;
ipconfig /flushdns;b
  • Make sure that Scan All Users option is checked.
  • Push Run Script and wait patiently. The scan may take a couple of minutes.
  • When the scan completes, a zoek-results logfile should open in notepad.
  • If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)
Post its content into your next reply.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: URL MAL svchost.exe PLEASE HELP!
« Reply #5 on: June 17, 2015, 02:47:38 PM »
I have attached the zoek results

Offline TwinHeadedEagle

  • Malware Removal Expert
  • Avast Evangelist
  • Massive Poster
  • ***
  • Posts: 2987
    • Zemana
Re: URL MAL svchost.exe PLEASE HELP!
« Reply #6 on: June 17, 2015, 03:04:45 PM »
We will run one more Zoek fix:

Fix with ZOEK

This fix was created for this user for use on that particular machine.
Running it on another one may cause damage and render the system unstable.

Temporary disable your AntiVirus and AntiSpyware protection - instructions here.

  • Right-click on icon and select Run as Administrator to start the tool.
  • Wait patiently until the main console will appear, it may take a minute or two.
  • In the main box please paste in the following script:
Code: [Select]
createsrpoint;
C:\Users\Jamie\AppData\Local\Application Data\Google\Chrome\User Data\Default\Preferences;f
  • Make sure that Scan All Users option is checked.
  • Push Run Script and wait patiently. The scan may take a couple of minutes.
  • When the scan completes, a zoek-results logfile should open in notepad.
  • If a reboot is needed, it will be opened after it. You may also find it at your main drive (usually C:\ drive)
Post its content into your next reply.
My help is free, however if you'd like to show your appreciation by leaving a donation, it will be much appreciated ------> DONATE

REDACTED

  • Guest
Re: URL MAL svchost.exe PLEASE HELP!
« Reply #7 on: June 17, 2015, 03:23:58 PM »
The new zoek results are attached
looks like it has stopped now.
I will keep an eye out for the next 24 hours, I will reply if it isnt sorted.

Thank you so much for the help :)
« Last Edit: June 17, 2015, 03:50:39 PM by jamiwarner »