Author Topic: svchost.exe and anythicago.com  (Read 1608 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
svchost.exe and anythicago.com
« on: July 03, 2015, 02:24:11 PM »
Hello,
my Avast is alway blocking my svchost.exe witch is trying to connect to anythicago.com/...
I alredy scanned my System with Farbar Recovery Scan Tool and attached the .txt files.

Thanks for your help.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: svchost.exe and anythicago.com
« Reply #1 on: July 03, 2015, 02:54:05 PM »
Let me know if this stops it

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
CreateRestorePoint:
2015-06-07 23:08 - 2015-06-15 16:52 - 00000000 __SHD C:\Users\GhostDog\AppData\Local\EmieUserList
2015-06-07 23:08 - 2015-06-15 16:52 - 00000000 __SHD C:\Users\GhostDog\AppData\Local\EmieSiteList
2015-06-07 23:08 - 2015-06-15 16:52 - 00000000 __SHD C:\Users\GhostDog\AppData\Local\EmieBrowserModeList
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

REDACTED

  • Guest
Re: svchost.exe and anythicago.com
« Reply #2 on: July 03, 2015, 03:06:31 PM »
Hello,
thank you it looks like it works, normaly that massage comes a few sec after the system startet and now it doesn't.
I Uploaded the log anyway.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: svchost.exe and anythicago.com
« Reply #3 on: July 03, 2015, 03:07:12 PM »
Let me know when you are happy and I will tidy up

REDACTED

  • Guest
Re: svchost.exe and anythicago.com
« Reply #4 on: July 03, 2015, 03:10:04 PM »
what do you mean with "tidy up"? i thouht its already removed?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: svchost.exe and anythicago.com
« Reply #5 on: July 03, 2015, 03:38:16 PM »
Remove FRST and the like :)