Malicious URL Blocked msg every 30 sec

[buckeyerob39]

This happens even with no browser open, the entire message is as follows: Infection Details
URL:   http://ololoshaface.com/x/
Process:   C:\WINDOWS\System32\svchost.exe
Infection:   URL:Mal
I know this is some kind of Trojan virus but after scans with avast, malware bytes, and a few others it is still there Sophos had a page describing the virus but their free scanner doesn't get rid of it either. This thing had my PC only able to boot in safe mode for a while but somehow it has recovered( Thank God ) but I am still getting these warnings, Thanks for any help anyone can give !

[Pondus]

Attach The logs from The guide I gave you....

[buckeyerob39]

So sorry, that post has been deleted and I did not have it bookmarked...

[Pondus]

http://forum.avast.com/index.php?topic=53253.0

[buckeyerob39]

 Thanks !
Malwarebytes Anti-Malware (Trial) 1.61.0.1400
www.malwarebytes.org

Database version: v2012.05.30.05

Windows XP Service Pack 3 x86 NTFS
Internet Explorer 8.0.6001.18702
Buckeye Rob :: BONE-936665D783 [administrator]

Protection: Disabled

5/30/2012 11:54:07 AM
mbam-log-2012-05-30 (11-54-07).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 231847
Time elapsed: 17 minute(s), 4 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

[Pondus]

and the rest...... OTL and aswMBR....... attached, not copy and paste

when done a malware remover will be notified

[jeffce]

Monitoring... 

[buckeyerob39]

The downloading of the OTL caused a crash and sent me back to safe mode. Avast warned me it was a suspicious file ( it wanted me to try it in some type of container, cannot remember the name)but I ignored it cause I figured coming from here it was safe...

[Pondus]

if avast want to sandbox otl then select run normal

[buckeyerob39]

I did that is when the crash occurred, is it possible the link has been corrupted?

[buckeyerob39]

Just tried to run OTL again and the system crashed again, any suggestions?

[buckeyerob39]

This page describes the virus to a tee : http://www.sophos.com/en-us/threat-center/threat-analyses/viruses-and-spyware/Troj~TDLRtk-F/detailed-analysis.aspx

[jeffce]

Hi,

Please download DDS from one of the following links and save it to your desktop.

• DDS.scr
  
• DDS.pif
  
• Disable any script blocking protection (How to Disable your Security Programs)
  
• Double click DDS icon to run the tool (may take up to 3 minutes to run)
  
• When done, DDS.txt will open.
• After a few moments,  attach.txt will open in a second window.
• Save both reports to your desktop.

---------------------------------------------------

• Post the contents of the DDS.txt report in your next reply
  
• Attach the Attach.txt report to your post by scroling down to the Attachments area and then clicking Browse. Browse to where you saved the file, and click Open and then click UPLOAD.
  

----------

Please download aswMBR to your desktop.

• Double click the aswMBR icon to run it.

Vista and Windows 7 users right click the icon and choose "Run as administrator".

• Click the Scan button to start scan.
  
• When it finishes, press the save log button, save the logfile to your desktop and post its contents in your next reply.

Click the image to enlarge it
----------

In your next reply please post both of the logs created by DDS and the log created by aswMBR.exe. 

[buckeyerob39]

Sorry If I am doing this wrong, I had to attach both because it said my message was too long.

[buckeyerob39]

Here is the other, thanks !