Author Topic: globalroot\systemroot\svchost.exe  (Read 2099 times)

Offline msmil

  • Jr. Member
  • **
  • Posts: 30
    • Personal Message (Offline)
globalroot\systemroot\svchost.exe
« on: June 06, 2012, 06:48:35 PM »
I am having problems with this-  I have avast in silent gaming mode bcz it is going off constantly.  I have read some other threads about this topic and I have attached the logs.  I ran combofix but I am still having the same problem. 

Thanks in advance

Offline CharleyO

  • avast! Evangelist
  • Starting Graphoman
  • ***
  • Posts: 7102
  • Gender: Male
  • Be alert for error code - ID 10T
    • Personal Message (Offline)
Re: globalroot\systemroot\svchost.exe
« Reply #1 on: June 06, 2012, 08:06:32 PM »
***

If avast is going off constantly, what are the warnings given by avast?


***
Self-built desktop (8 years old) - AMD64 3200+_Gigabyte GA-K8NS Ultra-939_4 gb RAM_GeForceFX 5800w/256 ram_XP/SP3_Avast 7_MBAM_ZA Free __and__ Toshiba Satellite Laptop_W7-64bit_ 4 gb Ram_Avast 8_MBAM

Offline essexboy

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 28970
  • Gender: Male
  • Dragons by Sasha
    • Malware fixes
    • Personal Message (Offline)
Re: globalroot\systemroot\svchost.exe
« Reply #2 on: June 06, 2012, 08:52:48 PM »
Could you post a screenshot of the alert please and attach the OTL logs

Offline msmil

  • Jr. Member
  • **
  • Posts: 30
    • Personal Message (Offline)
Re: globalroot\systemroot\svchost.exe
« Reply #3 on: June 06, 2012, 10:42:21 PM »
Infection Details
URL: "http://shopspotsshop.com/search?q
Process: "\\.\globalroot\systemroot\svchost.exe"
Infection: "URL:Mal"

Warn your friends to avoid this website
Threat stats for last 30 days
Blocked infected sites: 81,948,600
Infected domains: 487,175


Is this sufficent?

Offline msmil

  • Jr. Member
  • **
  • Posts: 30
    • Personal Message (Offline)
Re: globalroot\systemroot\svchost.exe
« Reply #4 on: June 06, 2012, 11:35:54 PM »
Sorry, missed these

Offline essexboy

  • avast! Überevangelist
  • Maybe Bot
  • *****
  • Posts: 28970
  • Gender: Male
  • Dragons by Sasha
    • Malware fixes
    • Personal Message (Offline)
Re: globalroot\systemroot\svchost.exe
« Reply #5 on: June 07, 2012, 06:44:10 PM »
    I see that you have run Combofix, could you post the log please

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

If you have Malwarebytes 1.6 or better installed please disable it for the duration of this run
To disable MBAM
Open the scanner and select the protection tab
Remove the tick from "Start with Windows"
Reboot and then run OTL


Run OTL
  • Under the Custom Scans/Fixes box at the bottom, paste in the following
    Quote
    :OTL
    O2:64bit: - BHO: (no name) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No CLSID value found.
    O3 - HKU\S-1-5-21-3421619078-42470213-4233049981-1000\..\Toolbar\WebBrowser: (no name) - {12A9DB21-42A2-492D-A85C-CDDE0C88B608} - No CLSID value found.
    O3 - HKU\S-1-5-21-3421619078-42470213-4233049981-1000\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.

    :Files
    ipconfig /flushdns /c

    :Commands
    [purity]
    [resethosts]
    [emptytemp]
    [CREATERESTOREPOINT]
    [Reboot]
  • Then click the Run Fix button at the top
  • Let the program run unhindered, reboot the PC when it is done
  • Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.
THEN

Download the latest version of TDSSKiller from here and save it to your Desktop.
 
 
[list=1]
 
  • Doubleclick on TDSSKiller.exe to run the application


  • Then click on Change parameters.
     

     
  • Check the boxes beside Verify Driver Digital Signature and Detect TDLFS file system, then click OK.
     
  • Click the Start Scan button.
     
     
  • If a suspicious object is detected, the default action will be Skip, click on Continue.
     

     
  • If malicious objects are found, they will show in the Scan results and offer three (3) options.
  • Ensure Cure is selected, then click Continue => Reboot now to finish the cleaning process.

  • Get the report by selecting Reports

 
  • Note: If Cure is not available, please choose Skip instead, do not choose Delete unless instructed.
Please copy and paste its contents on your next reply.

 

Google Chrome

AVAST recommends using the FREE Google Chrome™ browser.

Download Google Chrome Now