[RitualJman]

Hello there,

 

I am having a problem with my Avast Anti-virus telling me that my system has a virus, It's telling me that this is that it is Svchost file that is the problem. Although I have read online that alot of people are also having this same issue with their computer. I have ran the Fubar tool and will attach the logs below. I also attempted to run Combofx although It doesn't support Windows 8.1. I have ran multiple scans on my system with Both Avast, Malwarebytes in both safe mode and normal boot mode and never once detected the svchost then. If someone could people help me out or atleast  point me in the direction of a fix that would be great.

 

 

 

 

 

 

 

 

 FRST.txt   52.4KB   212 downloads

 Addition.txt   167.06KB   332 downloads

[Advertisements]

This should stop the alerts

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

CreateRestorePoint:
HKLM-x32\...\Run: [mbot_ca_502] => [X]
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File not found
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
2015-06-03 21:15 - 2015-06-03 21:17 - 00000156 _____ C:\WINDOWS\Reimage.ini
2015-06-13 16:44 - 2014-12-02 20:42 - 00000000 __SHD C:\Users\JJ Landry\AppData\Local\EmieBrowserModeList
2015-06-13 16:44 - 2014-05-09 14:20 - 00000000 __SHD C:\Users\JJ Landry\AppData\Local\EmieUserList
2015-06-13 16:44 - 2014-05-09 14:20 - 00000000 __SHD C:\Users\JJ Landry\AppData\Local\EmieSiteList
2015-06-12 19:39 - 2015-05-16 15:24 - 00000000 ____D C:\ProgramData\6666eee0000013bc
Task: {1691CF6F-C7AF-445B-8A0F-9DF67C3F5A1A} - System32\Tasks\HDNINSTSCHD => C:\WINDOWS\PCBHDNW\hdnInstaller.exe <==== ATTENTION
Task: {1AB399F3-18A2-4CA5-AC82-0E526FF55E9A} - System32\Tasks\UPDTEXE4_WDR => C:\Program Files (x86)\Portable WeatherApp\updater.exe <==== ATTENTION
Task: {785EE8EB-F0FC-4118-A506-EE9E78DD37C5} - System32\Tasks\IE_ERR4WDR => C:\Program Files (x86)\Portable WeatherApp\IEError.exe <==== ATTENTION
AlternateDataStreams: C:\Users\JJ Landry\Cookies:7ZeYFxRkKgWgjlyAYSpQKWie
C:\WINDOWS\PCBHDNW
C:\Program Files (x86)\Portable WeatherApp
C:\ProgramData\01nWU7.dat
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click on Scan.
• After the scan is complete click on "Clean"
• Confirm each time with Ok.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the content of that logfile with your next answer.
• You can find the logfile at C:\AdwCleaner[S0].txt as well.

[Essexboy]

This should stop the alerts

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 

CreateRestorePoint:
HKLM-x32\...\Run: [mbot_ca_502] => [X]
AppInit_DLLs: C:\PROGRA~2\SupTab\SEARCH~2.DLL => C:\PROGRA~2\SupTab\SEARCH~2.DLL File not found
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => No File
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => No File
Toolbar: HKLM - No Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
2015-06-03 21:15 - 2015-06-03 21:17 - 00000156 _____ C:\WINDOWS\Reimage.ini
2015-06-13 16:44 - 2014-12-02 20:42 - 00000000 __SHD C:\Users\JJ Landry\AppData\Local\EmieBrowserModeList
2015-06-13 16:44 - 2014-05-09 14:20 - 00000000 __SHD C:\Users\JJ Landry\AppData\Local\EmieUserList
2015-06-13 16:44 - 2014-05-09 14:20 - 00000000 __SHD C:\Users\JJ Landry\AppData\Local\EmieSiteList
2015-06-12 19:39 - 2015-05-16 15:24 - 00000000 ____D C:\ProgramData\6666eee0000013bc
Task: {1691CF6F-C7AF-445B-8A0F-9DF67C3F5A1A} - System32\Tasks\HDNINSTSCHD => C:\WINDOWS\PCBHDNW\hdnInstaller.exe <==== ATTENTION
Task: {1AB399F3-18A2-4CA5-AC82-0E526FF55E9A} - System32\Tasks\UPDTEXE4_WDR => C:\Program Files (x86)\Portable WeatherApp\updater.exe <==== ATTENTION
Task: {785EE8EB-F0FC-4118-A506-EE9E78DD37C5} - System32\Tasks\IE_ERR4WDR => C:\Program Files (x86)\Portable WeatherApp\IEError.exe <==== ATTENTION
AlternateDataStreams: C:\Users\JJ Landry\Cookies:7ZeYFxRkKgWgjlyAYSpQKWie
C:\WINDOWS\PCBHDNW
C:\Program Files (x86)\Portable WeatherApp
C:\ProgramData\01nWU7.dat
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

• Close all open programs and internet browsers.
• Double click on AdwCleaner.exe to run the tool.
• Click on Scan.
• After the scan is complete click on "Clean"
• Confirm each time with Ok.
• Your computer will be rebooted automatically. A text file will open after the restart.
• Please post the content of that logfile with your next answer.
• You can find the logfile at C:\AdwCleaner[S0].txt as well.

[Essexboy]

Due to lack of feedback, this topic has been closed.

If you need this topic reopened, please contact a staff member. This applies only to the original topic starter. Everyone else please begin a New Topic.