literis Posted February 13, 2012 ID:526317 Share Posted February 13, 2012 Hi guys, just to give you some background, I got a svchost.exe infection maleware bytes was telling me two files were infected and after they were supposed to be removed they stayed on the computer. It kept redirecting me to random web pages and search results also got a couple of blue screens . So i got the rootkit removal tool "tdsskiller" it removed one of them I am no longer getting redirections and I haven't blue screened yet but it is still showing me I have one infection. My CPU usage is still high from all the svchosts. I saw someones post about it earlier and they used the file assassin after tdsskiller to get the last of it from C:/windows/svchost but I don't have that file the only ones I can see are C:/windows/system 32/svchost and C/windows/syswow64/svchost. Please help would be much appreciated I don't know what else I can do and I'm afraid if I leave it alone the CPU usage could go up or I could get passwords and such stolen. Link to post Share on other sites More sharing options...
Elise Posted February 13, 2012 ID:526353 Share Posted February 13, 2012 Hi, and Can you please post me the MBAM and tdsskiller logs showing what infections were detected/removed?We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pif[*]Double click on the DDS icon, allow it to run.[*]A small box will open, with an explaination about the tool. No input is needed, the scan is running.[*]Notepad will open with the results.[*]Follow the instructions that pop up for posting the results.[*]Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE Link to post Share on other sites More sharing options...
Maurice Naggar Posted April 5, 2012 ID:540127 Share Posted April 5, 2012 Due to the lack of feedback this topic is closed to prevent others from posting here. If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this thread with your request. This applies only to the originator of this thread.Other members who need assistance please start your own topic in a new thread. Thanks! Link to post Share on other sites More sharing options...
Recommended Posts