hello all! have strange bug to find

[kjhabit]

I recently noticed unusual computer activity,so I had to shut down group policy which was not supposed to be running anyway on win 7 home premium..and stop remote access service,which kept starting back up resstarts. then early this week i stumble on the scvhost virus and removed it(hopefully)..ran malwarebytes to double check things and there were a few issues that it fixed..but strange ports open in tcpview and i am alomost to the point where i should role back to an acronis image from a couple months ago and go from there..thanks any help would be appreciated...kjh!

ddsattach.txt

[kjhabit]

sorry left out second txt file

[kjhabit]

sorry trying to change log name so i can upload filedds1.txtdds1.txt

dds1.txt

[kjhabit]

sorry about the mess..newbie.....i a had to rename the file then finally used the basic uploader to get it on the post.litle trouble my apologies!! thanks for the help kjh

[daledoc1]

Hello and welcome to MBAM forum, kjhabit:

Yes, the forum software can be a bit confusing to newcomers (especially the fact that one cannot edit posts until one reaches Honorary Member status with 50 posts).

Anyway, since you were recently infected, since svchost.exe is a file often patched/infected by malware, and since you are still having problems, you may still be infected.

We cannot review scan logs or work on malware removal in this sub-section of the forum, so please read below for assistance with cleaning your system.

IMPORTANT: Please do NOT use any temporary file cleaners unless instructed to do so - they can cause data loss, making it hard to recover your system.

IF YOU WOULD LIKE EXPERT HELP WITH MALWARE REMOVAL, PLEASE CHOOSE ONE OF THE FOLLOWING 3 OPTIONS:

OPTION 1: Free, one-on-one, expert assistance in the Malware Removal Forum.

OPTION 2: For licensed users of MBAM PRO, there is free, one-on-one, expert assistance from the MBAM support helpdesk.

OPTION 3: Fee-based, one-on-one, expert assistance from Premium Support.

OPTION 1:

• Please print out, read and carefully follow the instructions in the "I'm Infected - What Do I Do Now?" article.
  
• -->If the infection has so crippled the computer that you cannot complete some or all of the steps, then just do the best you can and start a new topic as described below.
  
• ---> Since you've already run DDS, you'll want to re-post those logs into your new topic, as instructed below.
  
• Then please start a new post in the Malware Removal Forum.
  
• An authorized, trained malware expert will provide free, one-on-one assistance as soon as one becomes available.
  
• When starting your new post, please note the following:
  
• Please do NOT post in a topic started by someone else, even if their problem sounds similar.
  
• Please COPY/PASTE the requested logs directly into your post, rather than attaching them.
  
• Under options, please be sure to select "track this topic" and "immediate email notification", so you'll know when a helper responds.
  
• Please be patient - it may be 48 hours or more before a helper can assist you, especially when the forum is very busy.
  
• Please do NOT "bump" your topic or reply back to it for at least 48 hours.
  
• Doing so may cause your topic to be overlooked, as it will appear that you are already being helped.
  

OPTION 2:

If you are a paid user of MBAM PRO and would like support via the helpdesk, please contact them here.

OPTION 3:

If you prefer the Malwarebytes Premium Services (comprehensive solutions to all your computer support needs – from installation and set-up to troubleshooting and tune-ups), please go to the Premium Support site here.

Please be patient – someone will assist you as soon as possible.

Thank you very much,