Svchost.exe popups.

[Dannyboi]

So short story long, I recently started receiving one in a time popups from my Malwarebytes saying:

 

malwarebytes successfully blocked access to malicious website:

IP: 93.115.83.250 (I am not using vpn)

Inbound

Process: Svchost.exe

 

And today it started repeatedly showing up, and my malwarebytes went insane. 

I tried to google up solutions, and I have even encountered some posts here related to my issue, used the offered programs the experts here were offering, but no luck at getting rid of the malware.

So I gave up, and decided to make a post about it so I could get a little help with identifying the virus and getting it off my gear, by diagnosing the reports and such.

 

 

So first off all, the first time I ran roughkiller, I deleted everything they had there because I wasnt patient enough to make a post about my issue and post my reports, so I scanned once again right now, and I couldnt find any results, so couldnt with adwcleaner or tdsskiller.

 

I tried RKill, but as in the attached file, only the basic host was detected, which means nothing to me. 

Rkill.txt

 

I have no idea now where to proceed.

I would appreciate your support and help!

[kevinf80]

Hello and

 

P2P/Piracy Warning:

 

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here.Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 

Download Farbar Recovery Scan Tool and save it to your desktop.

 

Note: You need to run the version compatible with your system (32 bit or 64 bit). If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

• 
  

Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.
The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply.

 

Kevin

[Dannyboi]

Here both of the files! c:

FRST.txt

Addition.txt

 

Oh! and by the way, I got a log from adwkiller too, so I will post it too!

AdwCleanerS0.txt

[kevinf80]

I guess you never saw the warning in my opening reply regarding forum protocol and its consequences?

 

If you're using Peer 2 Peer software such as uTorrent, BitTorrent or similar you must either fully uninstall them or completely disable them from running while being assisted here. Failure to remove or disable such software will result in your topic being closed and no further assistance being provided.If you have illegal/cracked software, cracks, keygens etc. on the system, please remove or uninstall them now and read the policy on Piracy.

 

Your system has P2P software installed and many torrent entries. There is also evidence of downright illegal software "AutoKMS"

 

I cannot offer any further help, you always have the option to contact a forum moderator if you want a second opinion....

 

Kevin....

[Dannyboi]

B..but I had my torrent unistalled before I created this topic...

[Dannyboi]

I am sorry if I am not allowed to double post, but I cant edit my previous comment.

My windows is legally registered, after I used autokms, is there a posibbility to delete autokms?

[AdvancedSetup]

Well you need to post some type of purchase evidence as the only way for it to now be legit is if you purchased an update online directly from Microsoft. No one else can sell you that update. You can send it in a Private Message to me and if it is as you say then we'll reopen the topic.

[AdvancedSetup]

This topic will now be closed due to evidence of cracked or pirated software on this system.

Piracy Policy