Svchost.exe Trojan Notifications when using Google Chrome

[Alouse]

Yesterday, I got infected after downloading a file and running an .exe. My exclusions were randomly filled up on windows defender with system32 files and the folder and my protection settings were turned off. Now, I've done multiple scans and apparently removed everything when I scan (according to windows security and malwarebytes) but when I open google chrome I always get this popup about 2 sites from Malwarebytes. I think I might still be infected, and svchost.exe is a main windows file. What can I do?

As requested, both text files from Farbar have also been attached.

Addition.txt FRST.txt

[AdvancedSetup]

Hello @Alouse and

 

Please follow the directions from the following topic and let us know if that corrects the issue for you.

 

Thank you

 

[Alouse]

Thank you so much for the quick response!

 

Everything was done as requested, but Malwarebytes mbscan.txtmbscan.txtmbscan.txt couldn't not detect anything as shown here. I'm mostly positive that I still have malware on my laptop as just after writing my thread post, as a random system32 folder exclusion was also found in my Windows Security. 

Although, I have not yet gotten new notifications from the site and svchost.exe after doing this. I will update you if I end up receiving one.

Thank you.

[Alouse]

The notifications are unfortunately back ^

[AdvancedSetup]

Please run the following steps and post back the logs as an attachment when ready.
Temporarily disable your antivirus or other security software first. Make sure to turn it back on once the scans are completed.
Temporarily disable Microsoft SmartScreen to download software below if needed. Make sure to turn it back on once the scans are completed.
If you still have trouble downloading the software please click on Reveal Hidden Contents below for examples of how to allow the download.
 

STEP 01

Please download AdwCleaner by Malwarebytes and save the file to your Desktop.

• Double-click to run the program
• Accept the End User License Agreement.
• Wait until the database is updated.
• Click Scan Now.
• When finished, if items are found please click Quarantine.
• Your PC should reboot now if any items were found.
• After reboot, a log file will be opened. Attach or Copy its content into your next reply.

RESTART THE COMPUTER Before running Step 3

STEP 02
Please download the Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system. You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens, click Yes to disclaimer.
• Press the Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). If you've, run the tool before you need to place a check mark here each time
• Please attach the Additions.txt log to your reply as well.
• On your next reply, you should be attaching frst.txt and additions.txt to your post, every time.

 

Thanks

[Alouse]

All uploaded, just to note that nothing was found using AdwCleaner except something related to Lenovo as I have a Lenovo Legion laptop.

Thanks.

AdwCleaner[S00].txt FRST.txt Addition.txt

[AdvancedSetup]

Okay, let's go ahead and scan with a 3rd party antivirus scanner and see what they find. @Alouse

Please exit out of Malwarebytes when running this scan

 

 

Let me have you run a different scanner to double-check.

I would suggest a free scan with the ESET Online Scanner

Go to https://download.eset.com/com/eset/tools/online_scanner/latest/esetonlinescanner.exe

• It will start a download of "esetonlinescanner.exe"
• Save the file to your system, such as the Downloads folder, or else to the Desktop.
• Go to the saved file, and double click it to get it started. 
• When presented with the initial ESET options, click on "Computer Scan".
• Next, when prompted by Windows, allow it to start by clicking Yes 
• When prompted for scan type, Click on Full scan 
• Look at & tick  ( select )   the radio selection "Enable ESET to detect and quarantine potentially unwanted applications"   and click on the Start scan button.
• Have patience.  The entire process may take an hour or more. There is an initial update download.
• There is a progress window display.
• You should ignore all prompts to get the ESET antivirus software program.   ( e.g. their standard program).   You do not need to buy or get or install anything else.
• When the scan is completed, if something was found, it will show a screen with the number of detected items.  If so, click the button marked “View detected results”.
• Click The blue “Save scan log” to save the log.
• If something was removed and you know it is a false finding, you may click on the blue ”Restore cleaned files”  ( in blue, at the bottom).
• Press Continue when all done.  You should click to off the offer for “periodic scanning”.

 

Note: If you do need to do a File Restore from ESET please follow the directions below

[KB2915] Restore files quarantined by the ESET Online Scanner version 3

https://support.eset.com/en/kb2915-restore-files-quarantined-by-the-eset-online-scanner

 

Thanks

 

[Alouse]

hey, I am kinda in a panic right now. i just randomly got a community strike from youtube and discovered that all my google accounts and their youtube channels have like 10 videos uploaded to them just sharing viruses, etherium, cracks etc.  i deleted them all and im trying my best to change all my passwords but idk how i will do this considering i have 133 passwords saved on my chrome. i might also just have to reinstall windows now i am getting spammed wigth notifications

[Alouse]

i am doing the scan but i think i will completely restart windows if it doesnt work

[AdvancedSetup]

If you have your data backed up a Reset of Windows might be the best option.

Let me know either way. Please don't be trying to change passwords on an infected system. They should be changed from a known clean system.

Thanks

 

[AdvancedSetup]

Due to the lack of feedback, this topic is closed to prevent others from posting here.

If you need this topic reopened, please send a Private Message to any one of the moderating team members. Please include a link to this topic with your request.

This applies only to the originator of this topic. Other members who need assistance please start your own topic in a new thread.

Tips to help protect from infection

Thanks