Unknown Sound Volume Mixer

Glien · 05 Jan 2014

Svchost.exe virus

I've been on 4chan /g/ and they sent me here.
I'm not to sure on what this is, the application I've narrowed it down to is svchost.exe.
This thing plays sounds, songs, advertisements; kinda like someone is rotating through an AM radio station.

I've tried my best to remove this by myself and with Malware removal. None of those option seem to work. Maybe someone has dealt with this before.

I've used Norton AntiVirus, MalwareBytes, and Microsoft Security Essentials and none of them seem to help or find a problem, my guess is a rootkit

ICIT2LOL · 05 Jan 2014

Hello and welcome Glien mate if you think it is a rootkit then pick one of these
https://www.techsupportalert.com/bes...ver.htm?page=1 start with the Kaspersky but before you do that try these

http://www.superantispyware.com/

http://www.bleepingcomputer.com/download/adwcleaner/

download from bleeping computer – delete any rubbish these find.

cottonball · 05 Jan 2014

Glien,

On the audio ads, your system may be infected with: Rootkit.boot.harbinger

Please do the following:

Use TDSSKiller...
Download > TDSSKiller Download
Select the .exe version
Save the downloaded file to the Desktop. <-Important!!!

Double-click on TDSSKiller.exe, and select: Run As Administrator
At the program console, press: Start Scan
Please do not use the computer during the scan!

•If a suspicious object is detected by this program, the default action is Skip. Leave this action as is, and click on: Continue

•If malicious objects are found, they show in the Scan results. Ensure Cure (the default action) is selected, then click: Continue > Reboot now, to finish the cleaning process.
(Note: If Cure is not available, select Skip, >>Do not select: Delete<<)

When done, the tool creates a log on the disk with the Windows Operating System, normally C:\

Logs have a name like: TDSSKiller_version_date_time_log.txt

Please provide the TDSSKiller log in your reply.

Also use the Farbar Recovery Scan Tool (FRST).
Download: http://www.bleepingcomputer.com/down...ery-scan-tool/
Select the version that applies to your system.
Save it to your Desktop.

Double-click the downloaded file to run it.
When the tool opens, click Yes to the disclaimer.

Press the Scan button.

When done, the tool makes a log, FRST.txt, in the same directory from which the tool is run (Desktop).

Please provide the FRST.txt in your reply.

The first time the tool is run, it also creates another log: Addition.txt

Also post the Addition.txt in your reply.

Also, please run FRST again and type the following in the Search box: rpcss.dll
Click the Search button

A Search.txt is created

Please post the Search.txt in your reply.

Thanks!