svchost.exe infected badly...

[d0pe]

Hi all...

Well i have ran full virus scans with the follow anti-virus/anti-malware program.
ESET Smart Security
Kaspkery Internet Security
Avira Premium Security Suite
Malwarebytes' Anti Malware
Hitman PRO

And did some cleaning with ccleaner,etc..

I removed everything the programs caught.
I also checked the startup programs with WinPatrol with Secret locations on.Removed any files.So all i have at start up is

I also replaced svchost.exe with the original file from the disc.

Restarted my computer but still getting all this..I don't know if its normal or not..
I did find that explorer was infected because the file size was different and so was the edited time on the file.I also found some mukey files in the local folder,etc..like .file .tmp files,etc..But no .exe files and i googled some of the files and it just came up malware,etc

But the funny thing is i only reinstalled about 3 days ago.When i was on xp i was on a irc bot,a rat,etc..Avira picked up 20-30 backdoors,etc when i was on xp but that was still on 7 when i reinstalled or something..

Should i run a high jack scan and post it on a forum or something?..


I would really appreciate the help.

Thank You.

 

[osholt]

This sort of serious Malware problem (and this is quite serious/complex) is best handled by people who are certified and know what they're doing.

While a few of our forum members probably could do something to help the people over at Virus, Spyware & Malware Removal - Geeks to Go Forums really know their stuff (you have to pass a 3 to 6 month course before you are aloud to start helping people).

I recommend you request the help of one of their Geeks.

Oli

 

[d0pe]

ok,thanks..i did not know i was screwed so badly...

i will sing up now..

thanks again.

 

[karlsnooks]

before you are aloud to start helping people.

But only quietly.

 

[osholt]

before you are aloud to start helping people.

But only quietly.

Oops, I really should learn to spell at some point .

Oli

 

[cluberti]

Hehehe - one thing the OP might want to do is disable IPv6 while testing - unless you're on a network with IPv6, or using an app that requires it, it's a good idea to disable the v6 stack while troubleshooting to make it easier.