virus possibly related to svchost.exe

Before we press on with the entries needing attention in the FSS report, let's check the computer for corruption in Windows system files.

Give this a try. The file was created by kronckew, one of our colleagues.

Boot to Safe Mode.

Go to Start > All Programs > Accessories > Command Prompt
Right-click the Command Prompt, and select: Run as Administrator

At the Command Prompt, copy/paste (with the mouse) the following text inside the code box below, and press: Enter

Code:

 
@echo off
rem delete old files
del /q %windir%\logs\cbs\cbs.log
del /q c:\sfcdetails.txt
rem run sfc
sfc /scannow
rem filter out non essential junk from the cbs.log
findstr /c:"[SR]" %windir%\logs\cbs\cbs.log >c:\sfcdetails.txt 
rem open details in notepad
notepad c:\sfcdetails.txt
rem optional command to shut down & restart pc after running. this may be needed if
rem sfc replaces some critical files. uncomment (remove the 'rem') to activate.
rem shutdown -r
exit

When sfc is done, a file named sfcdetails.txt appears.

Please save the sfcdetails.txt file to the Desktop, and post it in your reply.

Multiple instances of svchost running is normal, I've got 12 of them going myself while typing this.

50% of RAM used would be normal on a 4gig system, as well with 7. [OP did not put in system specs]

What was the last thing done to the system when this issue started?

I'd look at device manager and see if it's showing any issues.

Please download Junkware Removal Tool to your desktop.

• Shut down your protection software now to avoid potential conflicts.[/*]
• Run the tool by double-clicking it. If you are using Windows Vista, 7, or 8; instead of double-clicking, right-mouse click JRT.exe and select "Run as Administrator".[/*]
• The tool will open and start scanning your system.[/*]
• Please be patient as this can take a while to complete depending on your system's specifications.[/*]
• On completion, a log (JRT.txt) is saved to your desktop and will automatically open.[/*]
• Post the contents of JRT.txt into your next message.[/*]

Phew!!


Now go back to cottonball's instructions for sfcdetails.txt file and post it in your reply.

Let's merge a missing Action Center key into the Registry:

Action Center Notification Icon =====> Unable to open HKLM\...\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A} key. The key does not exist.

Please open Notepad by pressing the Windows key and the R key at the same time.
In the Open area, type: notepad
Copy and paste all the text inside the code box below to Notepad:

Code:

Windows Registry Editor Version 5.00
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellServiceObjects\{F56F6FDD-AA9D-4618-A949-C1B91AF43B1A}]
"AutoStart"=""

In Notepad, go to File > Save As
Save the file to: Desktop
Save the file as: fixac.reg
Save type as needs set to: All files

On the Desktop, double-click: fixac.reg
Confirm the prompt to merge to your Registry.
Click: OK

Restart the computer.

On the Desktop, right-click fixac.reg, and select: Delete

Also empty the Recycle Bin.

Once again, press the Windows key and the R key at the same time.
In the Open area, type: services.msc
In the Services console, make sure Security Center is there, and:
Startup Type is set to: Automatic (Delayed Start)
Service Status is set to: Started

Do the same for the Windows Update service.

Run the Farbar Service Scanner once again, and post its results.