Svchost.exe acting weird

[Quintus]

I ended up using Comodo based purely on its score from the site you gave me and it would be awesome if you could help me set it up properly.

It was the correct choice, IMHO.

I would say I am an avid gamer and play games such as World of Warcraft, League Of Legends and many of the Steam games such as TF2 and Half Life and Left 4 Dead.

I see. On the Comodo icon found at the system tray, please right-click on it and set the following accordingly.

• Firewall Security Level
  • Safe Mode
• Defense + Security Level
  • Clean PC Mode (if you consider yourself a process-erudite)
    
  • Training Mode (if not)
• Sandbox Security Level
  • Disabled

Note that you can set your firewall to Game Mode whenever necessary. Just do not forget to switch it back after.

Also, I am almost 95% sure I am still infected. Today, while this site was down, I was surfing the internet and my web page went from a full page to a maximized page and went to this IP address, 208.109.186.145.

Download SUPERAntiSpyware.

• Install it and let it check for updates.
  
• Perform a complete scan and let it remove everything it finds.
  
• Once done, post the log here and provide the link to this thread.

Then was forwarded to some other random web page completely irrelevant to what I was searching for. Also, I went into my hosts file and noticed that it had all been erased, and was instead replaced with 127.0.0.1.

• Step 7
  
  Open Notepad.
  
  Copy (Ctrl +C) and paste everything on the quote box below:
  
  

  @echo off
  pushd\windows\system32\drivers\etc
  attrib -h -s -r hosts
  echo 127.0.0.1 localhost>HOSTS
  attrib +r +h +s hosts
  popd
  del %0

  
  In the Notepad interface, go to File > Save As.
  
  Specify the file name as reset.bat or anything you wish however using the same file extension.
  
  Change Save As Type to All Files and save the file to your Desktop.
  
  Now double-click on reset.bat located at your Desktop to run the batch file. It will self-delete when completed.

That's what really got me going, but AVG didn't detect anything under a rootkit, shell, and full computer scan.

I would recommend a change of Anti-Virus. Preferably Avira.

P.S. I have a program (CurrPort) and have 4 logs that I created with the internet off, turning it on, opening the internet, and another of when I went to a login page such as hotmail or battle.net. I was trying to trigger the process to start and maybe try to make a connection or something, if you would like the logs let me know and I'll PM them to you. Not sure I would want to share that over an open thread >.> Again thanks for all the great help so far.

Yes, please do so.

• Step 8
  
  Please download the OLT Log Analysis from 'here'. Please click the Go (Arrow Button) or press Enter in the URL address bar to start the download.
  • Save it to your Desktop.
    
  • Please double-click OTL.exe to run it.
    
  • Make sure all other windows are closed to let it run uninterrupted.
    
  • When the window appears, underneath Output, change it to Minimal Output.
    
  • Under the Standard Registry box change it to All.
    
  • Check the boxes beside LOP Check and Purity Check.
    
  • Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
    
  • When the scan completes, it will open two Notepad windows.
    • OTL.txt
      
    • Extras.txt
  • These are saved in the same location as OTL.
    
  • Please copy (Right-click > Select All > Copy) the contents of these files, one at a time, and post it with your next reply.

• In your next post, please provide the following:
  • A Fresh HijackThis (HJT) Log
    
  • Deckard's System Scanner (DDS) Logs
    • DDS.txt
      
    • Attach.txt
  • OTL Scan Log

• Format of Response
  
  
  Code:

  [color=#00BFFF][b]Step #[/b][/color]
[color=#FFD700][b]Problems Encountered:[/b][/color]

[color=#00BFFF][b]Step #[/b][/color]
[color=#FFD700][b]Problems Encountered:[/b][/color]

[color=#00BFFF][b]Step #[/b][/color]
[color=#FFD700][b]Problems Encountered:[/b][/color]

[color=#00BFFF][b]Link To Requested Logs:[/b][/color]