Hello I would first like to thank anyone that takes the time to help me in this matter.
I will try to explain everything the best I can, now let me start from where it all started.
Yesturday I was online when my computer suddenly restarted, it did not properly shut down, the screen just went black as if you were to hold the power button down to turn it off, then it rebooted. Then when it went to the desktop my avast notification popup started to popup "Avast! Web Shield has blocked a harmful webpage or file" multiple times. As follows
avast! Web Shield has blocked a harmful webpage or file
Object: (the web address would always change but would have the same file directory)
This would constantly happen, with the web address in the object section changing. So I then performed a full scan with avast. After the scan i did a boot time scan and moved all files to the chest, with the exception of a few that i deleted, but the problem still persisted. So i did some research and downloaded some tools. First I used rkill.exe, the problem still persisted. Then I used rougekiller.exe, upon the pre scan it found two process and marked them red, im not sure the exact name that came up but both had the word zekos in it. And i think it found them both when scanning the svchost.exe. So I then preceeded to scan with rougekiller but when it would start to scan the registry it would freeze half way through it and mini crash but would keep the results it had found up to that point, so i pressed delete on the prechecked boxes and it did that, and I then went to re scan and the same thing would happen. I did this multiple times and even redownloaded it with the same results. So then I decided to use another one of the tools. I then opened up tdsskiller.exe, i changed parameters so that all were clicked and advised that i have to reboot. So I reboot and the computer rebooted with no issue. Upon the desktop loading tdsskiller.exe started up. As soon as my computer fully loaded i proceeded to scan with tdsskiller.exe. It found no issues. So I then downloaded malwarebytes anti-malware, and installed it to the computer and went on settings and clicked the box to scan for rootkits. Then I proceeded with the scan. The scan took alittle less than an hour but had found like 60 something or more issues. So I then moved all issues to quaratine. Then malwarebytes asked if i would like to reboot my computer, so i clicked ok. It seemed to shut down properly but upon rebooting a little window popped up before it went to the choose user page. The window said the following
svchost.exe - application error
the instruction at "0x76ac06ae" referenced memory at "0x00000000". the memory could not be "read".
click ok to terminate the program or click cancel to debug the program.
so I clicked ok and it slowly proceeded to the select user page. The loading settings page before the select user page stayed on longer than usual and made a beeping sound(even though volume is off) and then proceeded to the select user page. So I selected my user account and it went to loading the desktop, but before anything could load a window popped up saying "Windows must now restart because the DCOM server process terminated unexpectedly." the window had a 1 minute timer on it and then restarted my computer. Upon reboot the same issue occured, the svchost error popped up but this time I clicked cancel. Then i proceeded through the select user page and it went to the desktop and the same "windows must restart" window popped up before anything could load and restarted my computer. I then did a little research on another device and found out if i dont click any options when the svchost.exe error window pops up it would continue with the boot up process without having the "windows must restart" window pop up and restart my computer. And i did that and it went through the boot up process and the "windows must restart" window did not pop up, and my computer fully booted. But the svchost.exe error window still remains up but i just moved it out of the way. I then figured i would run a registry repair to see what would happen. So i downloaded registry repair from glarysoft and performed a scan and fixed all problems and restarted my computer. But the same issues occured. And now iv come to yall for some help. As of now the "Avast! Web Shield has blocked a harmful webpage or file" popup has stopped, which was a result of the malwarebytes program. But it seems that this program has now caused the svchost.exe issue. I am not sure of what to do. I do have all the files that were dealt with by malwarebytes in the quaratine section, but the scanning log from the scan which found these issues seems to be empty and contains no information, like all the fields are blank and the files scanned and scan duration fileds are empty. And when i go to export the log file the malwarebytes becomes unresponsive and closes itself. But as of now I am able to use my computer, which is how I got to this site and am typing this, with the exception that the svchost.exe error popup window is always up, I am able to move it out of the way but if i click on either the ok or cancel option, the "windows must restart" popup window pops up and restarts my computer in 1 minute. Any help in this matter will be fully appreciated, again thank you for your time in helping me with this matter.
Edited by hamluis, 20 June 2014 - 09:49 AM.
Moved from XP to Am I Infected - Hamluis.