Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

browser.exe and infected svchost.exe


  • This topic is locked This topic is locked
8 replies to this topic

#1 eriger777

eriger777

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:26 PM

Posted 27 August 2014 - 09:15 PM

I let my little brother on my computer while avast was turned off and the next day I have a virus on my computer. 'browser.exe' it's taking up a ton of memory and  svchost.exe is creating 'browser.exe'  it's creating the startup in the registry and its annoying because its taking up space and using memory on my computer. I opened process inspector and I see this.

 

0fa43b9c30c8637884f7a24eaa6576db.png

How can I get rid of this?

 

Edit: IT makes a folder in C:\Users\rootx\AppData\LocalLow\SupporterWireless\VinylHiggs


Edited by eriger777, 27 August 2014 - 09:22 PM.


BC AdBot (Login to Remove)

 


#2 aharonov

aharonov

  • Malware Response Team
  • 2,441 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:26 PM

Posted 28 August 2014 - 06:23 AM

Hi there,

please run a FRST scan:


Please download Farbar Recovery Scan Tool and save it to your Desktop.
(If you are not sure which version (32-/64-bit) applies to your system, download and try to start both of them as just the right one will run.)
  • Start FRST with administator privileges.
  • Make sure the option Addition.txt is checked and press the Scan button.
  • When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.
  • Please copy and paste these logs in your next reply.


#3 aharonov

aharonov

  • Malware Response Team
  • 2,441 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:26 PM

Posted 03 September 2014 - 06:05 AM

Do you still need help?

#4 eriger777

eriger777
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:26 PM

Posted 05 September 2014 - 10:13 AM

Yes sorry I've been sick.



#5 aharonov

aharonov

  • Malware Response Team
  • 2,441 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:26 PM

Posted 05 September 2014 - 10:54 AM

I hope you're doing better again.
When you're ready to continue here then run a FRST scan as written above.


Please download Farbar Recovery Scan Tool and save it to your Desktop.
  • Start FRST with administator privileges.
  • Make sure the option Addition.txt is checked and press the Scan button.
  • When finished, FRST will produce two logs (FRST.txt and Addition.txt) in the same directory the tool was run from.
  • Please copy and paste these logs in your next reply.


#6 eriger777

eriger777
  • Topic Starter

  • Members
  • 3 posts
  • OFFLINE
  •  
  • Local time:03:26 PM

Posted 05 September 2014 - 12:09 PM

I've attached the files below. 

Attached Files



#7 aharonov

aharonov

  • Malware Response Team
  • 2,441 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:26 PM

Posted 05 September 2014 - 01:24 PM

Ok.


Step 1

Please uninstall some programs:
  • Click on the Start Menu button, open Control Panel and click Uninstall a program.
  • Search and select the following programs one by one and click on Uninstall:

    PodoWeb

  • Reboot your computer.


Step 2

Please download this attached Attached File  fixlist.txt   877bytes   2 downloads and save it in the same directory as FRST.
  • Start FRST with Administrator privileges.
  • Press the Fix button.
  • When finished, a log file (Fixlog.txt) pops up and is saved to the same location the tool was run from.
    Please copy and paste its contents in your next reply.


Step 3

Start FRST with administator privileges.
  • Press the Scan button.
  • When finished, FRST will produce a log (FRST.txt) in the same directory the tool was run from.
    Please copy and paste this log in your next reply.


#8 aharonov

aharonov

  • Malware Response Team
  • 2,441 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:26 PM

Posted 19 September 2014 - 02:44 PM

I haven't heard from you for some time.
Do you still need help?

#9 aharonov

aharonov

  • Malware Response Team
  • 2,441 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:09:26 PM

Posted 29 September 2014 - 09:17 AM

Due to the lack of feedback, this topic is now closed.

In the event you still have problems, please send me or any Moderator a Private Message and ask them to reopen this topic within the next 5 days.

Please include a link to your topic in the Private Message. Thank you.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users