Svchost.exe

Mrs_Chip

Thanks all, I will work through those suggestions. I have not added anything recently (apart from AVG after this all started) and up to the weekend everything was running fine.

One other strange thing is that the lappy now takes an age to aquire a network address - does it eventually but takes several minutes?

closed

how are you connecting to the net

Mrs_Chip

Hi Closed - Wireless via modem/router to my isp.

closed

you appear to have 3 mobile/orange usb software installed which could be complicating things

uninstall alot toolbar

a lot of those things beginning with O4 could be disabled from startup using msconfig

where did resultdns117.exe come from? zwangi infection?

Mrs_Chip

I will clear out the orange stuff, but tbh has been there years, so not the real problem

didn't know I had alot toolbar - how do i uninstall it?

No idea what resultsdns117.exe is

Mrs_Chip

Now got a report from AVG that there are two infections of Agent_R.arc that it can't clear because they are criical system files - how do I fix these? I also suspect svchost.exe is a virus as it keeps coming back with a different PID when I kill it. Something is also hijacking my searches and sending me off to random other pages.

The_Grandmaster

The ALOT toolbar is malware in disguise. http://toolbar.alot.com/toolbar/uninstall is the way to remove it.

Closed is one of the best people to listen to concerning these sorts of advice but I would guess he would advise you to download malwarebytes:
Download Malwarebytes Anti-Malware 1.50 - FileHippo.com and install. Update the database and carry out a quick scan. Post anything it finds and while waiting for a reply, update the database again and carry out a full scan.

Mrs_Chip

Thanks Gm, but Alot does not appear in the list of installed software (looked there first), so not sure how to clear it out?

Will update Malwarebytes and see what it reports.

waddler_8

Mrs_Chip wrote: »

Something is also hijacking my searches and sending me off to random other pages.

That coupled with the svchost problems indicates a possible rootkit.


Download this and save it to your desktop.

http://public.avast.com/~gmerek/aswMBR.exe

When you've downloaded it...

• Double click aswMBR.exe to run it
• 
  Click No to the prompt to download Avast! virus definitions.
• Click the Scan button.
• When the scan reports "Scan finished successfully", click Save log & save the log to your desktop.
• Click OK when prompted. aswMBR.txt & MBR.dat will be appear on your desktop.
• Click EXIT.
• Copy & paste the contents of aswMBR.txt here.

Should it report something, don't try to fix anything with it yet, just post the log.

Mrs_Chip

Not sure what i have done but now cannot connect to internet - not cable to assign and ip address. As soon as I log on I get the error icon in system tray. There is also a problem with Help and Support, when I try to run it it says can't.
find file. File was there but with extension removed so renamed it and can run it from the folder but not from menu. However I am unable to find a usable restore point, possibly AVG cleared out the files yesterday. As usual, no backup so currently tearing hair out!

I think I have checked that the right services are running but not an expert (can you tell?:D).

Thanks for patience, seem to be going from bad to worse!

ETA: Getting error message 'the RCP server is not available', tried fixes found online but has not resolved the problem.