Solved Malware installs unwanted software repeatedly, suspecting svchost infection

[stevejiang]

Please find the report

 

[stevejiang]

Please find the report

 

[stevejiang]

Shortly after I ran the latest FRST, now it really comes back - it started to install unwanted applications. I thought it's clean already.

 

[TwinHeadedEagle]

Uninstall MalwareBytes old version.

Scan with Malwarebytes' Anti-Malware

Please download Malwarebytes Anti-Malware and save it to your desktop.

• Install the progam and select update.
• Once updated, click the Settings tab, in the left panel choose Detection & Protection and tick Scan for rootkits.
• Click the Scan tab, choose Threat Scan is checked and click Scan Now.
• If threats are detected, click the Apply Actions button. You will now be prompted to reboot. Click Yes.
• Upon completion of the scan (or after the reboot), click the History tab.
• Click Application Logs and double-click the Scan Log.
• At the bottom click Export and choose Text file.

Save the file to your desktop and include its content in your next reply.

Scan with Farbar Recovery Scan Tool

Please re-run Farbar Recovery Scan Tool to give me a fresh look at your system.

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Make sure that Addition option is checked.
• Press Scan button and wait.
• The tool will produce two logfiles on your desktop: FRST.txt and Addition.txt.

Please include their content into your next reply.

 

[stevejiang]

Attached scan results.

 

[stevejiang]

Any advice on what to do next? The malware is still there. The computer keeps installing unwanted software.

 

[TwinHeadedEagle]

How exactly malware installs by itself. It is really hard for me to analyze reports with all these strange symbols.

 

[stevejiang]

Typically it happens at power-up time. After I typed my win7 username and password, the system took long time to get ready. I can watch some application programs are being installed during this time. The installed programs are unnecessarily malwares. They are perhaps healthy applications in Chinese language. But the one that invoked the installations is the evil one. Don't know who that is.

Let me know if I can provide more information.

Perhaps it's time for me to consider to reinstall win7. Is there an option to do so via F8/F12 key at boot up time?

Thanks for all your efforts and guidance.

 

[TwinHeadedEagle]

Yes, it is probably the best option to reinstall your Windows. You can press F12 to bring boot menu at which you can choose media to boot your Windows installation from.