Com surrogate and tons of service host

[gimpmister]

I ran roguekiller, but after it gets through the prescan, it doesn't allow me to select the scan (the circle by the word driver is red as well). I am also attaching FRST scann again, but it was ran in safe mode since it would not run in regular mode. Sorry about all the struggles. Thanks

 

[gimpmister]

I was not able to get roguekiller to run a scan even in safe mode, I am attaching the farbar reports though.

 

[argus]

Can you run any program in normal mode?

 

[gimpmister]

So far, I still haven't been able to run either of these programs. I was able to run norton however, but it came back without finding anything.

 

[gimpmister]

I was able to run TDSSKiller and get the report log from it. I don't know if this helps.

 

[argus]

FRST save it to a flash drive.
Plug the flash drive into the infected PC.



If you are using Windows8 consult
http://www.bleepingcomputer.com/tutorials/windows-8-recovery-environment-command-prompt/

How to use the Windows 8 System Recovery Environment Command Prompt to enter System Recovery Command prompt.




Once in the Command Prompt:

In the command window type in notepad and press Enter.
The notepad opens. Under File menu select Open.
Select "Computer" and find your flash drive letter and close the notepad.
In the command window type e:\frst (for x64 bit version type e:\frst64) and press Enter
Note: Replace letter e with the drive letter of your flash drive.
The tool will start to run.
When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) on the flash drive. Please copy and paste it to your reply.

 

[gimpmister]

Thanks for the advice! It worked! I have attached the log from here to this post! Thank you!

 

[argus]

Do this

http://www.tomshardware.co.uk/faq/id-2080276/chkdsk-windows.html

then

http://www.eightforums.com/tutorials/3047-sfc-scannow-command-run-windows-8-a.html

 

[gimpmister]

Thanks for the continued help! I was able to get both of these programs to run and say that the problems were fixed. I still have service host and com surrogates in the background, so I am wondering what next steps I should be taking to remove these? Thanks again, the help has been greatly appreciated!

 

[argus]

Your system has been destroyed, I suggest reformate.
Sorry.