svchost.exe hollow processes in syswow64 folder

[rockwh]

I have two hollow process svchost.exe files running from the syswow64 folder... If I visit any kind of anti-malware website the web browser closes automatically , i ran malwarebytes and Zemana and got rid of the smaller problems but i couldn't find a fix to this one,

here's the Addition.txt and FRST.txt files, Thank you in advance.

 

[TwinHeadedEagle]

Hello,

Do you still need my help?

 

[rockwh]

Hello,

Do you still need my help?

yes please, i'm having the problem

 

[TwinHeadedEagle]

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

 

[rockwh]

Fix with Farbar Recovery Scan Tool

This fix was created for this user for use on that particular machine.

Running it on another one may cause damage and render the system unstable.

​

Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

• Right-click on
  
  icon and select
  
  Run as Administrator to start the tool.
  (XP users click run after receipt of Windows Security Warning - Open File).
• Press the Fix button just once and wait.
• If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
• When finishes FRST will generate a log on the Desktop, called Fixlog.txt.

Please attach it to your reply.

Hello here's the files, but i had to disable the Svchost from the task manger before doing the fix because the scan tool stops responding once i open it with the Svchost still running, despite mentioning that the fix took less than a second... should i run it on safe mode? do i have to run it while the malware is running as well? thank you in advance

 

[TwinHeadedEagle]

Let me know if this fixed it. Fixlist attached for another FRST fix.

 

[rockwh]

Let me know if this fixed it. Fixlist attached for another FRST fix.

Worked like a charm, thank you.

 

[TwinHeadedEagle]

Can you attach fixlog.txt please?