Hi
I see you still don't have svchost.exe running according to your latest hjt log. Had you deleted legal c:\windows\system32\svchost.exe file before you posted your topic opening post?
According to ComboFix log you followed my last instructions for copying svchost.exe file from c:\i386 folder to c:\windows\system32 folder. Did you have a reboot between combofix run and last hjt log? If you did then please check does c:\windows\system32 folder contain svchost.exe file at the moment.
EDIT: And do you know what is this C:\WINDOWS\system32\svchost.rar file?
I see you still don't have svchost.exe running according to your latest hjt log. Had you deleted legal c:\windows\system32\svchost.exe file before you posted your topic opening post?
According to ComboFix log you followed my last instructions for copying svchost.exe file from c:\i386 folder to c:\windows\system32 folder. Did you have a reboot between combofix run and last hjt log? If you did then please check does c:\windows\system32 folder contain svchost.exe file at the moment.
EDIT: And do you know what is this C:\WINDOWS\system32\svchost.rar file?
Last edited: