Audio advertisement Virus??

About a month ago we had a redirect virus that we deleted successfully. All was fine until about a bout a week ago when my computer started repeating an audio advertisement/propaganda track. Even when I turn off the internet, it continues playing. I ran a malwarebytes scan and the results state three different malicious items:
1-- file trojan agent on windows\svchost.exe
1-- memory process trojan agent on windows\svchost.exe
1-- PUP.toolbardownloader
Several instances I have tried to delete the malicious items with now success. They keep coming back.
Any solutions on how to get rid of this would be appreciated.

Thank you

 

Welcome to MajorGeeks, dogmoat

http://img196.imageshack.us/img196/3557/tdsskiller.gif I want you to read and follow these instructions: TDSSKiller - How to run

__

Afterwards, read and follow these instructions: READ & RUN ME FIRST Malware Removal Guide

 

Tahnk you for your response. The TDSS Killer detected rootkit.boot.pihar.c on physicaldrive:\device\hardisk0\DRO. Scan is attached.

 

Hello,

Now that Pihar.C appears to be gone, rescan with TDSSKiller and also delete the TDSS File System. Skip all other detections.

Attach this log when finished.

Then continue with thh Read and Run Me First.

 

OK-- I ran the listed scans. See attaced. Not sure if I am still having problems... please advise how I can check to see if my computer is clear as your directions state not to run any more scans

thank you

thanks View attachment RKreport[2].txt

View attachment mbam-log-2012-06-24 (22-57-20).txt

View attachment MGlogs.zip http://C:\Users\Fam\Desktop\hitman 062412.xml

 

Hello,

Can you retry attaching the the HitmanPro log?
Are you still experiencing the repeating of an audio advertisement/propaganda track?

 

I am unable to attach the hitman log as it is in a .xml file.

However, my computer is working just fine now. the virus is gone. :-D


thank you-- Julie

 

You're welcome

If you are not having any other malware related problems, it is time to do our final steps:

• Any programs we had you download and/or install can be removed at this time.
• If we had you download and run ComboFix, here is how to uninstall it:
  • Press and hold the Windows key http://i1106.photobucket.com/albums/h363/debojyotidas/Windows_Logo_key.gif and then press the letter R on your keyboard.
  • This opens the Run dialog box.
  • Copy and paste the below text inside the text-field:
    • "%userprofile%\desktop\ComboFix" /uninstall
  • Now press ENTER
  • ComboFix will extract its files one last time and you should receive a notification that ComboFix has been uninstalled shortly after.
• You can re-enable your Disk Emulation software at this time via DeFogger.
• If we had you create or download a registry patch or "fix" script, these can be deleted at this time.
• Go into the C:\MGtools folder and run the MGclean.bat file to remove additional traces of our tools.
• Now we will toggle System Restore to remove any infected system restore points.
  • Read this: How to Disable And Enable System Restore
• Lastly, here is a guide to protect you from future infections: How to Protect yourself from malware!
• Be safe