"Severe virus infection" and strange Network computers

AlmostBlink

Reputable
Mar 17, 2014
1
0
4,510
Hello,

I recently noticed that my computer is slowing and crashing a lot more. I also noticed a strange appearance of computers on my network. I live in a student apartment complex and the internet has never felt too secure or of a high performance. However, I'm pretty certain my networks never used to show all of these:

zjSBV.jpg


I run a Connectify Hotspot from my computer if that helps, however, it's not an open connection.

Today I decided that my computer was getting a little too slow and the network visibility was making me a little uncomfortable, so I ditched AVG and downloaded Avast free anti-virus and COMODO firewall.

I noticed that there were a TON of svchost.exe connections that pointed to various other local IP addresses in this building (I assume) which kinda freaked me out, but I understand they may not all be harmful.

I then contacted a technician at GeekBuddy and although I don't have a subscription with them, he took a remote-admin look at my system and said I have a severe virus infection that Avast wouldn't be able to remove. I'm a poor student and can't afford the GeekBuddy subscription, but if that wasn't a marketing ploy, it sounds pretty serious.

Below I've linked adwCleaner, aswMBR and FRST log files. I would really appreciate some direction.

adwCleaner log: http://pastebin.com/WaBBgyNy
aswMBR log: http://pastebin.com/udv8J4XT
FRST log: http://pastebin.com/aeDXL8en
FRST Addition log: http://pastebin.com/b2CH2pZz
 
Assuming that the network belongs to the education establishment, I'd venture to say that the computers you are seeing are legit.

Most viruses and similar threats are designed to steal info from the infected system. It would actually be very foolish for the virus creator to code the software to allow remote connections to his/her network of computers. Doing this is dumb because not only is this allowing more avenues to be traced back to the virus's origin, but it also opens up more gateways for the attacker's system(s) to be comprimised.

What is not uncommon; however, is that since you're on a public network, and that other connections are very likely doing questionable things, you could have been infected from the network.

I agree with anonymous1, run your current AV, as you've already got a service subscription to it. Here are some FREE, yet very effective AV/AS tools:

1. Malwarebytes Antimalware
2. CCleaner
3. Super Antispyware
4. Panda Antivirus