Anti-Malware/Spyware/Virus software not fixing problem

[Navaros]

On my computer, malware tries to open random webpages in both IE and Firefox.

I often get notifications from AdWatch Live! claiming that it blocked access to a malicious website, and that svchost.exe is trying to open the site.

I have fully updated and then scanned my computer with the latest versions of all of the following:

TrendMicro HouseCall
AVG Anti-Virus
Avast Anti-Virus
Ad-Aware
MalWarebytes Anti-Malware
Spybot Search and Destroy

I have scanned while in safe mode of Windows XP. I have performed boot scans with Avast.

I have looked at my hosts file and there didn't appear to any strange entries there.

Despite all of that, the problem remains undetected and unfixed by any of the aforementioned software.

Can you please tell me why the aforementioned software is all failing to detect and fix this problem, and what I can do to detect and fix this problem?

 

[Binky]

There's a great thread on this:

http://forums.anandtech.com/showthread.php?t=2094316

Have you looked through this thread, and followed the steps outlined? Is your hijackthis log clean?

There's a reason some people just reformat when they get malware - it can be much easier to just start over than find and fix the problem.

 

[Navaros]

I have looked that thread and did some of the stuff listed in it like disabling system restore. I have tested my HijackThis l log on the page linked-to in that thread and the only unsafe reports it mentioned were from AV and Anti-Spyware software where I deleted the company branding that was there by default when asking me what folder to create for it during install. Hence, I presume my HijackThis log is clean.

It would be useful if you or someone could tell me the name of software that will detect and eliminate these problems other than the failed software packages which I have mentioned.

I also find it quite annoying how when AdWatch and Avast block access to a malicious site that svhost.exe is trying to open, they just say 'no further action is required.' Of course further action is required, so that doesn't keep happening. Why don't they just tell me what file is triggering the svchost.exe to do that and then clean it up?

 

[raincityboy]

I've seen infections like this before, and a few times they turned out to be a MBR infection, like sinowal.
Easy fix. Boot from windows disc > choose repair > fixmbr > reboot
No harm

 

[MadScientist]

Try Combofix. It's my go to to malware removal tool when all the others fail.

Download it here: http://www.bleepingcomputer.com/combofix/how-to-use-combofix

Run it in Safe Mode with networking.