Author Topic: AV Security 2012 isn't being removed by avast.  (Read 24000 times)

0 Members and 1 Guest are viewing this topic.

toobusyforvirus

  • Guest
Re: AV Security 2012 isn't being removed by avast.
« Reply #30 on: November 12, 2011, 12:20:34 AM »
here's the file that popped up when I rebooted after the fix.

Is that what we want?

toobusyforvirus

  • Guest
Re: AV Security 2012 isn't being removed by avast.
« Reply #31 on: November 12, 2011, 12:23:36 AM »
Thanks for all your help. You're amazing! Is there any way I can order you like some pizza or take-out or something for your trouble?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37507
  • Not a avast user
Re: AV Security 2012 isn't being removed by avast.
« Reply #32 on: November 12, 2011, 12:27:35 AM »
rember to update Malwarebytes before you run the quick scan....

toobusyforvirus

  • Guest
Re: AV Security 2012 isn't being removed by avast.
« Reply #33 on: November 12, 2011, 12:33:45 AM »
I checked the update box in the installation dialog when it gave me choices for update after installation and run after installation.

toobusyforvirus

  • Guest
Re: AV Security 2012 isn't being removed by avast.
« Reply #34 on: November 12, 2011, 12:35:58 AM »
I did tell it to run a full scan instead of a fast scan though. How long should that take, assuming it's a few hundred gig drive that's nearly full. It's been chugging away at scanning rosetta stone files for about 5 minutes or so now LOL

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37507
  • Not a avast user
Re: AV Security 2012 isn't being removed by avast.
« Reply #35 on: November 12, 2011, 12:51:11 AM »
well...i guess we will see that log tomorrow then....
if it find anything you click the "remove selected" button to send it to quarantine

toobusyforvirus

  • Guest
Re: AV Security 2012 isn't being removed by avast.
« Reply #36 on: November 12, 2011, 02:30:51 AM »
I stopped it after finding 5 because it looked like it was going to take forever. Ran a quick scan and found 11. I'll add the logs from those in a minute. I'm just going through all the procedures that everyone linked me to to make sure I get rid of everything. I'll run the full scan when I go to sleep so it should be finished in the morning.
« Last Edit: November 12, 2011, 02:32:49 AM by toobusyforvirus »

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37507
  • Not a avast user
Re: AV Security 2012 isn't being removed by avast.
« Reply #37 on: November 12, 2011, 11:13:00 AM »
your log say "NO ACTION TAKEN"......did you not click the "REMOVE SELECTED" button after scan ?

if you have to run it again remeber to UPDATE first


« Last Edit: November 12, 2011, 11:46:32 AM by Pondus »

ladyaseret

  • Guest
Re: AV Security 2012 isn't being removed by avast.
« Reply #38 on: November 12, 2011, 11:15:55 AM »
I have the same problem here is the Rogue Killer information:

Ladyaseret

*************************************

RogueKiller V6.1.7 [11/05/2011] by Tigzy
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.geekstogo.com/forum/files/file/413-roguekiller/
Blog: http://tigzyrk.blogspot.com

Operating System: Windows 7 (6.1.7600 ) 64 bits version
Started in : Normal mode
User: Teresa [Admin rights]
Mode: Remove -- Date : 11/12/2011 03:14:03

¤¤¤ Bad processes: 6 ¤¤¤
[SUSP PATH] MossySkySA.exe -- C:\Users\Teresa\AppData\Local\MossySkySA\bin\2.0.15.0\MossySkySA.exe -> KILLED [TermProc]
[SUSP PATH] visicom_antiphishing.exe -- C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe -> KILLED [TermProc]
[SUSP PATH] Linkury.exe -- C:\Users\Teresa\AppData\Local\Linkury\Application\Linkury.exe -> KILLED [TermProc]
[SUSP PATH] netsession_win.exe -- C:\Users\Teresa\AppData\Local\Akamai\netsession_win.exe -> KILLED [TermProc]
[SUSP PATH] netsession_win.exe -- C:\Users\Teresa\AppData\Local\Akamai\netsession_win.exe -> KILLED [TermProc]
[SUSP PATH] AV Security 2012v121.exe -- C:\Users\Teresa\AppData\Roaming\WWWJJ7ffE\AV Security 2012v121.exe -> KILLED [TermProc]

¤¤¤ Registry Entries: 7 ¤¤¤
[SUSP PATH] HKCU\[...]\Run : MossySkySA ("C:\Users\Teresa\AppData\Local\MossySkySA\bin\2.0.15.0\MossySkySA.exe") -> DELETED
[SUSP PATH] HKCU\[...]\Run : Akamai NetSession Interface (C:\Users\Teresa\AppData\Local\Akamai\netsession_win.exe) -> DELETED
[SUSP PATH] HKCU\[...]\Run : Linkury Chrome Smartbar (C:\Users\Teresa\AppData\Local\Linkury\Application\Linkury.exe startup) -> DELETED
[SUSP PATH] HKLM\[...]\Wow6432Node\Run : Anti-phishing Domain Advisor ("C:\ProgramData\Anti-phishing Domain Advisor\visicom_antiphishing.exe") -> DELETED
[SUSP PATH] RunAsStdUser Task.job : C:\Users\Teresa\AppData\Local\MossySkySA\bin\2.0.15.0\MossySkySA.exe -> DELETED
[HJ] HKLM\[...]\NewStartPanel : {59031a47-3f72-44a7-89c5-5595fe6b30ee} (1) -> REPLACED ()
[HJ] HKLM\[...]\NewStartPanel : {20D04FE0-3AEA-1069-A2D8-08002B30309D} (1) -> REPLACED ()

¤¤¤ Particular Files / Folders: ¤¤¤

¤¤¤ Driver: [NOT LOADED] ¤¤¤

¤¤¤ Infection :  ¤¤¤

¤¤¤ HOSTS File: ¤¤¤


Finished : << RKreport[1].txt >>
RKreport[1].txt



Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37507
  • Not a avast user
Re: AV Security 2012 isn't being removed by avast.
« Reply #39 on: November 12, 2011, 11:21:40 AM »
@ladyaseret

when having problems, start your own topic....as helping multiple users in the same thread will only be chaos
also every fix essexboy make is different for every computer so must only be run on the computer it is made fore...or else damage may occure


follow the instructions here and attach all logs  also the one you posted here
http://forum.avast.com/index.php?topic=53253.0

also see DavidR post there how to start a new topic
« Last Edit: November 12, 2011, 11:26:32 AM by Pondus »

ladyaseret

  • Guest
Re: AV Security 2012 isn't being removed by avast.
« Reply #40 on: November 12, 2011, 11:27:17 AM »
Sorry I am way new at this.

« Last Edit: November 12, 2011, 12:22:28 PM by ladyaseret »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: AV Security 2012 isn't being removed by avast.
« Reply #41 on: November 12, 2011, 06:09:48 PM »
Could you now run a fresh OTL log please and let me know what the current problems are  ;D

toobusyforvirus

  • Guest
Re: AV Security 2012 isn't being removed by avast.
« Reply #42 on: December 12, 2011, 03:25:58 AM »
Hello, I think I either got the same thing again, or it missed a file last time because it popped back up again.

I had malwarebytes from before and left it on because it seemed to be doing a pretty good job, but it kept saying that it had expired. My skyrim crashed on a loading screen and rebooting was all I could do to fix it. When the system rebooted I saw malwarebytes start running in the tray and I figured since it was expired it wasn't doing anything so I told it to exit (d'oh) then I went on demonoid to look for old tv shows and didn't close the dumb pop up they always have fast enough, and accidentally brushed the mouse button as I was mousing down to the taskbar to close it. Amazingly enough the same security program started running again.

The weird thing though is that this time I tried booting in safe mode with networking like before and that program started up there too (I don't remember it doing it in safe mode last time).

Any ideas where I should start?

toobusyforvirus

  • Guest
Re: AV Security 2012 isn't being removed by avast.
« Reply #43 on: December 12, 2011, 03:27:42 AM »
I almost forgot to add, it was also preventing me from reopening malwarebytes.

I remember that safe mode gave me an option for system restore. Should I use that, or would it still be there?
« Last Edit: December 12, 2011, 03:38:35 AM by toobusyforvirus »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: AV Security 2012 isn't being removed by avast.
« Reply #44 on: December 12, 2011, 07:55:07 PM »
Ok lets start from square one then could you run a fresh OTL scan please