1
viruses and worms / Re: Avast Problem/Infection?
« Last post by ninefour on Today at 11:12:06 PM »aswMBR, OTL, and Extras
forum.avast.com
News:
avast! Free Edition - free for home non-commercial use!
Recent Posts
2
viruses and worms / Re: PLEASE HELP! I CAN´T DELETE A BITCOINMINER TROJAN
« Last post by Zam1990 on Today at 11:08:45 PM »sorry for doubting you hehehehe
here are the logs from mbar y zoek
here are the logs from mbar y zoek
3
avast! Free/Pro/Suite / Re: downgrade back to avast Free?
« Last post by INGBEAN on Today at 11:04:41 PM »Then there's no easy solution?
Hello Karolinger!
No.
There was a bug in avast! Free V8.0.1482 and 1483 (a combination with system restore) - but it should be solved now.
So please make a clean install of the most recent version 1489.
INGBEAN
4
viruses and worms / Re: Avast Problem/Infection?
« Last post by ninefour on Today at 10:59:50 PM »Adwcleaner logs
5
Deutsch / Re: Windows 2000 und Free V8.0.1483 - kein VPS-Update bei PC-Start
« Last post by INGBEAN on Today at 10:54:03 PM »Hallo HDW38!
Mir ging es eher darum, den installierten Funktionsumfang darzustellen.
Bezüglich der Aktualität hatten wir beide recht - die 1489 ist "erst" am 09.05.2013 erschienen und mein Post war etwas früher.
Gute Nacht!
INGBEAN
Wäre schon möglich, unter Windows XP gibt es ja auch noch den Ordner "C:\Dokumente und Einstellungen\All Users\Anwendungsdaten\AVAST Software", wo das Programm erforderliche Dateien hinterlegt.1. Als Anhaltspunkt sind hier meine Ergebnisse bezüglich Festplattenbedarf des Standard-Ordners "C:\Programme\AVAST Software".Zu 1: Meine Daten waren von hier: --> Einstellungen --> Systemsteuerung --> Software!
Könnte mir vorstellen, dass es dazwischen Differenzen gibt. Beweise hab ich noch keine.
Danke für deinen Hinweis. Ich habe hier nur eine Partition pro Notebook-Festplatte.2. Die sauberen Neu-Installationen wurden jeweils als "Schnellinstallation" durchgeführt.Zu 2: Das war bei mir unterschiedlich. Denn in Abhängigkeit zur HDD-Größe hab ich oft nur das System + FW
auf 'C:'! Die Schnellinstallation geht aber nur auf die 'System'-HDD!
Mir ging es eher darum, den installierten Funktionsumfang darzustellen.
Na klar, ist ja bereits passiert (siehe Signatur).4. Ich bin zwar noch nicht auf die offizielle 1488 umgestiegen - werde dies im Laufe der nächsten Woche tun.Zu 4: Du steigst doch hoffentlich auf die aktuelle 1489 um.
Bezüglich der Aktualität hatten wir beide recht - die 1489 ist "erst" am 09.05.2013 erschienen und mein Post war etwas früher.
Möglichst lange.5. Ich muss zugeben, dass die V7 (meinem Gefühl nach) etwas schneller als V8 war.Zu 5: Das Gefühl hab ich auch und ich bin gespannt, wie lange mein alter Läppi das noch mitmacht.
Gute Nacht!
INGBEAN
6
Anti-Theft (Theft Aware) / Re: Which security features do you want to see in avast! Anti-Theft
« Last post by cookies0759 on Today at 10:53:54 PM »Not sure if this is already a feature. If the sim card is the known original sim card, optionally, can out-going calls be disabled on it, even if it is subsequently switched to another phone? (this stops a large bill being put on that account). If the sim card has already been changed, one might want to keep calls enabled just so that sms's can be sent. Alternatively enabling/disabling could be automatic as required.
Also on the subject of taking photos, there's not much difference between that and a shop owner having cctv, and photos might provide good evidence. If the owner instructed the phone to take photos, wouldn't that be a decision of the owner, not Avast, and so Avast could disclaim any liability? That's one for the lawyers!
Also on the subject of taking photos, there's not much difference between that and a shop owner having cctv, and photos might provide good evidence. If the owner instructed the phone to take photos, wouldn't that be a decision of the owner, not Avast, and so Avast could disclaim any liability? That's one for the lawyers!
7
viruses and worms / Avast Problem/Infection?
« Last post by ninefour on Today at 10:51:49 PM »I had upgraded to Avast 8 in April without any problems. It seemed clunky but usable. In mid April there were several updates all at once.(Java, Windows, Firefox, Avast, etc) and one day Avast died on me. The tray icon couldn't be accessed and neither could the desktop icon. Windows said I was "still protected". ( I had been watching a YouTube video and when I minimized it the Avast tray icon was gone)
I disconnected my router and managed to do file scans by right clicking on folders. Nothing was detected so I rebooted. Avast started but didn't work right so I did a repair. After the repair I could scan from the UI if I deselected the choices in the settings > performance. I began to notice stuff like: SVC: WmdmPmSN > C:\WINDOWS\System32\svchost.exe
---
I downloaded and ran msert.exe (with Avast disabled) and found nothing. I reinstalled Avast and had the same problems. I downloaded Malwarebytes and found these problems:
Registry Values Detected: 3
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|bak_XMLLookup (Hijacker.XMLLookup)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|bak_Application (Hijacker.Application)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|bak_intl (Hijacker.intl) .
Registry Data Items Detected: 3
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|XMLLookup (Hijacker.XMLLookup)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|Application (Hijacker.Application)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|intl (Hijacker.intl)
Mallwarebytes fixed these and there have been no more infections detected..
---
Before upgrading to Avast 8.0.89 I used aswclear.exe in safe mode and reinstalled in safemode. Avast works fine but I still get the SVC messages and quick scan works best if I deselect choices in settings/performance.
My ISP didn't notice any unusual actvity on my connection.
---
I tried AdwCleaner and got these results:
***** [Registry] *****
Key Found : HKLM\Software\Freeze.com
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
I checked again but had to update the program. I got the following result:
***** [Registry] *****
Key Found : HKCU\Software\YahooPartnerToolbar
My latest scans are clean.
---
Avast hasn't detected any viruses or problems and works but I still get the SVC messages in the GUI and scan logs. The boot scan log doesn't show the same problem.
I will attach AdwCleaner log, Malwarebytes log, both OTL logs, and the aswMBR log.
I also have a farbar service scanner log and a TDSSKILLER log.
I disconnected my router and managed to do file scans by right clicking on folders. Nothing was detected so I rebooted. Avast started but didn't work right so I did a repair. After the repair I could scan from the UI if I deselected the choices in the settings > performance. I began to notice stuff like: SVC: WmdmPmSN > C:\WINDOWS\System32\svchost.exe
---
I downloaded and ran msert.exe (with Avast disabled) and found nothing. I reinstalled Avast and had the same problems. I downloaded Malwarebytes and found these problems:
Registry Values Detected: 3
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|bak_XMLLookup (Hijacker.XMLLookup)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|bak_Application (Hijacker.Application)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|bak_intl (Hijacker.intl) .
Registry Data Items Detected: 3
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|XMLLookup (Hijacker.XMLLookup)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|Application (Hijacker.Application)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Associations|intl (Hijacker.intl)
Mallwarebytes fixed these and there have been no more infections detected..
---
Before upgrading to Avast 8.0.89 I used aswclear.exe in safe mode and reinstalled in safemode. Avast works fine but I still get the SVC messages and quick scan works best if I deselect choices in settings/performance.
My ISP didn't notice any unusual actvity on my connection.
---
I tried AdwCleaner and got these results:
***** [Registry] *****
Key Found : HKLM\Software\Freeze.com
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\0FF2AEFF45EEA0A48A4B33C1973B6094
Key Found : HKLM\Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Components\305B09CE8C53A214DB58887F62F25536
I checked again but had to update the program. I got the following result:
***** [Registry] *****
Key Found : HKCU\Software\YahooPartnerToolbar
My latest scans are clean.
---
Avast hasn't detected any viruses or problems and works but I still get the SVC messages in the GUI and scan logs. The boot scan log doesn't show the same problem.
I will attach AdwCleaner log, Malwarebytes log, both OTL logs, and the aswMBR log.
I also have a farbar service scanner log and a TDSSKILLER log.
8
avast! Free/Pro/Suite / Re: Avast antivirus 6 files. Huh?
« Last post by DavidR on Today at 10:51:33 PM »CCleaner doesn't yet realise there is essentially no difference in the file/folder locations.
One thing I wouldn't let CCleaner go near avast files/folders, so I would uncheck those options.
One thing I wouldn't let CCleaner go near avast files/folders, so I would uncheck those options.
9
viruses and worms / Re: : C:\Windows\system32\services.exe **INFECTED** Win32:Sirefef-ZT [Trj]
« Last post by dee455 on Today at 10:48:12 PM »the last ones. I hope.
10
avast! Free/Pro/Suite / Avast antivirus 6 files. Huh?
« Last post by Cranky on Today at 10:44:10 PM »I installed Avast Free antivirus ... version 8.0.1489 on my new computer earlier this week . On two occasions while running CCleaner there have been files identified as Utilities- Avast Antivirus 6 . SIX?
I'm sure there is a simple explanation for this.
One would be appreciated. Thanks. Cranky.
avast! on Twitter
avast! on Facebook