AshAvast.exe non è una applicazione win32 valida

[martino954]

I have downloaded Avast 4.7 home edition. Installed the program, when  I try to use it, I receive the overwritten message.
Do you know which is the problem?
Thank
Martino

[Lisandro]

Please, post the last 200-250 lines of avast log: C:\Program Files\Alwil Software\Avast4\DATA\log\Setup.log

[psw]

Infected with something like Bagle?

[Maxx_original]

yes.. it's Beagle/bagle most probably.. try some online scanner before installing an antivirus "physically"... AV setups are frequently blocked (corrupted) by beagle...

[Lisandro]

try some online scanner before installing an antivirus "physically"

Kaspersky (very good detection rates)
ESET NOD32
Trendmicro housecall
AVGas (does not necessary if you have AVG antispyware installed)
F-Secure
BitDefender (free removal of the malware)

[DavidR]

yes.. it's Beagle/bagle most probably.. try some online scanner before installing an antivirus "physically"... AV setups are frequently blocked (corrupted) by beagle...

Since this is likely to be a beagle/bagle virus, which is usually protected/backed up by rootkit, would this not be a good test for the standalone beta avast anti-rootkit module ?

Edit: See this topic, http://forum.avast.com/index.php?topic=33753.0.

[martino954]

here lines from 200 to 250 of setup.log file.
I have tried many other antivirus as seen in other repliesbut none does the work correctli.
Thanks, very much
martino

[Lisandro]

Or you just copy avast log viewer information or you just did not take enough lines.
Can you open the log into Notepad, go to the end of it, and copy the latest 250 lines of it?
I can't help if I don't know what's wrong with your computer.
Anyway, I suggest an installation from the scratch:

1. Uninstall avast from Control Panel first.
2. Boot.
3. Use Avast Uninstall for complete uninstallation.
4. Boot.
5. Install again the last version.
6. Boot.
7. Check and post the results.

[polonus]

Hi martino954,

In the line of Tech's answer, before installing, you should try this:
F-Bagle
The F-Bagle utility disinfects computers infected with the certain Bagle worm variants. Please see the readme.txt file for more information.
Download: http://www.f-secure.com/tools/f-bagle.zip
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-bagle.zip

The unpacked version is available from here:
Download: http://www.f-secure.com/tools/f-bagle.exe
Download: ftp://ftp.f-secure.com/anti-virus/tools/f-bagle.exe
Readme: http://www.f-secure.com/tools/f-bagle.txt
Readme: ftp://ftp.f-secure.com/anti-virus/tools/f-bagle.txt

polonus

[martino954]

hi,
ok I have followed ypur instructions.
here from line n. 550 to the end of the setup.log file.
I am waiting your help.
Thanks.
Martino

[Lisandro]

Code: [Select]

Failed fixing security on: C:\Programmi\Alwil Software\Avast4\I suggest an installation from the scratch as before. You'll experiencing trouble on configuring the avast folders.

[martino954]

Hi,
a new installation of avast from scratch have no problem.
When I try to use avast I see the message: ... non è una applicazione win 32!
Perhaps I have to format.
I cannot install any other antivirus.
Thank
Bye bye
Martino

[essexboy]

Try this if it is bagle

Please download ComboFix from Here or Here to your Desktop.

**Note:  In the event you already have Combofix, this is a new version that I need you to download. It is important that it is saved and renamed following this process directly to your desktop**

• If you are using Firefox, make sure that your download settings are as follows:
• Tools->Options->Main tab
• Set to "Always ask me where to Save the files".
• During the download, rename Combofix to Combo-Fix as follows:
  
  
  
  
  
  
  
• It is important you rename Combofix during the download, but not after.
• Please do not rename Combofix to other names, but only to the one indicated.
• Close any open browsers.
• Close/disable all anti virus and anti malware programs so they do not interfere with the running of ComboFix.

-----------------------------------------------------------

• Very Important! Temporarily disable your anti-virus, script blocking and any anti-malware real-time protection before performing a scan. They can interfere with ComboFix or remove some of its embedded files which may cause "unpredictable results".
  
• Click on this link to see a list of programs that should be disabled. The list is not all inclusive. If yours is not listed and you don't know how to disable it, please ask.[/color]
  
  -----------------------------------------------------------

• Close any open browsers.
• WARNING: Combofix will disconnect your machine from the Internet as soon as it starts
  
• Please do not attempt to re-connect your machine back to the Internet until Combofix has completely finished.
• If there is no internet connection after running Combofix, then restart your computer to restore back your connection.

-----------------------------------------------------------

• Double click on combo-Fix.exe & follow the prompts.
  
• When finished, it will produce a report for you. 
• Please post the "C:\Combo-Fix.txt" along with a new HijackThis log for further review.
  

**Note: Do not mouseclick combo-fix's window while it's running. That may cause it to stall**

[Lisandro]

I cannot install any other antivirus.

You're infected. The virus is preventing you to install antivirus.
I suggest a full computer on-line scanning:
Kaspersky (very good detection rates)
ESET NOD32
Trendmicro housecall
AVGas (does not necessary if you have AVG antispyware installed)
F-Secure
BitDefender (free removal of the malware)