Avast WEBforum

Other => General Topics => Topic started by: lorangepoppy@gmail.com on June 28, 2014, 11:07:07 PM

Title: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on June 28, 2014, 11:07:07 PM
I have (had?) Avast Internet Security. Today I noticed that I couldn't turn on my Firewall. I googled the error message (something like "Firewall cannot be turned on!" and followed the advice (I think it was a thread on this forum) to uninstall and reinstall. Upon attempting to reinstall, I am getting the message "Please fix this issue to continue the installation: The Base Filtering Engine (BFE) service is not running. Please ensure the service is enabled before installing avast!."

How do I enable the BFE?

Thanks in advance!

Please, someone, help me as soon as poss because I can't even turn on Windows Firewall now :( ..almost in tears. Also, I'm not hugely technical and don't even know what a BFE is.
Title: Re: Un/Re-install Problem
Post by: essexboy on June 28, 2014, 11:28:19 PM
Hi there, what version of windows do you have ?

Download OTL (http://oldtimer.geekstogo.com/OTL.exe)  to your Desktop
Secondary link (http://www.itxassociates.com/OT-Tools/OTL.exe)
(https://dl.dropboxusercontent.com/u/73555776/OTL_Main_Tutorial.gif)

netsvcs
BASESERVICES
%SYSTEMDRIVE%\*.exe
CREATERESTOREPOINT


Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on June 28, 2014, 11:48:22 PM
Thank You! Rescanning because I forgot to check All Users and None (under Extra Registry)

I have Windows 7
Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on June 29, 2014, 12:11:16 AM
My second scan didn't produce the Extras.Txt file, but I'll attach the one from the first scan just in case that's okay.

Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on June 29, 2014, 12:14:30 AM
Also, I thought to turn on Windows Firewall while I work on this problem, but I can't even do that! It gives me Error Code 0x80070424
Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on June 29, 2014, 12:46:23 AM
Is there some way to protect my computer while I'm online waiting for an answer?
Title: Re: Un/Re-install Problem
Post by: essexboy on June 29, 2014, 11:17:50 AM
Hi could you open the OTL logs, save them as ASNI and then re-attach please

Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on June 29, 2014, 05:34:47 PM
Hi Essexboy and thank you for responding. I actually was able to solve my problem by downloading a BFE file (from somewhere on a site called sevenforums) and then turning off my computer completely (not just a restart) and back on again. Then I was able to reinstall avast and turn on its firewall. So far, so good!

I do still have a question, though, because I still get an error message "Windows Firewall can't change some of your settings. Error Code 0x80070424" when I click "Use recommended settings" under Systems and Security > Windows Firewall. Is this okay? Will the avast firewall be enough protection? I've run Malwarebytes AntiMalware and Spybot Search & Destroy several times until no problems existed (that they were able to detect).
Title: Re: Un/Re-install Problem
Post by: essexboy on June 29, 2014, 05:56:58 PM
Avast firewall is sufficient.  It is just that the removal of the BFE service may mean some other services are also disabled which is why I asked for the OTL
Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on June 29, 2014, 06:26:27 PM
Oh! So I'm not out of the woods yet then? Here's the OTL as ANSI (attached). I appreciate your help!
Title: Re: Un/Re-install Problem
Post by: essexboy on June 29, 2014, 07:04:56 PM
OK I have found that you have several services missing, these include security centre and BFE among others.  This is normally indicative of a zero access infection that was badly cleaned

Download and Install Combofix
 
Download ComboFix from one of the following locations:
Link 1  (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)
Link 2 (http://www.forospyware.com/sUBs/ComboFix.exe)
 
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
 
* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here  (http://forums.whatthetech.com/How_Disable_your_Security_Programs_t96260.html&pid=494216#entry494216)
(http://img.photobucket.com/albums/v706/ried7/NSIS_disclaimer_ENG.png)

(http://img.photobucket.com/albums/v706/ried7/NSIS_extraction.png)

Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3.  If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.


Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now
Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on June 30, 2014, 05:02:32 AM
First: Thank you. I appreciate your willingness to help me through this. I downloaded ComboFix, turned off avast (or so I thought) and tried to run ComboFix. ComboFix is giving me this message:

Warning!!! ComboFix has detected the following realtime scanners to be active:
antivirus: avast! Internet Security
antispyware: avast! Internet Security

Please let me know how to turn avast off completely. I've been through all the tabs and the only things I saw that I can disable are the shields, the firewall, and antispam. I have a big red box telling me You are Not Protected!!!

Meanwhile, the warning box from ComboFix tells me to "disable all scanners before clicking ok" and that I could seriously damage my machine.

Help! I'm stuck! I'm afraid to turn avast back on, though it's not completely off apparently, and I'm afraid to click OK because I don't think avast is completely shut down. The only thing I can think of is ctrl-alt-del. Should I do that? (Edit: I tried ctrl-alt-del on avast but it wasn't "allowed.")

Why doesn't avast have one single command to "disable avast"? Maybe it does and I'm just not seeing it.
Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on June 30, 2014, 05:19:07 AM
From bleepingcomputer:
How to Temporarily Disable your Anti-virus

AVAST
Right-click on the avast! icon in system tray (looks like this: avast.jpg but orange in color starting with v5). Select avast! shields control and there will be options to disable avast for 10 minutes, 1 hour, until the computer is restarted or permanently.

So! It looks like even though I'm getting that warning, avast really is disabled right now. They told someone else to ignore the warnings and just run it, but I'm hesitating as the thread is from 2011. I think I'm just going to back up and x-out the warning box for now and turn avast back on and wait for your reply.

Again, thank you so much!

Edit: Oh GOD! I clicked the x on the warning box (instead of OK, under the assumption that x would close/cancel it) and now I get THIS!

Warning!! The above realtime scanners are still active but ComboFix shall continue to run. Kindly note that this is at your own risk

What?! Are you KIDDING ME??? Kindly note, ComboFix, that you need a CANCEL button! I'm so SICK of this!!!!

I'm also reading that no one should use this unless they are under the guidance of a malware removal specialist. Not to be rude, but are you one of those?
Title: Re: Un/Re-install Problem
Post by: CraigB on June 30, 2014, 05:34:50 AM
Yes essexboy is a malware specialist, he also instructs at Bleepingcomputer :)

Please be patient and wait for essexboy to respond, he'll be back on the forum in probably another 6-7 hours.
Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on June 30, 2014, 05:38:08 AM
Thank you, Craig, I'm sitting here freaking right out. I am in the middle of downloading ArcheAge and wonder if I can continue the download with avast disabled or should I reenable avast and continue the download (it's huge and taking forever, but now I only have about 6 more hours to go) and just kind of ignore that ComboFix warning box?
Title: Re: Un/Re-install Problem
Post by: CraigB on June 30, 2014, 05:48:17 AM
Personally I wouldn't be downloading anything until the system is proven to be clean and avast is back up and working again with the all clear from essexboy, patience is required in these matters otherwise you could end up in more trouble than you started with.
Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on June 30, 2014, 06:01:50 AM
Thank you, CraigB! And thank you, Essexboy! I'll kill the download and be patient. Appreciate your voices of reason. I am so glad this forum exists or I'd be in dire straits. <3 I'll check back in the morning. Huge appreciation ~
Title: Re: Un/Re-install Problem
Post by: essexboy on June 30, 2014, 03:30:05 PM
Ignore the combofix warning once the avast shields are off.  Avast should then ignore any files being run
Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on June 30, 2014, 08:23:37 PM
Glad to see you, Essexboy!
Ignored the warning and proceeded...here's the CombFix log:
Title: Re: Un/Re-install Problem
Post by: essexboy on June 30, 2014, 08:53:17 PM
How is the computer running now ?
Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on June 30, 2014, 10:38:37 PM
So far, so good PLUS my windows firewall exists, is turned on, and working! Wish I could buy you a drink! :D  Is there a next step?
Title: Re: Un/Re-install Problem
Post by: essexboy on June 30, 2014, 10:41:23 PM
Just this


Subject to no further problems   :)

I will remove my tools now and give some recommendations, but, I would like you to run for 24 hours or so and come back if you have any problems 

Now the best part of the day ----- Your log now appears clean  :thumbsup:

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset  System Restore points:

Download and run Delfix (http://general-changelog-team.fr/fr/downloads/finish/20-outils-de-xplode/9-delfix)

(https://dl.dropboxusercontent.com/u/73555776/delfix.JPG)


: Keep Java Updated :

WARNING: Java is the #1 exploited program at this time. The Department of Homeland Security recommends that computer users disable Java
See this article (http://www.forbes.com/sites/eliseackerman/2013/01/11/us-department-of-homeland-security-calls-on-computer-users-to-disable-java/) and this article (http://www.nbcnews.com/technology/technolog/us-warns-java-software-security-concerns-escalate-1B7938755).
I would recommend that you completely uninstall Java unless you need it to run an important software.
In that instance I would recommend that you disable Java in your browsers until you need it for that software and then enable it. (See How to diasble Java in your web browser (http://www.geekstogo.com/2600/how-to-disable-java-in-your-web-browser/) and How to unplug Java from the browser (http://krebsonsecurity.com/how-to-unplug-java-from-the-browser/))

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes:

CryptoPrevent (http://www.foolishit.com/vb6-projects/cryptoprevent/) install this programme to lock down and prevent crypto ransome ware

(https://dl.dropboxusercontent.com/u/73555776/CryptoPrevent.JPG)

Malwarebytes (http://www.malwarebytes.org/mbam-download.php).

Update and run weekly to keep your system clean


It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To learn more about how to protect yourself while on the internet read this little guide  Best security practices  (http://www.bleepingcomputer.com/forums/t/407147/answers-to-common-security-questions-best-practices/)Keep safe  :wave:
Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on June 30, 2014, 10:58:46 PM
Wonderful news! Thank you so so very much!

I will do Delfix and disable Java (I don't even remember why I have it in the first place) and do CryptoPrevent also. I already have Malwarebytes.  I'll also read the link you gave on best security practices. This computer is pretty fancy for me (and expensive), and I want to protect it.

I'll check back here in this thread in approximately 24 hours and let you know how things are going. Unless everything explodes, haha, but I doubt that will happen. Thanks again, you're amazing!
Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on June 30, 2014, 11:25:15 PM
Per CryptoPrevent, I can't find a link to the free version...
Title: Re: Un/Re-install Problem
Post by: essexboy on June 30, 2014, 11:27:08 PM
Use this link and ensure you select free :)
http://www.foolishit.com/download/cryptoprevent-installer/
Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on July 01, 2014, 01:19:15 AM
Well, there it is! *wink* Thanks!
Title: Re: Un/Re-install Problem
Post by: essexboy on July 01, 2014, 02:54:11 PM
My pleasure
Title: Re: Un/Re-install Problem
Post by: lorangepoppy@gmail.com on July 02, 2014, 02:31:48 AM
Lorangepoppy checking in! All is running smoothly. Essexboy, thank you from the bottom of my heart. You likely saved me from a world of hurt.
Title: Re: Un/Re-install Problem
Post by: essexboy on July 02, 2014, 03:01:27 PM
:)