Avast WEBforum
Other => Viruses and worms => Topic started by: Apostolos 2 on February 13, 2020, 03:04:56 PM
-
I quit Windows Defender and switched to Avast Premium Security (yes, the paid one), in order to have a better protection. I use my pc for gaming, youtube facebook, movies etc. Today i turned on my PC, at first it gave me a warning and then rebooted. It turned on again and i noticed that avast didn't startup with the system (boot was slow by the way). I knew from the start that something was happening so i checked the programs list (screenshot 1). Avast didn't EXIST! I went to services so i can restart it. Nothing again (screenshot 2). I downloaded Malwarebytes because windows defender was also disabled. The results were amazing i had a trojian and a bitcoin miner! I will attach these so you can investigate. After malwarebytes quarantined them, avast popped up again with it's passive mode turned on, and the classic message "MY COMPUTER IS PROTECTED". So thanks avast PREMIUM for protecting my computer, i don't even know what these malware did.
*Just for testing avast, i restored a malicious file from the quarantine and scanned it with avast PREMIUM. Don't mind it was clear. (Test picture)
-
Running Avast in Passive mode means Avast is not used to protect your system but simply available as a second opinion.
-
Running Avast in Passive mode means Avast is not used to protect your system but simply available as a second opinion.
Yes i know because i had malwarebytes. But that's not my point.
-
Running Avast in Passive mode means Avast is not used to protect your system but simply available as a second opinion.
Yes i know because i had malwarebytes. But that's not my point.
What is your point? As stated, Passive mode means no protection.
-
I wrote a whole paragraph about how a Trojian disabled avast, and you tell me what is passive mode.
I mentioned that avast popped up after malwarebytes cleaned all threats, before that the malware kept it disabled.
-
*Just for testing avast, i restored a malicious file from the quarantine and scanned it with avast PREMIUM. Don't mind it was clear. (Test picture)
have you tried to upload and scan file(s) at www.virustotal.com
post link to scan result
Seems something managed to disable avast and security center notifications: PUM = Possible Unwanted Modification
see attached screenshot
-
I wrote a whole paragraph about how a Trojian disabled avast, and you tell me what is passive mode.
I mentioned that avast popped up after malwarebytes cleaned all threats, before that the malware kept it disabled.
Are you saying that the Trojan changed Avast's status to passive mode?
-
*Just for testing avast, i restored a malicious file from the quarantine and scanned it with avast PREMIUM. Don't mind it was clear. (Test picture)
have you tried to upload and scan file(s) at www.virustotal.com
post link to scan result
Seems something managed to disable avast? see attached screenshot
Yes and it did. That is my point. How did this happen even with its self defense turned on? And it is ridiculous because i thought it did prevent it from this action. Turns out it doesn't.
And sorry but i cleared everything malicious from the quarantine, i can't upload it to virus total.
-
I wrote a whole paragraph about how a Trojian disabled avast, and you tell me what is passive mode.
I mentioned that avast popped up after malwarebytes cleaned all threats, before that the malware kept it disabled.
Are you saying that the Trojan changed Avast's status to passive mode?
No i said that malware modified the registry and disabled avast
-
I wrote a whole paragraph about how a Trojian disabled avast, and you tell me what is passive mode.
I mentioned that avast popped up after malwarebytes cleaned all threats, before that the malware kept it disabled.
Are you saying that the Trojan changed Avast's status to passive mode?
No i said that malware modified the registry and disabled avast
Thanks for the clarification.
-
https://forum.avast.com/index.php?topic=194892.0
Follow the instructions there please.