Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: LeNoob on August 01, 2021, 03:06:02 PM

Title: Avast can't quarantine the virus, send help
Post by: LeNoob on August 01, 2021, 03:06:02 PM
I did a full scan on my computer and found some threats on it. However, there is a threat that Avast cant remove. It's named MBR:Backroot-G[RTK] and it seems that it infected my MBR0. How can i remove it and what can I do? I'm scared! Please help!  :'( :'(
Title: Re: Avast can't quarantine the virus, send help
Post by: Pondus on August 01, 2021, 04:54:01 PM
Quote
I did a full scan on my computer 
Normal full scan or boot time scan?

What is name of detected file and location path to file?
Screenshots is a big help

Title: Re: Avast can't quarantine the virus, send help
Post by: Mr. Consumer on August 01, 2021, 05:04:11 PM
I did a full scan on my computer and found some threats on it. However, there is a threat that Avast cant remove. It's named MBR:Backroot-G[RTK] and it seems that it infected my MBR0. How can i remove it and what can I do? I'm scared! Please help!  :'( :'(
Looks like your MBR is infected. It's really bad. Try following this guide to fix it:
https://neosmart.net/wiki/fix-mbr/#Fix_the_MBR_in_Windows_10
Title: Re: Avast can't quarantine the virus, send help
Post by: RedFan on August 01, 2021, 08:18:47 PM
An older issue :
https://www.bleepingcomputer.com/forums/t/689359/infected-with-mbrbackroot-g-rtk-rootkit-infection/
You can try and download TDSSkiller from kaspersky website
Doubleclick on TDSSKiller.exe to run the application.
Then click on Start Scan.

Or run a scan with Malwarebytes free
Title: Re: Avast can't quarantine the virus, send help
Post by: LeNoob on August 02, 2021, 02:12:22 AM
Here's the screenshot of the scan result. I'm new to using this forum so I don't really know how to use the insert image thingy. I decided  to put the pic in the attachment section instead. Please help!
Title: Re: Avast can't quarantine the virus, send help
Post by: LeNoob on August 02, 2021, 02:14:52 AM
This guide "https://neosmart.net/wiki/fix-mbr/#Fix_the_MBR_in_Windows_10" doesn't help sadly. I think I lost my window installation disk. Is there any other solution to this?
Title: Re: Avast can't quarantine the virus, send help
Post by: LeNoob on August 02, 2021, 02:29:23 AM
Is the TDSSkiller safe to use? I don't want to get another malware from trying to remove a malware, please help!
Title: Re: Avast can't quarantine the virus, send help
Post by: DavidR on August 02, 2021, 02:38:08 AM
@  LeNoob
I would suggest trying to run an Avast Boot Time Scan as mentioned by Pondus in Reply #1
Title: Re: Avast can't quarantine the virus, send help
Post by: LeNoob on August 02, 2021, 03:29:47 AM
How do I run a boot time scan?
Title: Re: Avast can't quarantine the virus, send help
Post by: schmidthouse on August 02, 2021, 05:44:01 AM
How do I run a boot time scan?

As suggested by DavidR, Follow the direction posted by Pondus (Reply #1)

Open UI and chose Protection and then Virus Scans.
Select Boot-Time Scan
Title: Re: Avast can't quarantine the virus, send help
Post by: LeNoob on August 02, 2021, 08:54:27 AM
This is LeNoob after doing a boot time scan 3 times. The results shows that there are no infected files which is good. However, at the same time, the antivirus said that the antivirus can't scan all of the files and suggest me to scan again. I did boot time scan 3 times and the antivirus still said that the scan was unable to scan all of the files. What now? Please help!
Title: Re: Avast can't quarantine the virus, send help
Post by: chris.. on August 02, 2021, 09:56:49 AM
Hi,
This is LeNoob after doing a boot time scan 3 times. The results shows that there are no infected files which is good. However, at the same time, the antivirus said that the antivirus can't scan all of the files and suggest me to scan again. I did boot time scan 3 times and the antivirus still said that the scan was unable to scan all of the files. What now? Please help!
For unscanned items, you can find out more with the logs and find out if it is related to your detection or if it is simply protected archives (which often happens with avast boot time scan)
https://forum.avast.com/index.php?topic=256083.msg1594869#msg1594869
Title: Re: Avast can't quarantine the virus, send help
Post by: Pondus on August 02, 2021, 11:18:11 AM
Files that can not be scanned see avast blog > https://blog.avast.com/2014/02/28/how-do-i-handle-files-that-avast-cant-scan/



Title: Re: Avast can't quarantine the virus, send help
Post by: LeNoob on August 02, 2021, 12:29:38 PM
I rerun the boot time scan and finds out the there are some files that avast cannot scan is a decompression bomb and some of them are corrupted. Should I just ignore those? Also, the MBR:Backboot-G[RTK] is still there, what can I do to remove it?
Title: Re: Avast can't quarantine the virus, send help
Post by: RedFan on August 02, 2021, 01:08:21 PM
Run a scan with TDSSkiller !

https://support.kaspersky.com/5350
https://usa.kaspersky.com/downloads/tdsskiller
Title: Re: Avast can't quarantine the virus, send help
Post by: LeNoob on August 02, 2021, 01:16:56 PM
Is tdsskiller safe to use? I'm pretty worried about it.
Title: Re: Avast can't quarantine the virus, send help
Post by: Pondus on August 02, 2021, 02:46:33 PM
If you need help from somone that know what they do, i can recomend Malwarebytes forum

https://forums.malwarebytes.com/

Instructions  https://forums.malwarebytes.com/topic/9573-im-infected-what-do-i-do-now/


Title: Re: Avast can't quarantine the virus, send help
Post by: alanb on August 02, 2021, 04:49:36 PM
Is tdsskiller safe to use? I'm pretty worried about it.

Yes, it is safe.
Title: Re: Avast can't quarantine the virus, send help
Post by: LeNoob on August 03, 2021, 04:15:18 PM
Thank you everyone! After running the TDSSkiller and performing some reboots, the virus is gone! Thank you for your help!
Title: Re: Avast can't quarantine the virus, send help
Post by: alanb on August 03, 2021, 06:01:08 PM
Glad you got it sorted.