Avast WEBforum

Other => General Topics => Topic started by: rustoman on February 11, 2010, 04:43:09 PM

Title: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 04:43:09 PM
I am using avast 4.8 professional paid for. All was well then one day I ran a virus scan and thats when I started getting a system restore mal ware warning. tried moving to chest it comes back, found that by doing so my pc will not restore. I believe that this is a false positive and avast will not respond with any support! I'm going to have to find a real virus protection software package. avast isnt it!!!! NO support for their product at all!!!
Title: Re: keep getting a system restore malware warning.
Post by: Pondus on February 11, 2010, 04:58:54 PM
1. this should have been posted in the virus and worm section
2. do the virus have a name / where is it found / can you post the log from avast
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 05:06:10 PM
 will not let me pull it out of chest and I have sent it over and over and over to avast no answer avast refuses to reply.
Title: Re: keep getting a system restore malware warning.
Post by: bob3160 on February 11, 2010, 05:09:22 PM
If the virus was found in a system restore point, then the easiest fix is to
1. Disable System Restore  (This deletes all system restore points and wipes out the detected virus.)
2. Reboot and run another scan which should now come back as clean. ( provided your only detection was in a restore file)
3. Restart System Restore and create a new clean restore point.
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 05:11:32 PM
and how do I delete  all restore points???
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 05:14:12 PM
and why cant  a paid user get to the support forum I have registered but no email for verification was sent ever.
Title: Re: keep getting a system restore malware warning.
Post by: bob3160 on February 11, 2010, 05:14:18 PM
Here are instructions. :)
http://support.microsoft.com/kb/310405 (http://support.microsoft.com/kb/310405)

Welcome to the forum. :)
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 05:31:47 PM
you know I used to think avast was one of the best but I have been proven wrong. Once I paid for it thats when things started going wrong. never had any problems with the free version?? Go figure
Title: Re: keep getting a system restore malware warning.
Post by: Pondus on February 11, 2010, 05:34:26 PM
Quote
I believe that this is a false positive and avast will not respond with any support! I'm going to have to find a real virus protection software package.
Did you email avast ?
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 05:36:20 PM
bad link I know how to stop the restore just not how to delete the restore points. Which are not mentioned in that link. Thanks for trying  but you do not seem to understand whats going on here.

maybe you could have the non responding support team contact me At with some real answer's
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 05:37:56 PM
and yes about 300 times using avast's own send to us software which included the file info.
Title: Re: keep getting a system restore malware warning.
Post by: Pondus on February 11, 2010, 05:49:14 PM
bad link I know how to stop the restore just not how to delete the restore points. Which are not mentioned in that link. Thanks for trying  but you do not seem to understand whats going on here.

maybe you could have the non responding support team contact me At charles.johns@mchsi.com with some real answer's
Did you read it?

quote:
When you turn off System Restore, Windows XP removes the restore points that track changes in Windows. After you turn off System Restore, you can no longer restore Windows XP to an earlier time.

MEANING IT WILL BE DELETED
Title: Re: keep getting a system restore malware warning.
Post by: Pondus on February 11, 2010, 05:52:34 PM
and yes about 300 times using avast's own send to us software which included the file info.
avast get thousands of mails with virus samples every day, so they cant respond to everyone and they only do if your case is something special

How to contact avast http://www.avast.com/contacts
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 06:17:39 PM
well genius I had read it and why dont you try reading it. I turned off the restore and it didnt delete not one restore point better check your info bud.
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 06:24:07 PM
I might add I had read it well before coming here and tried it too. and when I turned it back on all my restore points were still there. so Maybe you should do some checking on your advice before you give incorrect advice.

And as far as the thousands of emails. that just tells me avast has thousands of unhappy users. That they do not respond to. But I already knew that.

Thanks for the attempt to help anyhow. least you were trying.
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 06:28:50 PM
I just will get a real anti virus program, that works and has a support team that will respond if you need them.

and by the way I meant I registered to submit a ticket to avast at their web site. you know where you try to get technical support for your paid customers. not this forum
Title: Re: keep getting a system restore malware warning.
Post by: Pondus on February 11, 2010, 06:29:04 PM
did you restart the computer before you turned it on again?
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 06:30:48 PM
yes I did!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!
Title: Re: keep getting a system restore malware warning.
Post by: bob3160 on February 11, 2010, 06:31:59 PM
I believe the instructions distinctly said Turn Off System Restore and Reboot.
Once that's done, the restore points are gone.
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 06:45:05 PM
well if that were true why did mine stay??? and my pc is running fine other than that annoying message that pops up  i do the action it recommends then a little later it pops back up again. dont waste anymore of your time with me I'm over it.

thanks again for trying to help. have a nice day
Title: Re: keep getting a system restore malware warning.
Post by: Pondus on February 11, 2010, 06:53:54 PM
You have not yet told us what the detection is ? and why you are sure it is a false positive ? are you 100% sure

Follow this guide from essexboy and post the logs so he can have a look
http://forum.avast.com/index.php?topic=53253.msg451454#msg451454
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 07:02:51 PM
well I'm not 100 % but since it only seems to affect my system restore funtion and all other programs working fine. just started after I ran a scan just to check my pc. no warnings that avast didnt handle before that scan.
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 07:04:18 PM
and none of the warnings that i did get were about anything other than website warningd which I did the recommended actions for.
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 07:09:57 PM
this is the latest I removed avast. then reinstalled it. Its looked to me once when I had a message that I traced a file to avast program folder. and it was saying it was corrupted then I scanned it with avast and found no problem. but its possible that some how the avast got a bug. so Now I'm waiting to see if the message appears again. it seems to only appear when I'm away and I guess my system tries to create a restore point.

By the way avast goes crazy with that malware program from that guy. had to stop the scan to be able to do anything but move all his samples to the chest.
Title: Re: keep getting a system restore malware warning.
Post by: Pondus on February 11, 2010, 07:11:29 PM
you may have a rootkit, rootkits works in mysterious ways,
i am no expert, maybe it is blocking the removal of the restore points to avoid removal?
Follow the guide and let essexboy look at it
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 07:16:06 PM
dont know how I can run it when avast telling me its a virus/malware other than to stop avast. and I'm not going to take a chance on that program being infected and make more trouble than I have now.
Title: Re: keep getting a system restore malware warning.
Post by: Pondus on February 11, 2010, 07:34:43 PM
If you see my signature, i am running avast + malwarebytes + superantispyware and most in here do
so if avast is having an reaction on MBAM then something must be seriously wrong

are you able to run OTL and post the log?
Title: Re: keep getting a system restore malware warning.
Post by: Tarq57 on February 11, 2010, 07:36:48 PM
Quote
dont know how I can run it when avast telling me its a virus/malware other than to stop avast. and I'm not going to take a chance on that program being infected and make more trouble than I have now.
What program do you mean? MBAM?
It will not be infected.
It is a popular and competent demand scanner.
What I would suggest is: Once MBAM has been installed and updated, go offline, then disable Avast then run the MBAM scan. At the completion of the scan it will generate a log. Select everything found, then select "remove selected". (This quarantines those items.)
If MBAM prompts for a reboot to finish cleaning anything, do so promptly.
After restart, check that Avast is enabled, go online, post the MBAM scan report.

This behaviour is more typical of malware than a broken AV program.
What version of Avast do you use?
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 07:45:10 PM
Information\_restore{16472BE8-1BC3-4178-958B-D122BA665A64}\RP611\A0088266.dll
Win32:Malware-gen
Virus/Worm

this is what keeps popping up
 4.8 professional paid version
Title: Re: keep getting a system restore malware warning.
Post by: Tarq57 on February 11, 2010, 07:51:39 PM
That detection can be (temporarily) ignored, for now. Just don't actually use system restore.
If you right click on the tray icon (the blue ball) and select "about Avast" then expand the top line, (see the picture) what is the build version, and the VPS version?

Please try following the instructions on running MBAM. (If it was indeed MBAM that was causing you to be cautious due warnings, three posts up.)
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 11, 2010, 09:01:54 PM
mbam quick scan it found some things I had to turn off avast. I removed them then tried turning avast back on and run it again same thing it will not run with avast on. I am now running a full scan with mbam its finding more.

I did however run another quick scan and it didnt find anything. what ever it is. Its deep
Title: Re: keep getting a system restore malware warning.
Post by: Tarq57 on February 11, 2010, 09:20:37 PM
Quote
I did however run another quick scan and it didnt find anything. what ever it is. Its deep
Maybe.
Please post the scan report.
Please advise your Avast version.
I don't know if it's intentional or not, but it is starting to look like you are being deliberately vague.
The quality of the help you get here will depend, in part, on how well you describe what is happening. In this case, the scan report is the best description.

If you would prefer me to desist trying to help, please say.
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 12, 2010, 03:17:24 AM
only vague to those who dont take time to read my other post!!!
this is what keeps popping up

Information\_restore{16472BE8-1BC3-4178-958B-D122BA665A64}\RP611\A0088266.dll
Win32:Malware-gen
Virus/Worm


  avast 4.8 professional paid version

windows xp professional x64 edition version 2003 service pack 2

if more people read my other post it would help alot!

I finally did make some progress with mbam after turning off avast I quick scanned it found 342 infected files It removed them successfully. ran anothe quick scan it came up clean!!!
then turned avast back on  and tried to see if mbam would run without setting off avast again. it went off again
I then turned avast back off and ran mbam full scan. It found even more  945 infected files It sucessfully removed them. I then turned avast back on and ran another quick scan With mbam it ran longer without messages then i got a few more alerts As I got them I moved them to the chest as recommended. But mbam said it was clean!!!
I then ran mbam full scan again and it came up clean. but this time no alerts from avast.

So I then ran mbam quick scan again to see if avast would  alert  again this time it did not alert. and the pop up system restore alert from avast seems to be gone now.

SO it seems mbam does a real good job. and It seems mbam solved my troubles. by removing whatever it was about 1 of the 1080 trojans and  or adwares avast let in. that did not show up when scanned with avast.

thanks to the guy who gave me the link to mbam Its worth buying. Although it did its job for free. I will be purchasing Malwarebytes Anti-Malware program for sure. And the avast team needs to figure out how almost 900 trojans got by them. I keep it up to date always. so its on avast to correct the trojan hole in their program!!! ;D
 
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 12, 2010, 03:29:47 AM
thanks Pondus the malwarebytes anti-malware got rid of my trojans about 900 of them avast did not detect and a bunch of adware and malware too.  all in all over 1080.

And it finally runs without alerts from avast while both are running.

And My restore alert issue seems to be gone also. no more annoying alerts thanks to malwarebytes Anti-malware. And your advice

Seem's you are the man Thanks A million. Wish avast had answered my emails they would probably have kept me as a customer if they had. but have to say that since it missed so many trojans I think I'm anti virus shopping when my time is up  ;D and Malwarebytes Anti-malware just got a customer ;D
Title: Re: keep getting a system restore malware warning.
Post by: Tarq57 on February 12, 2010, 03:58:15 AM
Quote
only vague to those who dont take time to read my other post!!!

I read every post in this thread. None of which are particularly revealing about your computer problems, but say much about your mindset.

Vague? Maybe not to you, because you are "on the scene", so to speak; you know what is happening with your computer and what you tried.
Out here in forum land, I can tell you your reports of the state of affairs, especially after specific requests for information that were ignored, were quite vague.
By the way, it's MalwareBytesAntiMalware, not Mega bytes.

That the problem appears to have been resolved is no guarantee it actually is. The number of infected files reported is unusually high. It is recommended to still follow the steps recommended by Pondus when he linked you to a post by essexboy, if you want to have reasonable certainty you are clean.
I'd also recommend a firewall, a two way one, if not already installed. Frankly, if one were, I can't see a machine becoming this infected. Hard to know though, since there is no scan report. (still.)
Now, since it is fairly clear my advice is unwanted, I'll stop concerning myself with this issue. Good luck.
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 12, 2010, 04:28:57 AM
once again tarq57 if you could read I have solved my issue with the help of Pondus and the post by essexboy!!! no thanks to your ranting about the logs. They were to Frickin long to post I tried dufus.

and your right I do not want your help since you have reading trouble's.

I have what was sold to me by avast as a anti virus program that let in over 900 trojans without a peep. And by the way. and a good firewall. didnt start having any trouble til I bought avast 4.8 professional build september2009(4.8.1368) the free edtion worked fine thats why I bought what was supposed to be better. Boy that was a good joke on me I guess.

so go chew on that cud awhile.

And I say to Pondus Once again Your the man Thank you and essexboy for actually helping me. Instead of trying to make me look bad like tarq57.
Title: Re: keep getting a system restore malware warning.
Post by: Tarq57 on February 12, 2010, 04:38:40 AM
Quote
PM #1 from rustoman:

the logs are to long to post dude I tried K! And I did post my version of avast more than once!

PM #2 from rustoman: (sent as I was sending the below reply)

Guess you dont understand english very well either. I did not put much in about my os your right about that. Only but did post avast version more than once and its log info

Avast Is a big dissappointment and I had been trying to tell all my friends and associate's that it was the best out there. I promise you I will make sure they know that customer support is in forum help only. I have emailed avast tech support many times no answer over a long period of time. Before I finally joined the forum for help. Which has guys like you trying to make the user look bad. when the log from avast was posted and the log from mbam was to long to post.

So I suggest you leave it to those who can help. And I belive that you cant obviously.

My reply:

The only version info you've posted about Avast, was "4.8 professional paid version". Not the build number.

Had you said the logs were too long to post, (they usually are not - I see a lot of them) there are other options. Such as posting as an attachment, or over more than one reply window. Which you would have to do anyway if you had bothered reading the instructions regarding the running of OTL, which you may still need or want to do.

It seems to me your focus was on looking for something to blame, rather than actually learning anything that might help you fix and understand this issue. You can blame Avast all you want, lambasting the software will not help anyone understand what and how something got into your machine, and thus maybe prevent the same thing happening again. (As a start, you could perhaps update to SP3. It's been out for a long time. And another example of your vagueness, because you said that everything is patched, or up to date. It's not.)

I read a lot of security logs, at more than one different security forum. I can tell you that all the AV's let something in at times. Switch if you want, and good luck with it; I don't think there is a perfect (or near-perfect) blacklist-based resident protection, so without finding the cause, sooner or later it could happen again.

Doesn't bother me, much, of course, I'm done with it. There are other people who will probably continue to help. This forum is good like that.

Please don't PM me again.

You certainly don't need my help to make you look bad. You're doing a fine job all by yourself. ;D
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 12, 2010, 04:53:20 AM
Just proving my point I see Try Learning to read sometime You suck tarq57 and it shows
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 12, 2010, 04:59:41 AM
she must be a youngin that tarq57. LOL   :o
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 12, 2010, 08:01:09 AM
Oh yeah Tarq57 one more thing read your post you didnt specificly ask for the build number just version. Blind trying to lead I would say. 
Title: Re: keep getting a system restore malware warning.
Post by: Tarq57 on February 12, 2010, 08:08:11 AM
This post? (http://forum.avast.com/index.php?topic=55463.msg468872#msg468872)
Read it again. Maybe look at the picture.
And then drop it.
You aren't proving anything.
Title: Re: keep getting a system restore malware warning.
Post by: Pondus on February 12, 2010, 08:27:09 AM
@rustoman......did you come here for help or a flame war........

And as Targ57 says we still recomend you do the hole guide from essexboy
that will be posting the logs from Malwarebytes
and running OTL and posting the log
you can post as attachments if they are to long

Essexboy can then see ( he got x-ray vision) if there is anything moore in there
you want the computer clean....don`t you !
Title: Re: keep getting a system restore malware warning.
Post by: Tarq57 on February 12, 2010, 09:56:32 AM
Quote from: rustoman (via PM)
be specific. read your post you did not ask for build number. you just asked for version.
You actually can't read nor comprehend simple English, can you?
Below is a C&P of the actual question I asked you in that post, which I am sure we have both read. (Emphasis added.)
I see you still have not bothered to look at the picture.
Or is it that you don't actually know how to?
Quote from: Tarq57
If you right click on the tray icon (the blue ball) and select "about Avast" then expand the top line, (see the picture) what is the build version, and the VPS version?

There is nothing wrong with not knowing how to do stuff. Part of the reason for the forum is to teach those who need to learn.
Of course, if you're so up yourself that pride prevents you from asking, you can not learn a thing, except by your own mistakes.

The other possibility is that you are simply thick.

I no longer care. If you want help and are prepared to indicate same, I can give you some pointers, but frankly, I would at this stage feel it a poor investment of my time.
I also know a few tips to help deal (naturally) with such conditions as ADD, but this isn't the appropriate forum for that.
I will watch this topic to see if the status changes for a day, and then unsubscribe.
Just so you know you are going to get the last word, since that seems so important.

Oh, and one reason I was rather interested to view the scan report, and incidentally posted the question that seemed to intially cause such resentment, is that one of the ways a computer could become as infested as (you say) yours was is by the installation of cracked or pirated software.

Of course anyone watching this now won't know for sure, will we? ::)
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 14, 2010, 03:45:01 AM
Still looking to make yourself out to be right what part of that post asked for the build. and vps and build are 2 different lines  with different info DUHH!!! when or if you have bothered to look at the about avast portion you may notice that.

nor did I ever ask for your help so find another idiot like yourself to bother!!!

as for the pirating crack seems you have some experience there. Guess your pirating software. and have got bugs from it before. That does not mean I got mine like you. What A Dits. and I'm a paying customer HMMMM guess that says it all genius. this is that last time I will reply to a bufoons post by the way tarq57 thats you.

and your right about not knowing tarq so admit it and move along.
Title: Re: keep getting a system restore malware warning.
Post by: rustoman on February 14, 2010, 03:56:39 AM
Quote
dont know how I can run it when avast telling me its a virus/malware other than to stop avast. and I'm not going to take a chance on that program being infected and make more trouble than I have now.
What program do you mean? MBAM?
It will not be infected.
It is a popular and competent demand scanner.
What I would suggest is: Once MBAM has been installed and updated, go offline, then disable Avast then run the MBAM scan. At the completion of the scan it will generate a log. Select everything found, then select "remove selected". (This quarantines those items.)
If MBAM prompts for a reboot to finish cleaning anything, do so promptly.
After restart, check that Avast is enabled, go online, post the MBAM scan report.

This behaviour is more typical of malware than a broken AV program.
What version of Avast do you use?

Oh and by the way I wasnt paying your post much attention. and had several different users replying. So sorry your little feeling's got hurt. I had at that point already stated what version I was using thus I knew you would be no help. and stopped reading your post after that one!!!!
Title: Re: keep getting a system restore malware warning.
Post by: YoKenny on February 14, 2010, 04:00:25 AM
Quote
dont know how I can run it when avast telling me its a virus/malware other than to stop avast. and I'm not going to take a chance on that program being infected and make more trouble than I have now.
What program do you mean? MBAM?
It will not be infected.
It is a popular and competent demand scanner.
What I would suggest is: Once MBAM has been installed and updated, go offline, then disable Avast then run the MBAM scan. At the completion of the scan it will generate a log. Select everything found, then select "remove selected". (This quarantines those items.)
If MBAM prompts for a reboot to finish cleaning anything, do so promptly.
After restart, check that Avast is enabled, go online, post the MBAM scan report.

This behaviour is more typical of malware than a broken AV program.
What version of Avast do you use?

You need a bit of tolerance.

Title: Re: keep getting a system restore malware warning.
Post by: bob3160 on February 14, 2010, 05:14:08 PM
My only question is why rustoman hasn't already been sent a bunch of bananas ???
Flaming members isn't something that's tolerated on this forum .  >:(