Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: rjrotello on November 20, 2010, 08:30:02 PM

Title: Found Malware and others Please help
Post by: rjrotello on November 20, 2010, 08:30:02 PM
My avast found malware and quite a few more viruses, and it can't delete or repair them.
I have called avast multiple times but they wont help unless i pay atleast 169.00, which
is not an amount i have as a student. Please help me with these horrid computer problems.
Title: Re: Found Malware and others Please help
Post by: rjrotello on November 20, 2010, 08:34:31 PM
And I have a 64 bit so I am unable to preform the boot-time scan
Title: Re: Found Malware and others Please help
Post by: Rednose on November 20, 2010, 08:41:44 PM
Hi rjrotello, welcome to the forum :)

Please follow the directions from this topic :

http://forum.avast.com/index.php?topic=53253.0

... and post/attach the requested logs in your next reply.

I will pm essexboy that you need help :)

Greetz, Red.
Title: Re: Found Malware and others Please help
Post by: rjrotello on November 20, 2010, 09:11:58 PM
Malwarebytes' Anti-Malware 1.46
www.malwarebytes.org

Database version: 5158

Windows 6.0.6002 Service Pack 2
Internet Explorer 7.0.6002.18005

11/20/2010 12:05:12 PM
mbam-log-2010-11-20 (12-05-12).txt

Scan type: Quick scan
Objects scanned: 146115
Time elapsed: 4 minute(s), 32 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 2
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_LOCAL_MACHINE\SOFTWARE\avsoft (Trojan.Fraudpack) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\avsuite (Rogue.AntivirusSuite) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
C:\Users\Robert Rotello\AppData\Local\Temp\keygen.exe (RiskWare.Tool.CK) -> Quarantined and deleted successfully.
Title: Re: Found Malware and others Please help
Post by: Rednose on November 20, 2010, 09:22:13 PM
And please the OTL log :)

I have pm-ed essexboy, he will help you further :)

Greetz, Red.
Title: Re: Found Malware and others Please help
Post by: rjrotello on November 20, 2010, 09:25:19 PM
Have done all the things that is asks now what?
Title: Re: Found Malware and others Please help
Post by: rjrotello on November 20, 2010, 09:27:26 PM
the otl files are too big to post but i have them on my desktop saved
Title: Re: Found Malware and others Please help
Post by: Pondus on November 20, 2010, 09:28:36 PM
the otl files are too big to post but i have them on my desktop saved
see lower left corner: additional options > attach
Title: Re: Found Malware and others Please help
Post by: rjrotello on November 20, 2010, 09:32:17 PM
Thanks
Title: Re: Found Malware and others Please help
Post by: rjrotello on November 20, 2010, 09:37:01 PM
first one
Title: Re: Found Malware and others Please help
Post by: essexboy on November 20, 2010, 10:05:12 PM
Hi what problems are you experiencing and what files is Avast reporting as infected ?

Run OTL
Title: Re: Found Malware and others Please help
Post by: rjrotello on November 20, 2010, 10:15:15 PM
It just now rebooted and put this up

All processes killed
========== OTL ==========
HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\\ProxyEnable|dword:0 /E : value set successfully!
========== FILES ==========
< ipconfig /flushdns /c >
Windows IP Configuration
Successfully flushed the DNS Resolver Cache.
C:\Users\Robert Rotello\Downloads\cmd.bat deleted successfully.
C:\Users\Robert Rotello\Downloads\cmd.txt deleted successfully.
========== COMMANDS ==========
File move failed. C:\Windows\System32\drivers\etc\Hosts scheduled to be moved on reboot.
HOSTS file reset successfully
 
[EMPTYTEMP]
 
User: All Users
 
User: AppData
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 41620 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes
 
User: Public
 
User: Robert Rotello
->Temp folder emptied: 3370872625 bytes
->Temporary Internet Files folder emptied: 96085033 bytes
->Java cache emptied: 3070554 bytes
->Google Chrome cache emptied: 336198166 bytes
->Flash cache emptied: 2138761 bytes
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 17877419 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 33170 bytes
RecycleBin emptied: 15024227913 bytes
 
Total Files Cleaned = 17,977.00 mb
 
 
[EMPTYFLASH]
 
User: All Users
 
User: AppData
 
User: Default
->Flash cache emptied: 0 bytes
 
User: Default User
->Flash cache emptied: 0 bytes
 
User: Public
 
User: Robert Rotello
->Flash cache emptied: 0 bytes
 
Total Flash Files Cleaned = 0.00 mb
 
Restore point Set: OTL Restore Point
 
OTL by OldTimer - Version 3.2.17.3 log created on 11202010_130833

Files\Folders moved on Reboot...
File move failed. C:\Windows\System32\drivers\etc\Hosts scheduled to be moved on reboot.
C:\Users\Robert Rotello\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
File\Folder C:\Users\Robert Rotello\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{33AC9D6C-134C-46E5-B051-9F8C8F96BFDF}.tmp not found!
File\Folder C:\Users\Robert Rotello\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{ABEF90D4-78C5-4A41-A691-9EDA6ADB34F4}.tmp not found!
File\Folder C:\Users\Robert Rotello\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.Word\~WRS{F3F8DC80-044E-4E0D-BEE6-DCB0FC98B157}.tmp not found!
File move failed. C:\Windows\temp\_avast5_\Webshlock.txt scheduled to be moved on reboot.

Registry entries deleted on Reboot...
Title: Re: Found Malware and others Please help
Post by: essexboy on November 20, 2010, 10:24:35 PM
What are your problems,  I need to know this so that I can construct a plan of attack
Title: Re: Found Malware and others Please help
Post by: rjrotello on November 20, 2010, 10:27:48 PM
There were quite a few viruses that I am unable to delete through avast, some malware, trojans, and worms. There are alot of errors and warnings
Title: Re: Found Malware and others Please help
Post by: essexboy on November 20, 2010, 10:31:54 PM
Download Dr Web from here http://www.freedrweb.com/?lng=en link on the top right of the page, tick the EULA and then download
 
It will download as an 8 digit file save it to your desktop

Restart in safe mode and run
Accept the enhanced version
Then run the quick scan
About halfway through you will be prompted to buy - just X the box closed
Once finished it will generate a log please attach that
Title: Re: Found Malware and others Please help
Post by: bong2x on November 20, 2010, 10:44:25 PM
Robert please avoid Keygen and Crack in your computer Please!!!
If you like Some Games That HaVe Keygen please. dont put Anti-virus

Students, part of Growing-up
Title: Re: Found Malware and others Please help
Post by: rjrotello on November 20, 2010, 11:30:16 PM
Just finished but it didn't generate a log?
Title: Re: Found Malware and others Please help
Post by: essexboy on November 20, 2010, 11:32:58 PM
Did it detect any problems ? if so what where they

What symptoms do you have at the moment ?
Title: Re: Found Malware and others Please help
Post by: rjrotello on November 20, 2010, 11:34:56 PM
Not sure were would I be able to find those?
Title: Re: Found Malware and others Please help
Post by: rjrotello on November 21, 2010, 12:03:18 AM
It cleared them the second time I ran it it didn't find any.
Title: Re: Found Malware and others Please help
Post by: rjrotello on November 21, 2010, 12:19:46 AM
Just did an avast quick scan and only found 1 virus Threat: JS:Fakewarn-C[trj]
but also 2 Error: Archive is password protectected. (42056)
Title: Re: Found Malware and others Please help
Post by: essexboy on November 21, 2010, 01:10:49 PM
Just did an avast quick scan and only found 1 virus Threat: JS:Fakewarn-C[trj]
but also 2 Error: Archive is password protectected. (42056)
What is the location of the file ?