Avast WEBforum

Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Tink66 on December 01, 2010, 12:17:48 PM

Title: RESOLVED Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 01, 2010, 12:17:48 PM
I have successfully been using Avast for several years now but have recently noticed a problem when I switch my computer on.  The icon comes up with a red cross indicating that the system is unsecure.  I know how to rectify this, (no problem there!) but wondered if anyone could advise me why this is happening and, if so, how to stop it happening on a permanent basis?  Yesterday, when I went to correct the problem, Avast advised me that a system was attempting to access my system.  Nothing has bleeped up on Virus Chest so I do not think I have a virus or anything.  I have Windows Defender on my computer as well but have also been running that for nearly a year without any problems!  I have now set Defender to only run once a week as wondered if that was what was slowing things up and causing Avast to stop?  
Avast always updates (running Avast 5) and the only firewall I have is Windows.  I have Windows XP.
Any help would be appreciated but nothing too techy please as I won't understand it!
Many thanks
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Lisandro on December 01, 2010, 12:23:27 PM
Windows Defender does not interfere with avast.
You can try to repair your installation (Control Panel > Add/Remove programs).

You can also try an installation from scratch:
1. Download the latest version of avast! Uninstall Utility (http://www.avast.com/eng/avast-uninstall-utility.html) and save it.
2. Download the latest avast! (http://www.avast.com/eng/programs.html) version and save it.
3. Uninstall avast from Control Panel (if possible). If, for any reason, you can't run it, try booting in Safe Mode (http://www.pchell.com/support/safemode.shtml) and doing it from there. Anyway, boot after that.
4. Run the avast! Uninstall Utility saved on 1. If, for any reason, you can't run it, try booting in Safe Mode (http://www.pchell.com/support/safemode.shtml) and doing it from there. Anyway, boot after you've run it.
5. Install avast! using the setup saved on 2. Boot.
6. Register your free copy or add the license key for Pro.
7. Check and post the results.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 01, 2010, 12:37:36 PM
Thanks for your prompt reply.
No wanting to sound too thick (!!) when you state 'save' I gather you mean the option of save or run? 
Please could you advise what 'boot in safe mode' is?
Thanks!
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: CraigB on December 01, 2010, 12:49:53 PM
Yes click the save and save to downloads not run.
When you start your computer keep tapping the F8 key which will put you into safe mode.Sometime's need safe mode to get rid of stubborn program's, once you reboot again you'll be back in normal mode.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 01, 2010, 12:52:11 PM
Ah, I learn something new each day! 
Thanks
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Lisandro on December 01, 2010, 12:52:46 PM
Tink66, the Safe Mode words in my post are a hiperlink, you can click over it to know more.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 01, 2010, 05:25:40 PM
 ;D

Well, did it all as stated (except I couldn't save the new installation - the only option was run!)

Time will tell but thanks for everyone's help!
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 03, 2010, 12:10:59 AM
OK, just logged on for the first time since trying the uninstall and it hasn't worked.  Does anyone have any other suggestions as to what could be wrong?  I have registered my new installation.
Thanks
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 03, 2010, 12:14:08 AM
I also meant to add that I ran an Avast scan and Windows Defender after doing so and all is OK.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on December 03, 2010, 07:48:44 AM
I'm confused with your last 2 posts.  Did your uninstall and clean install work or not?  If not, here are easy directions:

1. Save a copy of newest version of Avast (5.0.677) for the version you need and save it to your hard drive (HDD):
Free – http://files.avast.com/iavs5x/setup_av_free_eng.exe (http://files.avast.com/iavs5x/setup_av_free_eng.exe)
Pro –  http://www.avast.com/pro-antivirus#tab4 (http://www.avast.com/pro-antivirus#tab4)
AIS –  http://files.avast.com/iavs5x/setup_ais.exe (http://files.avast.com/iavs5x/setup_ais.exe)
2. Download the Avast Uninstall Utility, aswClear5.exe http://www.avast.com/uninstall-utility (http://www.avast.com/uninstall-utility) and save it to your desktop.
3. Disconnect from the Internet at this time.
4. Go to Control Panel and uninstall Avast through Add/Remove Programs if possible and reboot.
5. If Step 4 fails, boot into Safe Mode (http://Safe Mode) (hit F8 repeatedly) and run the Avast Uninstall Tool.
6. Reboot.
7. Install the newest version of Avast and reboot.
8. Get Internet access and register your copy or add the license key for Free, Pro, or AIS.
    Free – http://www.avast.com/registration-free-antivirus.php (http://www.avast.com/registration-free-antivirus.php)
9. Update the Avast definitions.

Knowledge based article:
https://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=504#idt_0003 (https://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=504#idt_0003)

By the way, using XP you really don't need to run Win Defender with Avast.  I would suggest you download an on-demand scanner like Malwarebytes’ Anti-Malware (MBAM) free http://www.malwarebytes.org/ (http://www.malwarebytes.org/) (the blue button) for layered security, better detection, and better use of your memory on your machine.


Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 03, 2010, 11:31:02 AM
I did excatly what 'ubertechnical' suggested (except I couldn't save the new version only run it.)
The problem is as before - the real time scan is turned off.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Lisandro on December 03, 2010, 11:37:53 AM
Quote from: Tink66 on December 03, 2010, 11:31:02 AM
I did excatly what 'ubertechnical' suggested (except I couldn't save the new version only run it.)
The problem is as before - the real time scan is turned off.
Do you mean you can't save the avast setup file?
Strange, isn't your computer infected?
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on December 03, 2010, 11:17:06 PM
Check your computer for malware with Malwarebytes’ Anti-Malware (MBAM).
·   Download free http://www.malwarebytes.org/ (http://www.malwarebytes.org/) (the blue button) for an on-demand scanner.
·   Double Click mbam-setup.exe to install the application.
·   After install, click update so you have latest database before scanning.
·   Under Settings:
o   General: Automatically Save File After Scan Completes is checked off
o   Scanner Settings:  Check all boxes
o   Updater: Download and install update if available is checked off
·   Once the program has loaded, select "Perform FULL Scan", then click Scan.
·   The scan may take some time to finish, so please be patient.
·   When the disinfection scan is complete, a log will appear in Notepad and you may be prompted to Restart. (See Extra Note).
·   Click the “remove selected” button to quarantine anything found.  You will find the infection details under the Quarantine tab.
·   The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
·   Copy & Paste the entire report in your next reply.

Also let us know in your next post if you were able to download the Avast setup file or not as we are confused by your previous posts.  Thank you.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 04, 2010, 12:21:40 AM
Do I need to register Malwarebytes?   Am running a scan at the moment.

Regarding infections, I thought this is what anti-virus programmes dealt with?

I was able to save the uninstall and then use it to run the uninstall but when I reinstalled Avast, the only option after downloading was run.  I did not have save or run as a choice.  I have installed Avast again as I just clicked on run.  Does that make sense?
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on December 04, 2010, 12:36:53 AM
MBAM is free (you can get a paid version, but I gave you the link for the free one), so you do NOT have to register it.

MBAM works differently than Avast, so it is a good back up program to have for an "on-demand" (when you need it) scanner.

Regarding having the files you need or want for Avast, just follow my instructions exactly as they are written....but do NOT install until I have looked at your MBAM log to make sure you do not have an infection.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 04, 2010, 01:11:38 AM
I am just going to restart my system.  There was a lot of adware (about 260 infected files).  It won't let me paste all of it as I am exceeding the max message length....
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 04, 2010, 01:23:50 AM
Memory Modules Infected:
c:\program files\mywebsearch\bar\1.bin\MWSSRCAS.DLL (Adware.MyWebSearch) -> Delete on reboot.
c:\program files\mywebsearch\bar\1.bin\MWSBAR.DLL (Adware.MyWebSearch) -> Delete on reboot.
c:\program files\mywebsearch\bar\1.bin\F3HTMLMU.DLL (PUP.FunWebProducts) -> Not selected for removal.


This is the first part of the log.  Is this what you need to see?  There's loads more!
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on December 04, 2010, 01:31:07 AM
Reboot your machine if it asks you to, then post your log.

Post the MBAM log here (copy and paste) as an attachment (Additional Options > Attach > Browse (the logs will be on your desktop > Post).  
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 04, 2010, 01:39:55 AM
OK, am stumped now.  I added a wordpad document but it didn't like that so I tried desktop and tried to attach the mbam file and it said it was too large.
Am off to bed now as my brain is addled.
Thanks for your help.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on December 04, 2010, 01:44:20 AM
MBAM has a tab labeled "LOG."  You want to cut and paste it into Word > Save it somewhere > Attach it to your post.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 04, 2010, 12:24:52 PM
I give up!  I cannot save as a jpg and everything else I try and attach tells me it is too large.
I have found the log, no problem, but just cannot get it to save in a format that this forum will accept.
I am not a computer buff and am now convinced that there is something extremely awful in my system.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 04, 2010, 12:26:25 PM
Bizarre.  It now seems that I have attached it 3 times despite telling me it hadn't.....?
I am slowly losing the will to live here...... :-\
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on December 05, 2010, 10:39:11 AM
I see that you did the best that you can.  Your first attachment was in the correct format, but missing the top part.  Can you tell me if you had updated MBAM prior to scanning and are using version 1.50?

The second attachment was worthless since it was in unicode and unreadable.  The next time you need to attach, do not convert it to a jpg.  Just put it into Notepad.

Is your machine running any better after doing the MBAM scan?  I still see problems, but I want to know what problems you are still having?

Next, I'd like you to check the information on the first post of this thread under Virus/Worms for you to check your machine for malware: http://forum.avast.com/index.php?topic=53253.0 (http://forum.avast.com/index.php?topic=53253.0). 

Follow the directions for obtaining the OTL logs.  Post the two (2) OTL log as an attachment (Additional Options > Attach > Browse (the logs will be on your desktop > Post). 

I am going to refer you to our Certified Malware expert, named Essexboy.  He will also review your logs and give you further instructions, however he comes on the forum late UK time.  He will respond to you in this thread, so remember to check this thread daily.  I will continue to provide assistance in the meantime, then remain in the background while he works with you.

IMPORTANT: If you are on a home network, disconnect the affected machine from the network.  Do not share a USB/flash drive with this affected machine.  Try to use a different machine to check email, sync your phone, etc. if possible.

***Please do not make any further changes to your machine once you have provided the OTL logs. ***

Let me know if you have any questions.  Thank you.

Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: essexboy on December 05, 2010, 01:04:14 PM
Monitoring  ;D
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 05, 2010, 11:53:06 PM
SafeSurf
Thanks for your help thus far.  The Malware version I used was dated March 2010 so I have now updated to the newest version and run a quick scan.
Here are the results:
Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org

Database version: 5214

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

05/12/2010 22:43:16
mbam-log-2010-12-05 (22-43-16).txt

Scan type: Quick scan
Objects scanned: 130616
Time elapsed: 4 minute(s), 22 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 6
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 1

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
HKEY_CLASSES_ROOT\Typelib\{E47CAEE0-DEEA-464A-9326-3F2801535A4D} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\Interface\{3E1656ED-F60E-4597-B6AA-B6A58E171495} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{3DC201FB-E9C9-499C-A11F-23C360D7C3F8} (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.HTMLMenu (Adware.MyWebSearch) -> Quarantined and deleted successfully.
HKEY_CLASSES_ROOT\FunWebProducts.HTMLMenu.2 (Adware.MyWebSearch) -> Quarantined and deleted successfully.

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 05, 2010, 11:59:29 PM
The only computer I have access to read emails is this one so it is difficult for me to disconnect it.  I am wondering if a dongle I bought on-line had a virus in it....?  I only bought it to download the photos from my phone.

I have noticed very little difference to my machine since running the malware scan.  The problem with Avast is still happening.  If I log on for the first time in a day I usually have to reset the system; I always get the warning triangle telling me that the system is not fully protected but assume this is because it is updating itself?  On two occasions, when Avast has been turned off, whilst resetting it, I have been advised that a programme is attempting to turn the real time scan off and click on 'no' as I am not intentionally doing this.  I assume this is the infected file doing this. 
As I said previously, the problem has only been happening recently - perhaps the past four weeks.
I have looked at the virus link and am a bit confused by it.  Do I download one of the virus removal tools and, if so, which one would you recommend?
Thank you.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 06, 2010, 12:17:52 AM
Here is my OTL log.  I didn't change any of the settings except clicking all users and pasting the text as quoted.

I will not download anything and keep my system as it is.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 06, 2010, 12:22:05 AM
I think that I have just attached mumbo jumbo so will try again!
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 06, 2010, 12:29:47 AM
THird time lucky?
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 06, 2010, 12:31:04 AM
Sorry, this is not playing ball (user error?!)
I have done yet another scan and this is the latest one.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 06, 2010, 12:32:45 AM
Nope, still rubbish.  What am I doing wrong?!
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 06, 2010, 01:12:32 AM
One last attempt......
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 06, 2010, 01:13:38 AM
Hurrah!  Sorry that there are so many posts..... ???

I also have CrapCleaner that I run daily.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on December 06, 2010, 08:11:50 AM
I see that you were able to post 1 part of the OTL.txt log, but not the OTL.extras log.  Perhaps you can try to get the OTL.extras log in the same format you used to do the last log you did on page 3). 

I know this is difficult for you and you are doing a great job.  You are not doing anything wrong (and don't worry about the extra posts)...what counts is that we fix your problem and you are happy in the end. :)

@ Essexboy, I'm going to have you review the OTL log (last one posted on page 3) to review.  Thank you.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 06, 2010, 12:32:40 PM
I am only getting the OTL text log.  The first time I ran OTL I had an extras log but, due to user error, (!) I am not getting it anymore.  Would you recommend that I delete the desktop icon and re-install OTL to see if I get the extras log again?
I opened the interface just now when I started out to 'see' what was behind the warning triangle on the icon.  The real-time scan was turned off but righted itself without any action by myself.  When I get the red cross I have to rectify it myself.

How often would you recommend running Malware as obviously I am now paranoid!


I really do appreciate your help.  I chose AVAST as it was recommended by Which? magazine as the best free anti-virus.  Are those of you helping me out actually AVAST people or just keen volunteers?
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: YoKenny on December 06, 2010, 03:22:07 PM
Please go to PROFILE then Modify Profile then Forum Profile Information then select your country in Please select your country: then update your Signature: with information like my signature as this helps the helpers offer pertinent advice.

We are keen volunteers.  8)
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 06, 2010, 04:42:07 PM
All done!
I am somewhat wary of the email thing - despite 'hiding' my email address from public view it still seems to be available?
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Gopher John on December 06, 2010, 05:16:02 PM
Quote from: Tink66 on December 06, 2010, 04:42:07 PM
All done!
I am somewhat wary of the email thing - despite 'hiding' my email address from public view it still seems to be available?

Your email address is only visible to you, as mine is to me.  Visit the forum with another browser that you haven't visited this site with, and you will see that your email address isn't visible to the rest of the forum users.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Asyn on December 06, 2010, 06:05:24 PM
Quote from: Tink66 on December 06, 2010, 04:42:07 PM
I am somewhat wary of the email thing - despite 'hiding' my email address from public view it still seems to be available?

No, it's hidden, don't worry..!!
asyn
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: YoKenny on December 06, 2010, 08:12:33 PM
Quote from: Tink66 on December 06, 2010, 04:42:07 PM
All done!
I am somewhat wary of the email thing - despite 'hiding' my email address from public view it still seems to be available?

Well Green Goddess in your signature does not tell us anything about your system.

Quote
No, it's hidden, don't worry..!!
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: essexboy on December 06, 2010, 10:36:09 PM
Number two worked for me  ;D

Nothing in easy view there so I will need to go deeper

Run OTL
.
NEXT

Download ComboFix from one of these locations:


Link 1 (http://www.forospyware.com/sUBs/ComboFix.exe)
Link 2 (http://download.bleepingcomputer.com/sUBs/ComboFix.exe)


* IMPORTANT !!! Save ComboFix.exe to your Desktop


**Please note: If the Microsoft Windows Recovery Console is already installed, ComboFix will continue it's malware removal procedures.


(http://img.photobucket.com/albums/v706/ried7/RcAuto1.gif)


Once the Microsoft Windows Recovery Console is installed using ComboFix, you should see the following message:

(http://img.photobucket.com/albums/v706/ried7/whatnext.png)


Click on Yes, to continue scanning for malware.

When finished, it shall produce a log for you.  Please include the C:\ComboFix.txt in your next reply.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on December 07, 2010, 08:58:33 AM
Quote from: Tink66 on December 06, 2010, 12:32:40 PM
Are those of you helping me out actually AVAST people or just keen volunteers?
We're keen volunteers.  ;)  Don't worry about your Signature for now until Essexboy is done removing your malware.  After that, he and I will give you some tips for keeping you safer in the future.

BTW, I like your new avatar. :)   So follow Essexboy's instructions, as he will be giving you many, and let's start the malware removal process.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 08, 2010, 11:11:59 AM
Here is my latest OTL log after reboot:
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on December 08, 2010, 11:15:56 AM
I tried to read the log, but it is in the wrong format.  Please save it as ANSI and not Unicode.  Thank you.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 08, 2010, 11:16:41 AM
The latest after a quick OTL scan (think I posted the wrong one last time).  I didn't paste anything into the custom box nor did I tick the 'all users' option.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on December 08, 2010, 11:18:26 AM
It looks like you are using Unicode for the format.  You need to use ANSI for us to read it.  Can you do it again and re-attach to you post?  Thank you for your effort.  :)
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 08, 2010, 11:18:59 AM
???  What is ANSI?  Don't forget I am computer illiterate!

I have no idea what an avatar is (assume it is the picture?!)

I also thought a signature was just that....not the content of my computer system.  Can someone tell me how I find this info and paste it?

Thanks
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on December 08, 2010, 11:21:55 AM
You are given the option of what type of format to save the file.  ANSI and Unicode and I believe one other, but you want to save it as ANSI.

Yes, your picture is your avatar, which by the way is beautiful. :D

To post your Signature:

Please go to PROFILE on the top of the main forum page > Modify Profile > Forum Profile Information > Signature.   Enter information about your system like the Operating System (OS), RAM, browser, security software, what version and product of Avast and firewall you use and other items you wish to mention.  See my signature or others as an example.  The purpose of this is so that we can offer pertinent advice.  Thank you.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 08, 2010, 11:22:41 AM
DEleted
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 08, 2010, 11:23:10 AM
========== Modules (SafeList) ==========
 
deleted
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 08, 2010, 11:23:36 AM
deleted
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 08, 2010, 11:24:05 AM
Deleted
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 08, 2010, 11:24:52 AM
Deleted
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 08, 2010, 11:25:25 AM
Deleted
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 08, 2010, 11:28:14 AM
Thank you.  I have cut and pasted it in about 5 different logs...I'll end up with 5 stars after my name and this rate and will appear knowledgeable!!

Haven't run the other thing that Essexboy suggested yet as am worried about turning Avast off.....

Profile...yes, I can find that part but is there anywher on my system that I can find what RAm etc I have.  Haven't a clue!
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 08, 2010, 11:29:12 AM
Aha!
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on December 08, 2010, 11:38:40 AM
Quote from: Tink66 on December 08, 2010, 11:28:14 AM
Haven't run the other thing that Essexboy suggested yet as am worried about turning Avast off.
You have to disable Avast (and any other security software) for ComboFix to work.  Don't worry about it, just follow his directions.

I sent you a PM (private message) regarding attachments.  Yes, at this rate you will end up with 5 stars...nice sense of humor after dealing with all of this...LOL.  You had the correct format, but you just needed to attach it to the post. 

Don't worry about your profile for now.  Just do the ComboFix as Essexboy will need this.  If you have time later, you can look under System Information to find out your RAM, but this is low priority compared to removing your malware IMO.  Thank you for your logs.  Let me know if you have any questions.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 08, 2010, 11:56:48 AM
Here is my Combofix log....Somewhat worried now as the screen went black after I disabled Avast.......
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 08, 2010, 12:03:39 PM
I have deleted the cut and paste logs.  Have I now attached them in a readable format?
Thanks
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 08, 2010, 03:14:20 PM
Not really AVAST related but I am concerned now that whenever I view a website, such as ebay, I can only access it if I continue over an unsecure connection that lets others 'see' what I am doing!  I can't even read my emails via hotmail without the security warning popping up.  I can see my computer and a sledgehammer fast becoming acquainted...
 :'(
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 08, 2010, 07:53:31 PM
By jove folks, I think I've got it!! AVAST hasn't been turned off the last few times I've logged in! ;D
Also, I am not using the icons on my desktop to read emails etc and things seem to be OK!
Thanks for everyone's help.
The Green Goddess xx
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: essexboy on December 08, 2010, 09:12:38 PM
I feel that may have been due to the customised icons you were using as Combofix did not like them  ;D

Lets run a quick sweep for orphans and I will then tidy you up

(http://img233.imageshack.us/img233/7729/mbamicontw5.gif) Please download Malwarebytes' Anti-Malware from Here (http://www.malwarebytes.org/mbam-download.php).

Double Click mbam-setup.exe to install the application.
Extra Note:

If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process. If asked to restart the computer, please do so immediately.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 09, 2010, 06:04:52 PM
I already have MBAM installed so will run a quick scan and the full scan, as I think that is what you are stating?
I am still havinh problems with insecure websites.....
Thanks for your help!
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 09, 2010, 07:07:00 PM
Malwarebytes' Anti-Malware 1.50
www.malwarebytes.org

Database version: 5281

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

09/12/2010 18:03:36
mbam-log-2010-12-09 (18-03-36).txt

Scan type: Full scan (C:\|D:\|)
Objects scanned: 177089
Time elapsed: 38 minute(s), 32 second(s)

Memory Processes Infected: 0
Memory Modules Infected: 0
Registry Keys Infected: 0
Registry Values Infected: 0
Registry Data Items Infected: 0
Folders Infected: 0
Files Infected: 3

Memory Processes Infected:
(No malicious items detected)

Memory Modules Infected:
(No malicious items detected)

Registry Keys Infected:
(No malicious items detected)

Registry Values Infected:
(No malicious items detected)

Registry Data Items Infected:
(No malicious items detected)

Folders Infected:
(No malicious items detected)

Files Infected:
c:\program files\windows live\messenger\riched20.dll (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{143daf18-5906-4fc1-af29-1a98fbad7a17}\RP340\A0040904.DLL (PUP.FunWebProducts) -> Not selected for removal.
c:\system volume information\_restore{143daf18-5906-4fc1-af29-1a98fbad7a17}\RP340\A0040905.DLL (PUP.FunWebProducts) -> Not selected for removal.


I never did run the worm/virus programme you suggested, Essexboy, as I was unsure which option to choose.  I think I may have b*ggered things up regarding the insecure sites as I blocked certain sites via the padlock icon, thinking they were baddies.  For instance, iconix is part of MSN, I believe?

Sugar, just realised I forgot to select the items for quarantine!

Advice gratefully received as always! :D
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: essexboy on December 09, 2010, 07:47:53 PM
Try to reset IE to default settings

Go to Control panel > internet options
Go to the Security tab
Select reset to default level

Then let me know of any outstanding problems  ;D
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on December 10, 2010, 03:07:52 AM
Quote from: Tink66 on December 09, 2010, 07:07:00 PM
Sugar, just realised I forgot to select the items for quarantine!
After you do what Essexboy suggested, update MBAM again and run an MBAM scan again...this time putting infected items into quarantine.  Then post your log.  Thanks. ;)
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 11, 2010, 04:23:56 PM
Quote from: essexboy on December 09, 2010, 07:47:53 PM
Try to reset IE to default settings

Go to Control panel > internet options
Go to the Security tab
Select reset to default level

Then let me know of any outstanding problems  ;D

OK, have done.  Watch this space! :o
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 11, 2010, 04:24:47 PM
Quote from: SafeSurf on December 10, 2010, 03:07:52 AM
Quote from: Tink66 on December 09, 2010, 07:07:00 PM
Sugar, just realised I forgot to select the items for quarantine!
After you do what Essexboy suggested, update MBAM again and run an MBAM scan again...this time putting infected items into quarantine.  Then post your log.  Thanks. ;)

Will do when I have some time as it takes an hour or so to run! :D
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: essexboy on December 11, 2010, 04:51:53 PM
Use the quick scan - it is just as good  ;D
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 11, 2010, 05:36:49 PM
This is a quick scan; the full one yesterday showed 3 infected items that I forgot to quarantine.

By the way, I think that the other problems have sorted themselves...... :-*  Thanks a million!!
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: essexboy on December 11, 2010, 07:29:55 PM
Looking at that I am a happy bunny  :)

I will remove my tools now and give some recommendations, but I would like you to run for 24 hours or so and come back if you have any problems

 Now the best part of the day ----- Your log now appears clean  :thumbsup:

A good workman always cleans up after himself so..The following will implement some cleanup procedures as well as reset  System Restore points:

Run OTL
.
Click Start > Run  and copy/paste the following bolded text into the Run box and click OK:

ComboFix /Uninstall

Run OTL and hit the cleanup button.  It will remove all the programmes we have used plus itself.  MBAM can be uninstalled via control panel add/remove along with ERUNT.  But they may be useful tools to keep

We will now confirm that your hidden files are set to that, as some of the tools I use will change that

SPRING CLEAN
 
Download and run Puran Disc Defragmenter (http://www.puransoftware.com/Puran-Defrag-Download.html)

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programmes: It is critical to have both a firewall and anti virus to protect your system and to keep them updated.

To keep your operating system up to date visit To learn more about how to protect yourself while on the internet read our little guide  How did I get infected in the first place ? (http://www.geekstogo.com/forum/topic/225044-preventing-malware-and-safe-computing/)
Keep safe  :wave:
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 12, 2010, 12:09:03 PM
I have scanned through the link you gave for computer protection and have loaded Keyscramler.  I am also considering the Open DNS recommendation - would you recommend I do so? I do note that one of the programmes might not run with Windows Defender which I also use.

I Ran the OTL fixes and it took less than a second.  Everything else seemed to go to plan!  
Is the defrag tool the same as the defrag option I choose through system tools?  It seemed much faster than that one.

I gather that I do not need any of the earlier worm/virus removal tools that you suggested earlier in my post so shall keep my fingers crossed and let you know how things go in the next couple of days.

A GREAT BIG THANK YOU TO MY AVAST HEROES - ESSEXBOY AND SAFESURF!  HOPE YOU BOTH HAVE A GREAT CHRISTMAS! ;D
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on December 12, 2010, 12:44:27 PM
Glad to hear everything is working out fine!  :D :D :D

Quote from: Tink66 on December 12, 2010, 12:09:03 PM
Is the defrag tool the same as the defrag option I choose through system tools?  It seemed much faster than that one.
No...Puran is different than the system one.  It probably ran quicker because you did the regular defrag with Puran.  If you run the Puran boot-time defrag, which goes much deeper, this takes longer and does a better job.  I would suggest after all the changes we did with your machine that you run this after doing a regular Puran defrag.  You don't normally have to do a Puran boot defrag unless you are doing major changes with your machine.

Quote from: Tink66 on December 12, 2010, 12:09:03 PM
I gather that I do not need any of the earlier worm/virus removal tools that you suggested earlier
I would keep MBAM, as many of us use this as an on-demand scanner (some use the Pro/resident version) and it does not conflict with Avast.  Any of the tools Essexboy used for diagnostics and to remove malware you do not need to keep on your machine.

I really do not think you need to keep Windows Defender on with Avast on an XP machine.  This uses a lot of memory and the detection rate of Avast is so much better.  Plus you have MBAM as an on-demand scanner, so I see no need for it.

Here are a few suggestions in addition to the ones given to you by Essexboy to keep you and your machine safer in the future:

1.   Keep your definitions up to date for both Avast and MBAM. 
2.   Keep all your shields on with Avast.
3.   Update MBAM prior to scanning, then do Quick scans.
4.   Keep your MS Updates current.
5.   Add things to your browsers for safer browsing.  See my Signature as an example.
6.   Use common sense when browsing and do not go to risky sites.
7.   When downloading software, read what you are clicking and do not download adware toolbars which are commonly opted in; look before you click or do a Custom install to avoid putting unwanted toolbars on your machine that lead to spyware tracking or adware.
8.   Check to see that your software is up to date with the free Secunia Software Inspector http://secunia.com/vulnerability_scanning/personal/ (http://secunia.com/vulnerability_scanning/personal/) since software is changing all the time.  This site gives you the vendor's direct download link making it easy to upgrade your software.  Many of us here scan our machines weekly.

In addition, now you only have the Windows XP firewall (FW), which is very weak and 1-way protection.  I would recommend a third-party 2-way FW for maximum security.  Users have reported that the following FW’s have not conflicted with Avast: Online Armor, Comodo (w/o AV), Outpost – all come in free and paid versions, with the paid versions including HIPS and some also include keyloggers as well to increase your protection.

When you feel that your issue is resolved/fixed (no hurry), please go back to the first open post in this topic, click the modify button in that Post and change the title/subject, add [Resolved] to the beginning of the title so this thread can be closed.  In the meantime, feel free to ask additional questions.

I wish you a very Happy Holiday as well, and it was our pleasure assisting you. :D
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: essexboy on December 12, 2010, 04:06:09 PM
As an addition to that I have started to use trusteer rapport for all my banking sites.  This locks down the communications to just you and the site, enables an antikeylogger and confirms the site is correct and not a lookalike

No apparent overheads on my system at all - details here  http://www.trusteer.com/presentation-how-it-works and here http://www.trusteer.com/product/trusteer-rapport  Download here http://www.trusteer.com/solutions/home-users/online-security
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: CraigB on December 12, 2010, 04:41:52 PM
Quote from: essexboy on December 12, 2010, 04:06:09 PM
As an addition to that I have started to use trusteer rapport for all my banking sites.  This locks down the communications to just you and the site, enables an antikeylogger and confirms the site is correct and not a lookalike

No apparent overheads on my system at all - details here  http://www.trusteer.com/presentation-how-it-works and here http://www.trusteer.com/product/trusteer-rapport  Download here http://www.trusteer.com/solutions/home-users/online-security
Unfortunatly trusteer isnt much good for us over here in Australia, trusteer doesn't support our major banks here :( which is disappointing because it is an excellent addition for security.
Keep in mind that if you ever delet trusteer it is hopeless at cleaning up after itself, just deleted off a friend's system who has moved over here from your end of the world and it left a trail of rubbish right through there computer,but if you plan on keeping it then that wont be a problem anyway :)
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: essexboy on December 12, 2010, 05:45:05 PM
My bank doesn't use trusteer, I use it purely to confirm the site is legit and for the anti-keylogger action 
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: CraigB on December 12, 2010, 05:56:38 PM
Quote from: essexboy on December 12, 2010, 05:45:05 PM
My bank doesn't use trusteer, I use it purely to confirm the site is legit and for the anti-keylogger action 
Didn't know it could be used that way, i though it had to be run with one of there supported bank's for it to work.
Thanks for the tip :)
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: essexboy on December 12, 2010, 06:00:21 PM
Here is a screenshot of the console and it shows the sites that I have added manually

Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: CraigB on December 12, 2010, 06:05:18 PM
Thank's essexboy, it's free to isnt it?
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: essexboy on December 12, 2010, 06:06:23 PM
Thats right - I love freebies  ;D
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: CraigB on December 12, 2010, 06:07:52 PM
Me too, thank's mate :)
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 12, 2010, 10:18:30 PM
I have now added Secunia.  Wasn't really sure what I was doing but it now tells me I am 99% secure.  Need time to really digest all the other info!
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: essexboy on December 12, 2010, 10:54:38 PM
No problem Tink just fire away if you have any questions 
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on December 13, 2010, 12:48:17 AM
Quote from: Tink66 on December 12, 2010, 10:18:30 PM
Need time to really digest all the other info!
This is normal, so don't worry.  You've been through a lot and have been given a lot of suggestions.  Take your time in deciding things, and remember you can always trial software out prior to purchasing as well.  But we are here to answer your questions.
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 13, 2010, 07:07:04 PM
Open DNS basic.  Is this easy to install?  I note that I have to provide my personal email address etc to sign up for the free option.  I also read the firewall guide on the 'how did I get infected' link on Essexboy's post and am now mighty confused.  As I said, I have had problems with conflicting firewalls in the past but am thinking of adding Online Armor so I see a lot of you use that.
With everything else that I have installed do any of you foresee any problems?
Thank you,
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: essexboy on December 13, 2010, 09:55:11 PM
Quote
As I said, I have had problems with conflicting firewalls in the past but am thinking of adding Online Armor so I see a lot of you use that.
With everything else that I have installed do any of you foresee any problems?
That will just replace windows firewall  ;D
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 14, 2010, 09:23:09 PM
 :)
Well, I have installed Online Armor (free) with no problems.  Mightily impressed with it so far!
I think I can close this query now - thank you one and all!
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: YoKenny on December 14, 2010, 09:29:07 PM
Sure would be good if you updated your PROFILE if you go to PROFILE then Modify Profile then Forum Profile Information then update your Signature: with information like my signature as this helps the helpers offer pertinent advice.

I wonder If a Green Goddess knows how to do this ???
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on December 14, 2010, 09:36:05 PM
Quote from: YoKenny on December 14, 2010, 09:29:07 PM
Sure would be good if you updated your PROFILE if you go to PROFILE then Modify Profile then Forum Profile Information then update your Signature: with information like my signature as this helps the helpers offer pertinent advice.

I wonder If a Green Goddess knows how to do this ???

NO, but I've done my best.
Title: Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on February 10, 2011, 10:02:47 AM
Oh yes, I'm back.  It's turning itself off again!!

Are my heroes still out there?

TINK

PS  Got rid of Online Armor and am just back to Windows Firewall.  OA 'jammed' my machine!

 >:(
Title: Re: Real Time Scan turned off every time I turn my computer on
Post by: CraigB on February 10, 2011, 10:59:46 AM
Quote from: Tink66 on February 10, 2011, 10:02:47 AM
Oh yes, I'm back.  It's turning itself off again!!

Are my heroes still out there?

TINK

PS  Got rid of Online Armor and am just back to Windows Firewall.  OA 'jammed' my machine!

 >:(
Tink66 you can im essexboy by clicking the im tab under his avatar, write a small msg and he will respond later when he come's on the forum's.
Title: Re: RE-OPENED Real Time Scan turned off every time I turn my computer on
Post by: essexboy on February 10, 2011, 08:37:55 PM
Hi Tink - is it just windows firewall turning itself off now ?  Is OA fully uninstalled ?
Title: Re: RE-OPENED Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on February 11, 2011, 10:42:02 AM
Quote from: essexboy on February 10, 2011, 08:37:55 PM
Hi Tink - is it just windows firewall turning itself off now ?  Is OA fully uninstalled ?

Sorry, not very clear there!
Avast (the devil) is OFF again when I'm logging on.  I have totally uninstalled Online Armor as I found that my computer started 'hanging' and I couldn't turn it off!  I know, bozarre.  Managed to stop it in safe mode (you see, I did learn something on here!)
Windows Firewall is OK at the moment - it's just Avast being naughty again.
I have run MBAM and I have nothing infected.  Do you suggest another uninstall and reinstall?
Thanks

Title: Re: RE-OPENED Real Time Scan turned off every time I turn my computer on
Post by: YoKenny on February 11, 2011, 03:07:06 PM
Do you have MBAM Free or paid with resident protection ???

You should delay avast! startup as I have a problem with MBAM paid on my XP Pro system unless I delay avast! services.
Title: Re: RE-OPENED Real Time Scan turned off every time I turn my computer on
Post by: essexboy on February 11, 2011, 07:12:35 PM
Try a repair first as AO may have damaged it in someway

Go to the control pane - add/remove
Select Avast but scroll down to the repair section and run that
Title: Re: RE-OPENED Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on February 12, 2011, 09:51:40 AM
MBAM free version.

I have run the AVAST repair and shall see how I get on.  Bizarrely, it didn't turn off today but that's how it all started last time! LOL ::)
Title: Re: RE-OPENED Real Time Scan turned off every time I turn my computer on
Post by: essexboy on February 12, 2011, 04:09:22 PM
The wonders of modern technology  ;D
Title: Re: RE-OPENED Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on February 14, 2011, 11:45:24 AM
 :-X

No comment!

I shall leave this thread open for a couple of days if that's OK..........just in case!
Title: Re: RE-OPENED Real Time Scan turned off every time I turn my computer on
Post by: YoKenny on February 14, 2011, 02:36:43 PM
Quote from: Tink66 on February 14, 2011, 11:45:24 AM
:-X

No comment!

I shall leave this thread open for a couple of days if that's OK..........just in case!
Please update your signature
Quote
Avast Free 5.0.677 / MBAM
avast! is now 5.1.889 and please indicate MBAM free
Title: Re: RE-OPENED Real Time Scan turned off every time I turn my computer on
Post by: SafeSurf on February 15, 2011, 09:53:20 AM
There are now more places to add trusted exclusions with Avast and OA since Avast upgraded to v.5.1.889:

To add OA to Avast exclusions:

·   Settings > Exclusions > Add > search for Online Armor and click on the box to the left of it and add it, then click OK
·   Real Time Shields > Expert Settings > Trusted Processes > Add > search for Online Armor and click on the box to the left of it and add it, then click OK
·   Behavior Shield > Expert Settings > Trusted Processes > Add > search for Online Armor and click on the box to the left of it and add it, then click OK.  Also change action to take in Behavior Shield to “Ask.”

To add Avast exclusions to OA, this has not changed from before:

·   Open the OA GUI > Options > Exclusions > Add > click on the pop-up window and find C:\Program Files\Awil Software\ (for Avast).

·   When you reboot OA (to go into Learning Mode), make sure ALL Avast shields are left on.

·   Reboot your machine again; OA requires two boots.  After this second reboot, you may get a pop-up asking you if you trust Avast.  Answer the pop-up as "Trust Always" and "Remember My Decision" and you should not get any more pop-ups.  Answer incorrectly and you will get future pop-ups.

·   Open the OA GUI > Programs > untick "Hide Trusted" so that you can see everything > look to make sure everything from Avast is not "blocked" (red) or "ask" (yellow).  If it is, right-click the item and change it to "Trust."  Reboot.

·   Open the OA GUI > Options > Backup/Restore > Save your settings once you have everything the way you want it.

Since you are currently using the XP firewall, this only provides a 1-way very weak firewall protection.  Try giving the exclusions as described above a try and see if this helps making sure you completely uninstalled OA per the vendor’s instructions (reboot) prior to you re-installing it again.  Let me know if you have any questions.  If you still have problems, we’ll see what we can do to help you with a different product to give you better protection.  Thanks.

NOTE:  If the new version of Avast is giving you a problem and the Avast Repair did not resolve your issue, you may consider uninstalling it via the Avast uninstaller tool and reinstalling it.  Then reinstall OA with the exclusions listed above, making sure you completely uninstalled OA prior to re-installing it via the OA uninstaller, then reboot your machine.  You can also check in Safe Mode if OA is still on your machine as well by doing a search for "Online Armor," "OA," "OANet," "OACat," "OADevice," "oahlpxx," "OAmon" and "SvcOnlineArmor."  If any of these show up in Safe Mode after uninstalling OA, you can delete them, then reboot your machine prior to re-installing.  You might also want to do a defrag as well if you end up going this route.  Let me know if you have any questions.  Thank you.

Title: Re: RESOLVED Real Time Scan turned off every time I turn my computer on
Post by: Tink66 on February 18, 2011, 06:05:48 PM
 :-X
Thank you everyone but I have major problems with AVAST - tried uninstalling and then re-installing but had error messages each time.  Have now given up the ghost and gone to a competitor!!
Have closed this link.