Uninstall avast.. i tried everything!!!

[schmidthouse]

I have passed this on to our Malware expert and we will see what he thinks once he's available.
Thanks for your patience.

[hal7]

thank you very much! I am happy with avast and if I(we) can solve this i would like to install avast again.. but is there any other reliable antivirus program I can use till I get this done! I need my computer every single day..

If I install an other program temporarily does it get more mixed up?

Thnx

[schmidthouse]

thank you very much! I am happy with avast and if I(we) can solve this i would like to install avast again.. but is there any other reliable antivirus program I can use till I get this done! I need my computer every single day..

If I install an other program temporarily does it get more mixed up?

Thnx

Hi:  If you can, "please wait until our Malware expert can review".
If you do have a malware/virus issue then further installations could/would also be affected.
It should not be long

[hal7]

thank you very much! I am happy with avast and if I(we) can solve this i would like to install avast again.. but is there any other reliable antivirus program I can use till I get this done! I need my computer every single day..

If I install an other program temporarily does it get more mixed up?

Thnx

Hi:  If you can, "please wait until our Malware expert can review".
If you do have a malware/virus issue then further installations could/would also be affected.
It should not be long

I am waiting!

Thanks.

[essexboy]

Could you confirm that you are unable to get into safe mode

Download OTL  to your Desktop
Secondary link

• Double click on the icon to run it. Make sure all other windows are closed and to let it run uninterrupted.

• Select All Users
  
• Under the Custom Scan box paste this in

netsvcs
BASESERVICES
%SYSTEMDRIVE%\*.exe
/md5start
services.*
explorer.exe
winlogon.exe
Userinit.exe
svchost.exe
winsock.*
/md5stop
CREATERESTOREPOINT

• Click the Run Scan button. Do not change any settings unless otherwise told to do so. The scan wont take long.
  
  • When the scan completes, it will open two notepad windows. OTL.Txt and Extras.Txt. These are saved in the same location as OTL.
    
  • Post  both logs

THEN

Download aswMBR.exe ( 4.5mb ) to your desktop.
 Double click the aswMBR.exe to run it  Click the "Scan" button to start scan 




On completion of the scan click save log, save it to your desktop and post in your next reply

[hal7]

Hey!

I have downloaded OTL and ran as you said and I got one saved file : OTL.txt
 
I uploaded it as attachment

   

[hal7]

asMBR.txt:


aswMBR version 0.9.9.1707 Copyright(c) 2011 AVAST Software
Run date: 2013-01-21 17:36:34
-----------------------------
17:36:34.030    OS Version: Windows 6.1.7601 Service Pack 1
17:36:34.030    Number of processors: 2 586 0xF0D
17:36:34.033    ComputerName: userrr  UserName: username....
17:36:35.829    Initialize success
17:40:08.271    AVAST engine error: 2
17:40:10.890    Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-3
17:40:10.893    Disk 0 Vendor: WDC_WD3200BPVT-22ZEST0 01.01A01 Size: 305245MB BusType: 11
17:40:10.911    Disk 0 MBR read successfully
17:40:10.914    Disk 0 MBR scan
17:40:10.917    Disk 0 Windows 7 default MBR code
17:40:10.921    Disk 0 Partition 1 80 (A) 07    HPFS/NTFS NTFS          100 MB offset 2048
17:40:10.929    Disk 0 Partition 2 00     07    HPFS/NTFS NTFS       305143 MB offset 206848
17:40:10.936    Disk 0 scanning sectors +625139712
17:40:11.014    Disk 0 scanning C:\Windows\system32\drivers
17:40:17.534    Service scanning
17:40:32.161    Modules scanning
17:40:39.997    Disk 0 trace - called modules:
17:40:40.020    ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys halmacpi.dll ataport.SYS PCIIDEX.SYS msahci.sys ndis.sys netw5v32.sys
17:40:40.028    1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x85ec5200]
17:40:40.035    3 CLASSPNP.SYS[8920459e] -> nt!IofCallDriver -> [0x85dcb918]
17:40:40.041    5 ACPI.sys[88eb63d4] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP2T0L0-3[0x85da4908]
17:40:40.048    Scan finished successfully
17:40:52.227    Disk 0 MBR has been saved successfully to "C:\Users\username..\Desktop\MBR.dat"
17:40:52.235    The log file has been saved successfully to "C:\Users\username...\Desktop\aswMBR.txt"

[essexboy]

Avast appears to be working, what are your current problems ?

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

• Under the Custom Scans/Fixes box at the bottom, paste in the following
  
  
  

Code: [Select]

:OTL
IE - HKU\S-1-5-21-2472689237-2822399416-2604177735-1001\..\URLSearchHook: {88c7f2aa-f93f-432c-8f0e-b7d85967a527} - No CLSID value found
FF - prefs.js..extensions.enabledAddons: ffxtlbr@babylon.com:1.1.9
FF - prefs.js..keyword.URL: "http://search.babylon.com/?babsrc=SP_ss&mntrId=56ea03fc000000000000001e8c44646a&tlver=1.4.19.19&instlRef=sst&ss=1&affID=18042&q="
[2011.12.20 16:04:35 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\username..\AppData\Roaming\Mozilla\Firefox\Profiles\s804d0w7.default\extensions\ffxtlbr@babylon.com
O2 - BHO: (CescrtHlpr Object) - {2EECD738-5844-4a99-B4B6-146BF802613B} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\bh\BabylonToolbar.dll File not found
O2 - BHO: (no name) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - No CLSID value found.
O3 - HKLM\..\Toolbar: (Babylon Toolbar) - {98889811-442D-49dd-99D7-DC866BE87DBC} - C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarTlbr.dll File not found
O3 - HKU\S-1-5-21-2472689237-2822399416-2604177735-1001\..\Toolbar\WebBrowser: (no name) - {30F9B915-B755-4826-820B-08FBA6BD249D} - No CLSID value found.
O3 - HKU\S-1-5-21-2472689237-2822399416-2604177735-1001\..\Toolbar\WebBrowser: (no name) - {3E1201F4-1707-409F-BB45-A5F192381DA0} - No CLSID value found.
O3 - HKU\S-1-5-21-2472689237-2822399416-2604177735-1001\..\Toolbar\WebBrowser: (no name) - {88C7F2AA-F93F-432C-8F0E-B7D85967A527} - No CLSID value found.
O4 - HKLM..\Run: [BabylonToolbar] "C:\Program Files\BabylonToolbar\BabylonToolbar\1.4.19.19\BabylonToolbarsrv.exe" /md I File not found

:Files
C:\Program Files\BabylonToolbar

:Commands
[resethosts]
[emptytemp]
[CREATERESTOREPOINT]
[Reboot]

• Then click the Run Fix button at the top
  
• Let the program run unhindered, reboot the PC when it is done
• Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

[hal7]

after reboot i got results in notepad without scanning it again..

All processes killed
========== OTL ==========
Registry value HKEY_USERS\S-1-5-21-2472689237-2822399416-2604177735-1001\Software\Microsoft\Internet Explorer\URLSearchHooks\\{88c7f2aa-f93f-432c-8f0e-b7d85967a527} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{88c7f2aa-f93f-432c-8f0e-b7d85967a527}\ not found.
Prefs.js: ffxtlbr@babylon.com:1.1.9 removed from extensions.enabledAddons
Prefs.js: "http://search.babylon.com/?babsrc=SP_ss&mntrId=56ea03fc000000000000001e8c44646a&tlver=1.4.19.19&instlRef=sst&ss=1&affID=18042&q=" removed from keyword.URL
Folder C:\Users\username..\AppData\Roaming\Mozilla\Firefox\Profiles\s804d0w7.default\extensions\ffxtlbr@babylon.com\ not found.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2EECD738-5844-4a99-B4B6-146BF802613B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{2EECD738-5844-4a99-B4B6-146BF802613B}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{761497BB-D6F0-462C-B6EB-D4DAF1D92D43}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\Toolbar\\{98889811-442D-49dd-99D7-DC866BE87DBC} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{98889811-442D-49dd-99D7-DC866BE87DBC}\ deleted successfully.
Registry value HKEY_USERS\S-1-5-21-2472689237-2822399416-2604177735-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{30F9B915-B755-4826-820B-08FBA6BD249D} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{30F9B915-B755-4826-820B-08FBA6BD249D}\ not found.
Registry value HKEY_USERS\S-1-5-21-2472689237-2822399416-2604177735-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{3E1201F4-1707-409F-BB45-A5F192381DA0} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E1201F4-1707-409F-BB45-A5F192381DA0}\ not found.
Registry value HKEY_USERS\S-1-5-21-2472689237-2822399416-2604177735-1001\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{88C7F2AA-F93F-432C-8F0E-B7D85967A527} deleted successfully.
Registry key HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{88C7F2AA-F93F-432C-8F0E-B7D85967A527}\ not found.
Registry value HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\\BabylonToolbar deleted successfully.
========== FILES ==========
File\Folder C:\Program Files\BabylonToolbar not found.
========== COMMANDS ==========
C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
 
[EMPTYTEMP]
 
User: All Users
 
User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
 
User: haldun
->Temp folder emptied: 3171485523 bytes
->Temporary Internet Files folder emptied: 182294448 bytes
->Java cache emptied: 2648999 bytes
->FireFox cache emptied: 1118071679 bytes
->Google Chrome cache emptied: 346667351 bytes
->Apple Safari cache emptied: 158720 bytes
->Flash cache emptied: 2402 bytes
 
User: Public
 
%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 243346206 bytes
RecycleBin emptied: 0 bytes
 
Total Files Cleaned = 4.830,00 mb
 
Restore point Set: OTL Restore Point
 
OTL by OldTimer - Version 3.2.69.0 log created on 01212013_203027

Files\Folders moved on Reboot...
File\Folder C:\Windows\temp\TMP0000000165EF1089260C675F not found!

PendingFileRenameOperations files...

Registry entries deleted on Reboot...



do I have to quick scan again?

my current problem i can't do anything!! avast got a cross on the icon...G!

[essexboy]

OK lets now run a stronger tool

Download and Install Combofix
 
Download ComboFix from one of the following locations:
Link 1
Link 2
 
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
 
* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here

• Double click on ComboFix.exe & follow the prompts.
  
• Accept the disclaimer and allow to update if it asks

• When finished, it shall produce a log for you.
• Please include the C:\ComboFix.txt in your next reply.[/b]
  

Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.
3.  If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.


Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

[hal7]

I attached it

[essexboy]

You should now be able to enter safe mode and run aswclear

[hal7]

It does not work! I am tired of it. I will try another antivirus program.

thnx!

[essexboy]

Are you saying that Avast will not uninstall at all ?

[hal7]

Are you saying that Avast will not uninstall at all ?

I am saying that It's alright! you made a self protection mode to disable harmful programs to delete avast but now even you can't delete it and plus, I am tired of downloading tons of programs you offer me to download and try to clean avast.. Too much going on. It shouldn't be that difficult!

I have downloaded another antivirus program and by the time I am trying to get rid of avast without downloading any other program.

I appreciate your help! But i ain't no more time to waste trying to delete a program.