Help: Avast not working

[magna86]

@davido12345

How is the progress? If you are not able to complete scan with ComboFix tell me, we can use alter tools.

[davido12345]

Hello again.
What happened, is that combofix is stuck at the 48th stage and has not done anything for about an hour. Should I restart it? Also, at the begining, combofix deleted msvcr17.exe or something like that. Just thought it might be important.
Thanks so far,
David

[magna86]

Hello again.
What happened, is that combofix is stuck at the 48th stage and has not done anything for about an hour. Should I restart it? Thanks so far,
David

48 stage is good stage. 

Yes, feel free to re-try. But delete old ComboFix.exe and download fresh copy.

But this time use this initial switch:

Code: [Select]

"%userprofile%\Desktop\ComboFix.exe" /KillAll /NoMBR

[davido12345]

Umm, well the Combofix got stuck again at Stage 48, I dont think It will move any further.

[davido12345]

Ok, so some patience paid off  . It finished and the logs are here!

[magna86]

Good job. 

I'll need extra ComboFix report. Please post me here the following log.

C:\Qoobox\ComboFix-quarantined-files.txt

[davido12345]

Here it is:

[magna86]

Please download OTM and save it to your desktop.

• Double click on OTM.exe to launch a tool;
• Paste the following code under the "Paste Instructions for Items to be Moved" line;
  
  

Code: [Select]


:Files
c:\windows\SysWow64\*.tmp
c:\users\David\AppData\Roaming\newnext.me

:Reg
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NextLive"=-

:Commands
[emptytemp]



• Click on MoveIt! button;
  OTM may ask to reboot the machine. Please do so if asked.
  
  
• Copy/Paste the contents under the Results line here in your next reply.
  
  Note:It will also create a log in the C:\_OTM\MovedFiles
  - open the newest .log file present, and copy/paste the contents of that document back here in your next post.
  

==============================


Then please post me fresh DDS logs (DDS.txt and Addition.txt).

And tell me does we made any progress?

[davido12345]

Ok, I've attached the logs. I think we've made some progress, my pc is much faster already .

Thanks for all the work you've done so far helping me. I hope the DDS says that everything is clear.

[magna86]

We're left few things to fix ...

Multiple Antivirus Programs

You are running more than 1 Antivirus program!


AV: Trend Micro Titanium Internet Security *Disabled/Updated* {68F968AC-2AA0-091D-848C-803E83E35902}
AV: avast! Internet Security *Enabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
SP: Trend Micro Titanium Internet Security *Disabled/Updated* {D3988948-0C9A-0693-BE3C-BB4CF86413BF}
SP: avast! Internet Security *Enabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
FW: avast! Internet Security *Enabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}



Running - more than one - antivirus program is not recommended because:[list=1]

• They can conflict with each other.
• Report the other antivirus software as malicious.
• Antivirus programs use an enormous amount of computer's resources... actively scanning your computer.
• Can cause your computer to become unstable...run slowly and even, in rare cases, BSOD crash...etc

I strongly suggest you uninstall one of them.  Which one, is your decision.


edit:
Use this link to download AV uninstaller.
http://singularlabs.com/uninstallers/security-software/

=====================


Repet fix with OTM using this script:

Code: [Select]

:Files
C:\Users\David\AppData\Roaming\newnext.me

:Commands
[reboot]
=====================

Post me now please fresh DDS.txt log

[davido12345]

Ok, OTM done again, and now scanned with DDS, here are the logs:

[davido12345]

Oh and btw, isnt my trend titanium disabled? so It doesnt do anything?

[magna86]

Oh and btw, isnt my trend titanium disabled? so It doesnt do anything?

Perhaps so it seems from your side (user level) but on system level (kernel level) AV drivers are indeed loaded and very still active.

Old-known rule: Two different AV must not be running on one system. When you open AV GUI, there is perhaps all green and shiny (giving a sense of security), but in the back of their engines (so to speak) they are everything just not right as it should.

Also, there is the greater chance for malware to pass through next to two active AV fighting each other.

[davido12345]

Ok, Ill get rid of it, how does the DDS look? 

[magna86]

Ok, Ill get rid of it, how does the DDS look? 

When you remove one AV (your choice which one) post me fresh DDS logs.