Author Topic: SandBox malfunction possibly virus  (Read 30239 times)

0 Members and 1 Guest are viewing this topic.

CAS159

  • Guest
SandBox malfunction possibly virus
« on: February 18, 2014, 11:29:57 PM »
I have a SandBox malfunction which could possibly be a virus, I put my VuePrint program in the SandBox but I couldn't use the screen saver program.  So took it out the SandBox, but each time I try to run VuePrint the screen reacts, goes black, as though Vueprint is still in the SandBox.  I looked in the settings for SandBox and see nothing is there without succes and then entered VuePrint as an exclusion in SandBox.  Still no change.  I did a boot scan last night and and nothing was found.  I see on the forum there appears to be a Sandbox virus.
I need to know a solution which is probably a virus using Sanbox.  My latest problem this week is Windows Explorer.exe keeps crashing.  Any input?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31081
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: SandBox malfunction possibly virus
« Reply #1 on: February 18, 2014, 11:35:56 PM »
What os/sp?
What exact version of avast?
What is the exact error message when explorer crashes?

CAS159

  • Guest
Re: SandBox malfunction possibly virus
« Reply #2 on: February 19, 2014, 06:33:26 PM »
XP sp3
I did not save the windows Explorer crash message.  The system was locked up anyway.  I couldn't do anything except bring up windows task manager.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31081
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: SandBox malfunction possibly virus
« Reply #3 on: February 19, 2014, 06:57:32 PM »
Update avast to the latest version first.
Then check if the problem is solved:

1. Download Avastclear, Rejzors uninstall tool and the appropriate Avast program edition.
Here are the installer links. Note: You need to be ONLINE during this install.
http://files.avast.com/iavs9x/avast_free_antivirus_setup_online.exe
http://files.avast.com/iavs9x/avast_pro_antivirus_setup_online.exe
http://files.avast.com/iavs9x/avast_internet_security_setup_online.exe
http://files.avast.com/iavs9x/avast_premier_antivirus_setup_online.exe

Avastclear : http://files.avast.com/iavs9x/avastclear.exe
Rejzors Uninstall tool: http://rejzor.wordpress.com/avast-cleanup-tool/

2. Uninstall Avast by control panel  [If you don't have Avast in control Panel go to #4]
3. Uninstall in Safe Mode using Avastclear.
http://www.avast.com/uninstall-utility
4. Run Rejzors Uninstall Utility in Normal Mode (removes traces avastclear doesn't) - reboot.
http://rejzor.wordpress.com/avast-cleanup-tool/
5. Be Sure Too Check Once Uninstall is Complete:Device Manager>View>Show Hidden Devices
If there is anything related to Avast with a yellow triangle then uninstall it (highlight, right click) and reboot.
6. Install the version you downloaded.
7. Reboot.

offline installers:
http://files.avast.com/iavs9x/avast_free_antivirus_setup.exe
http://files.avast.com/iavs9x/avast_pro_antivirus_setup.exe
http://files.avast.com/iavs9x/avast_internet_security_setup.exe
http://files.avast.com/iavs9x/avast_premier_antivirus_setup.exe

CAS159

  • Guest
Re: SandBox malfunction possibly virus
« Reply #4 on: February 21, 2014, 05:44:09 PM »
While downloading I noticed the Avast Cleanup tool is for -
" Windows Vista/Win7/Win8 32bit and 64bit"
on document http://rejzor.wordpress.com/avast-cleanup-tool/
I have XPsp3 on my system.  Please advise.
Isn't there any other way to check the SandBox for corruption and
re-intall it if needed.  Re-installing the whole Avast program seems like overkill.
The last time I did something like this I did a repair install of XP and
then a complete re-install unnecessarily and with no effect.  Then again
what do I know.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31081
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: SandBox malfunction possibly virus
« Reply #5 on: February 21, 2014, 06:06:41 PM »
Since you are using a real old version of avast and many things are fixed in the latest one...
It is not a overkill at all.

CAS159

  • Guest
Re: SandBox malfunction possibly virus
« Reply #6 on: February 21, 2014, 06:20:40 PM »
About "Update avast to the latest version first.
Then check if the problem is solved:"
I could use a direct link to update avast.  Do you have it.
I downloaded
AvastCleanupTool.zip,
avast_pro_antivirus_setup_online.exe,
avast_premier_antivirus_setup_online.exe,
avast_internet_security_setup_online.exe,
avast_free_antivirus_setup_online.exe,
avastclear.exe.
« Last Edit: February 21, 2014, 06:30:42 PM by CAS159 »

CAS159

  • Guest
Re: SandBox malfunction possibly virus
« Reply #7 on: February 21, 2014, 06:58:50 PM »
My Avast Program Update has been frozen at my screen capture in my last post for hours.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31081
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: SandBox malfunction possibly virus
« Reply #8 on: February 21, 2014, 07:10:50 PM »
I told you to do a clean install, not a update!

I already gave you the download links. Why asking for them?
Just use the online installer for the version you want.

CAS159

  • Guest
Re: SandBox malfunction possibly virus
« Reply #9 on: February 25, 2014, 08:45:57 PM »
I could not update to version 9.  Dial-up kept loosing connection.  Re-stalled Avast to version 8.  I eliminated Sandbox problem.  Explorer.exe is still freezing screen.  Message reads window must shut down and send error message. I can't do a screen capture because of the freeze.  I can only run Task Manager when it happens.  Windows error message and DocWatson error messages ask for permission to run and I End Processes in Task Manager.  Then widows recovers or I have to restart or shut down.  I just ran CCleaner 5 minutes ago and Explorer is still running.  Similar problems are the right click windows explorer bug. I don't understand the Avast message "Download g0512802 AVASTS Server" under my "Udate Host Unreachable.jpg and Udate Host Unreachable 2.jpg".  I Googled both links under the message and could not find a match. 
« Last Edit: February 25, 2014, 10:20:57 PM by CAS159 »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31081
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: SandBox malfunction possibly virus
« Reply #10 on: February 25, 2014, 10:20:37 PM »
Again, I did not told you to do a update but a fresh install.
And not version 9, but version 2014.9.0.2013.

Released 3 days ago:
http://forum.avast.com/index.php?topic=145192.0

CAS159

  • Guest
Re: SandBox malfunction possibly virus
« Reply #11 on: March 02, 2014, 06:47:06 PM »
I installed the free version after I downloaded the 86.341KB file avast_free_antivirus_setup.exe last week.
The Explorer.exe bug is still there and last night it practically erased an entire directory of jpg files, I thought because I could not see them under all files.
My system Vueprint screen saver program froze up and Windows sent an error message after I said ok then Windows logged me off and it was stuck there.  I pushed the restart button and found saved files were gone.  However, when i go to the FireFox download page and try to download the file again after bring up the web location Explorer ask me if I want to overwrite the file and I don't see it after I switch to all files in the directory.  I counted the files in the properties and it matches what I see.  Before all this happened I was waiting for the Full System scan to finish because it had found a bug.  I found that to be a trojan, JS:ScriptPE-inf[Trj].
I did a scan of the problem directory of missing files and one jpg had an error message,
"Error: Data error (cyclic redundancy check) (23)"
Usually on all my Full System Scans and Boot Scans I omit my Pictures directory and subfolder which is mostly image files, over 52,000 files, except for the text directory.  I just started a deep directory scan of those files now.  I try to first repair, then if repair fails move to chest, and delete if all else fails.  I can recover the files later, but I think I'll do a boot scan of the entire Pictures directory after the Deep Scan completes.
However, the Explorer bug is probably still there.

« Last Edit: March 02, 2014, 08:23:27 PM by CAS159 »

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31081
  • Watching (over?) you
    • Malware removal, Biljart and other things.

CAS159

  • Guest
Re: SandBox malfunction possibly virus
« Reply #13 on: March 03, 2014, 07:56:50 AM »
I updated and ran Malwarebytes Anti-Malware (Trial) 1.75.0.1300 and it found 15 problems which I deleted then rebooted.  I noticed when Malwarebytes got close to the Pictures sub directory it stopped for at least 10 or 15 minutes two or three times with a JPG file listed.  I could not see these JPG files I lost under explorer, but "FireFox. Tools, Downloads, Open Containing Folder" brings up the files.
A previous scan of the problem directory of missing files and one jpg had an error message,
"Error: Data error (cyclic redundancy check) (23)"
I don't know to proceed with OTL or check for CRC errors.  I think OTL creates a restore point which might not recover those files to Windows and not able to bring up under Firefox.
Please advise OTL or Checkdisk?

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37478
  • Not a avast user
Re: SandBox malfunction possibly virus
« Reply #14 on: March 03, 2014, 08:21:21 AM »
yes OTL will create a restore point but it will not change anything....it is just a diagnostic log.....
the change/fix is created later (if needed) by the log expert when he has looked at the log

also attach Malwarebytes log so he can see what MBAM found and removed....