Author Topic: "Protected" computer totally eviscerated of all documents and programs  (Read 3999 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
A few days ago, I was having trouble  opening any programs or documents on the computer I mostly use as a server for my printers, and started looking at the programs folders, and nothing is there....no C drive or any other drive, every document and file vacant, Apparently eaten up by a ?Trojan?...don't really know for sure, no file to look at...all this while protected by Avast.  I would like to attach a log of malwarebytes findings from another computer, but I suspect one of these is responsible for what has destroyed everything on my desktop pc.  I found my restore disks made when the computer was new, and at least got it booted up and have a C drive now.  How can this happen?? and as I asked before, how can I be getting all these Trojans when Avast is "protecting" me all the time???? Can I attach a file which is the list of findings on my laptop? also protected by Avast. Am I safe connecting the external hard drive I use to backup one of my other computers to restore this computer?

Offline Staticguy

  • Super Poster
  • ***
  • Posts: 1427
Re: "Protected" computer totally eviscerated of all documents and programs
« Reply #1 on: November 02, 2015, 05:31:09 AM »
Follow these instructions here https://forum.avast.com/index.php?topic=53253.0 and attach the logs malwarebytes antimalware scan log, Farbar Recovery Scan Tool (2 logs will be produced), and scan logs for aswMBR.exe.
DELL Inspiron 15" 7000 Gaming, Windows 10 Home Version 21H1 (OS Build 19043.1237), Trend Micro Maximum Security 2021 (17.0.1333), Avast SecureLine VPN (5.12.5655), Windows Firewall, Unchecky 1.2

REDACTED

  • Guest
Re: "Protected" computer totally eviscerated of all documents and programs
« Reply #2 on: November 03, 2015, 12:10:03 AM »
Ok, everything just got erased...start over.So I have done all the scans on the above mentioned Desktop computer, and emailed them to save on Laptop2. Want to be sure I don't infect my USB external backup drive, when I transfer files from it to the Desktop.  I did do the MCShield and scanned the flash drives I've used on that computer most recently.  I am sending one file from the Laptop MBM Quarantine log, just so you can see what is getting through the Avast firewall, which, of course is on all the computers.  If this is too confusing, let me know?   There will be more than 4 files to get all the scans out there...

REDACTED

  • Guest
Re: "Protected" computer totally eviscerated of all documents and programs
« Reply #3 on: November 03, 2015, 12:20:42 AM »
Will attempt to attach the rest of the scans you requested from the affected computer. If something is missing, please let me know...thank you!

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: "Protected" computer totally eviscerated of all documents and programs
« Reply #4 on: November 03, 2015, 03:52:18 PM »
The logs I am seeing show no indication of an infection..  Although it has McAfee on it and not Avast so do I have the wrong logs ?

REDACTED

  • Guest
Re: "Protected" computer totally eviscerated of all documents and programs
« Reply #5 on: November 03, 2015, 05:50:56 PM »
No, I restored it to factory condition, since it had nothing stored in memory....I lost the Avast account number for that computer, but will try to download it today, I do have the password.  If it shows no infections, I will also copy a backup hard drive to this computer and remove the trial programs (McAfee and Norton)....it has to wait until later today.  Thank you.....I still don't understand how this can happen when the Avast Program tells me I am "protected".  Can you explain? This is really puzzling.  I need to keep this computer on, since it is my printer server...I see no evidence of hacking through my router as before, I guess I opened an infected email?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31078
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: "Protected" computer totally eviscerated of all documents and programs
« Reply #6 on: November 03, 2015, 05:58:55 PM »
Make sure you remove them completely.
Using add/remove in control panel is not enough.
Uninstall tools / information : http://www.ache.nl/

After removing is a good idea to run CCleaner and/or Glary utilities.
Also you may want to check the drive(s)/registry manually for leftovers and (if found) remove them.

As far as the disappearing drive(s), there are several options that come to my mind.
Mostly it is one of the below that is causing it.
- Messed up MBR (mainly on the C drive)
- BIOS problem (cmos battery empty?)
- Bad connection (data cable) from motherboard <> drive
- OS corruption
- Dying (or even dead) hardware

Offline Pondus

  • Probably Bot
  • ****
  • Posts: 37594
  • Not a avast user
Re: "Protected" computer totally eviscerated of all documents and programs
« Reply #7 on: November 03, 2015, 06:06:12 PM »
Quote
Want to be sure I don't infect my USB external backup drive, when I transfer files from it to the Desktop.  I did do the MCShield and scanned the flash drives I've used on that computer most recently.
Install MCShield on all computer (if you dont have) then they are all protected   ;)


Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: "Protected" computer totally eviscerated of all documents and programs
« Reply #8 on: November 03, 2015, 06:54:15 PM »
That behaviour is wrong for malware as the authors get nothing from it, now ransomware would be better.. 
So I do not think it was a Trojan or the like more likely a system error of some sort
When you look at the drive in Control Panel\All Control Panel Items\Administrative Tools\computer management\storage\disc management what does it report ?

Is the drive alright ?

REDACTED

  • Guest
Re: "Protected" computer totally eviscerated of all documents and programs
« Reply #9 on: November 04, 2015, 06:05:58 AM »
It reports Healthy Recovery partition, Acer C: Healthy (Boot, Page File, Crash Dump,Primary partition, )
CD Rom Healthy    everything is dated 2009, so guess I'll spend some time updating.
Looks good to me!  So glad I was able to locate my System Restore Disks.
Tomorrow, I will remove the programs I don't want/need, reinstall Avast and MalWare Bytes, and MC Shield. then all of my documents and programs I use.
As of now, it looks like a brand new computer. Lost my Malwarebytes password and account #, how do you suppose I can get back in...I have the Avast password. No documents in my Documents folder, I really have to start all over...I don't think this was a drive or system failure....usually you would get a warning or something, first. Who knows?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31078
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: "Protected" computer totally eviscerated of all documents and programs
« Reply #11 on: November 04, 2015, 04:54:34 PM »
Advise :

if you got the system running and configured as you wish again, create a image of the drive.
Not that I hope so, but putting back a image is a lot faster than installing/configuring from scratch. ;)

REDACTED

  • Guest
Re: "Protected" computer totally eviscerated of all documents and programs
« Reply #12 on: November 05, 2015, 02:16:17 AM »
I have just decided that instead of spending all the time and effort to re-load the hard drive and uninstall all the trials,etc., I am going to order a new 1T HDD and another 4GB of ram, and clone one of my hard drives to the new one before I install it.  I think that will be so much easier than messing with this drive which is not big enough for my multi-tasking anyway.That way, I can get a hard drive with 7200 RPMs, will be much more efficient.....if there is anything remarkable going on when I exchange the drives, I will post to this thread?  By the way, I did try Windows 10 for a little while, did not like it, uninstalled it.