Help after the latest update!

[REDACTED]

I'm having two problems... My Avast just updated to the newest version this morning, and now says Passive mode is on and Rootkit protection is off.

If I try to click ENABLE on the Rootkit protection, nothing happens: There's no response at all, as if I hadn't clicked it.

and

I cannot turn passive mode off again.  Avast tells me "Antivir Desktop" is conflicting with it, and if I tell it to deactivate passive mode anyway, it goes through the motions, and asks for a restart... And once my computer has restarted, I'm back to square one:  Passive mode is still on.

Things I've tried:
I've run Avast on my system: It comes back with nothing.
I've run Malwarebytes AntiMalware with rootkit checking enabled: It comes back with nothing.
I used to use Avira antivirus, but I uninstalled it when I installed Avast originally, and I've gone through the registry and deleted all of its values.
I've tried repairing Avast, and the repair tool comes back with the "antivir desktop" thing too.


Posted here after being told "Viruses and Worms" was the wrong board.

[Pondus]

and the repair tool comes back with the "antivir desktop" thing too.

What is antivir desktop thing? .... you may post a screenshot


EDIT: If you mean Avast is reporting Avira antivir as installed, then use avira removal tool

See instructions here https://www.avira.com/en/download/product/avira-registry-cleaner

[Eddy]

Antivir is a av that needs to be removed before installing another av.

[REDACTED]

I downloaded and used the Avira registry cleaner.  Avast still says that "Antivir Desktop" is installed.

[REDACTED]

Antivirus is a av that needs to be removed before installing another av.

I uninstalled avira years ago and have been using avast ever since.  It wasn't until the update yesterday morning that this happened.

[REDACTED]

and the repair tool comes back with the "antivir desktop" thing too.

What is antivir desktop thing? .... you may post a screenshot

Screenshots of the rootkit and passive mode messages, and the message I get when trying to turn off passive mode.  If I tell it to turn off passive mode anyway, it brings up the "we're preparing to actively protect your computer." message box, then asks me to reboot.  When I do, passive mode is still on.  If I try to click on the Enable button for rootkit protection, nothing happens at all.  I can mash the button as much as I'd like, but Avast does nothing.

https://imgur.com/a/ljmK9

[Pondus]

we can run diagnostic and let a expert check the log?

If you want to, go here >>  https://forum.avast.com/index.php?topic=194892.0

scroll down to step 2 > Farbar Recovery Scan Tool
Run it as instructed and attach the two diagnostic logs in next reply here


How to attach, see below the box you write in here > Attachments and other options

[REDACTED]

Scanned and attached here

[Pondus]

Log expert is notified, it may take some hours before he is online

[Sass Drake]

• Open Notepad (click Start button -> type notepad.exe -> press Enter)
• Copy text from code block below and paste it into Notepad

Code: [Select]

GroupPolicyScripts-x32: Restriction <==== ATTENTION
ProxyServer: [S-1-5-21-2473432863-2304891344-3724721309-1000] => http=127.0.0.1:50404

• Go to File -> Save As
• Make sure that  UTF-8 is selected as Encoding (left side of Save button)
• Save it as fixlist.txt on Desktop
• Open again FRST and click on button Fix
• Wait until FRST finishes
• fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.

[REDACTED]

Code copied, encoded and saved... Run through FRST...  And log below

After the reboot from FRST, Avast had a notification that it wanted my computer to reboot, but after the second reboot, nothing has changed.  Still getting the same two messages about the rootkit and passive mode.

[Sass Drake]

 Previous fix was for possible adware modifications. Only Avira trace shown in logs is one folder which I really doubt is cause of issue.

• Open Notepad (click Start button -> type notepad.exe -> press Enter)
• Copy text from code block below and paste it into Notepad

Code: [Select]

C:\Users\Mr_Havoc\AppData\Local\Avira_Operations_Gmbh_&_C

• Go to File -> Save As
• Make sure that  UTF-8 is selected as Encoding (left side of Save button)
• Save it as fixlist.txt on Desktop
• Open again FRST and click on button Fix
• Wait until FRST finishes
• fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.

[REDACTED]

Copied, saved, encoded... And log.

[Sass Drake]

What is Avast status now?

[REDACTED]

Tried to enable Rootkit protection: Still nothing
Tried to turn off passive mode: Still says antivir desktop is installed.  Told it to turn off passive mode anyway, rebooted my computer...   Still in passive mode.
No changes