Missing avast exe file

[oldman]

Can you attach this HDD in another computer and scan it from there?

i did that, scaned (and cleaned some viruses and trojans) in another computer vith avast, an some online scaners from security-ops.eu.tt. system apears to be clean,

Would it be possible to scan with ewido in the same manner, or does ewido just do the entire computer? I'm not familar with the program, so I don't know if you can do a selective scan.

[Lisandro]

Would it be possible to scan with ewido in the same manner, or does ewido just do the entire computer? I'm not familar with the program, so I don't know if you can do a selective scan.

Ewido, now AVGantispyware is fully customizable...

[oldman]

Perhaps he should try that. The files on the "infected?" hd should be dormant and maybe ewido(avg) could find something.

[leni]

i tried online panda, bitdefender, MS oncare, ewido, kaspersky web scaner, and some anti spyware tools...
HDD seems to be clean.

[Lisandro]

HDD seems to be clean.

So, does anybody can tell why the avast exe files are disappearing? 

[mauserme]

It does seem to be happening alot all of a sudden.

This is a shot in the dark, nothing more than a guess, but it feels like a rootkit to me - some form of bagle maybe.  Something like this with stealth capability

http://www.pandasoftware.com/com/virus_info/encyclopedia/overview.aspx?lst=det&idvirus=119057&sitepanda=particulares

I've been trying to download AVG Antirootkit Beta since yesterday to see if its worth recommending.  I registered for the beta program but no downloads are available.  Well, maybe when everybody's back to work I'll get the download, or maybe someone on the forum has some experience with it.

[oldman]

Here's something similar from another forum. Different av, but same symptoms.

http://forums.mcafeehelp.com/viewtopic.php?t=100803&highlight=missing+exe

[XerraX]

I got the same problem. I cant install any Antivirus,Antispyware-Software on my Vista harddisk, it always deletes the exe files. My XP harddisk seems to be clean, but when i scan the vista harddisk from xp, it doesn't find anything.

NEED HELP...

[leni]

ok new scan new virus
panda online


Hacktool:rootkit/mhook                                                          Not disinfected               hkey_local_machine\system\currentcontrolset\services\m_hook     
                                                                                                                                                                                               
Virus:w32/bagle.hx.worm                                                       desinfected

[XerraX]

i restarted in Vista and used F-Secure BlackLight. it found W32/Bagle too!

i am happy i got rid of it now.

[XMAS]

So, it turned out that this is caused by a rootkit (bagle variant) 
I wonder when Alwil will add rootkit detection to avast! 

[mauserme]

I wonder when Alwil will add rootkit detection to avast! 

Avast 5???  Hopefully ...

I'm sure many of would be happy to be beta testers on this.


@ leni

Can you check your registry for this key

hkey_local_machine\system\currentcontrolset\services\m_hook     

Maybe this can be fixed manually.

[leni]

ok thanks for f-secure blacklight beta i am now finaly clean.

[Vossie64]

I used mwav toolkit from www.mwti.net/products/mwav/mwav and it idenify a bagle virus on my computer, maybe the reason for my disapearing exe file