Avast files deleted

[luiz_bomgaroto]

Hi there,

I have been running avast on all PCs here at home for almost a year now. For the first time in such period I am facing difficulties in one of my PCs.

Apparently somekind of virus was able to delete the main executables of avast software from the disk. I have realized this as the avast icon suddenly turned to a blank icon on the desktop. I tried to start the avast main screen from the avast taskbar icon but nothing happened. The problem got serious when I re-installed the avast anti-virus and the files were deleted again.

The eventual software which is causing the problem has managed to pass the boot scan that is done after the set-up of avast. I have tried scanning the PC with the avast cleaner, but I have got nothing.

Has some of you had a similar problem?

Avast resident protection seems to be working fine, but as many of the executables were deleted, the avast main screen does not start-up.

Please help.

[mauserme]

Welcome to the forum luiz.

There is a bagle rootkit making the rounds that could be the cause of your problem (possibly two variants, actually).

Please try scanning with F-Secure Blacklight

http://www.f-secure.com/blacklight/

and if that doesn't solve the problem try a Panda on-line scan

http://www.pandasoftware.com/products/ActiveScan.htm

Please let us know if this works and if you are able to isolate a sample of the malware.

[DavidR]

If you are able to isolate the files associated with this rootkit as mauserme said a sample can be sent to avast for analysis and hopefully inclusion in the VPS.