Can't download updates

[Nesivos]

Hi,
Have disabled spybot and restarted. Still no effect. My avast program is version 6.0.1000 and my last definitions update was 110401-2 on 24/2/2011.
Any suggestions?

Just wondering

If you have a paid version what is the license expiration date?

[Pondus]

Or he could just run OTS and post the logs for us to see what is installed   

[SafeSurf]

Or he could just run OTS and post the logs for us to see what is installed   

Did you "disable" or actually uninstall SB?  If you just disabled SB, it is still on your system and could still be causing the problems, so you need to uninstall it per the instructions in my post, then reboot.

However, since this is a work machine and you are not sure what is on it, you could run an OTS, which is a tool we use to see what you have on your machine to determine if there may be conflict, remnants, or errors causing your problems.  To run OTS, check the information on the first post of this thread under Virus/Worms for you to check your machine for malware: http://forum.avast.com/index.php?topic=53253.0 - scroll down to the part that instructs you how to download and run an OTS log.

Follow the directions for obtaining the OTS log.  Post your OTS log as an attachment (Additional Options > Attach > Post).  Thank you.

[buncer]

Hi again, morning now. About the only thing I can find that is security related is Microsoft security essentials. I also have things like ClickPotato, Conduit Engine, Microsoft silverlight, all of which i hav eno idea what they do.
Any suggestions?

[Cast]

If u want to run Avast uninstall Microsoft Security Essentials as it is another antivirus programs, and having more than 1 antivirus on your system will cause issues.

Im not sure what click potato and Conduit Engine is either.

[buncer]

Hi again,
I uninstalled spybot. I have run the scan and I have the results, but have no clue what you mean by Post your OTS log as an attachment (Additional Options > Attach > Post). All I got was a notepad readout which I have saved, but can't find the "attachment" button on this forum.
Any suggestions?

[doktornotor]

but can't find the "attachment" button on this forum.
Any suggestions?

Additional Options (on the left) -> Attach

[buncer]

Hi, Thanks, it was too obvious to see!
Here it is.

[doktornotor]

On a very quick look:

Code: [Select]

nissrv.exe -> c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -> [2010/11/11 11:26:42 | 000,206,360 | ---- | M] (Microsoft Corporation)
msmpeng.exe -> c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -> [2010/11/11 11:26:40 | 000,011,736 | ---- | M] (Microsoft Corporation)
(NisSrv) Microsoft Network Inspection [On_Demand | Running] -> c:\Program Files\Microsoft Security Client\Antimalware\NisSrv.exe -> [2010/11/11 11:26:42 | 000,206,360 | ---- | M] (Microsoft Corporation)
(MsMpSvc) Microsoft Antimalware Service [Auto | Running] -> c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe -> [2010/11/11 11:26:40 | 000,011,736 | ---- | M] (Microsoft Corporation)
(MpKsl30deee11) MpKsl30deee11 [Kernel | System | Running] ->  -> File not found
(MpKsl0248a39b) MpKsl0248a39b [Kernel | System | Running] -> c:\ProgramData\Microsoft\Microsoft Antimalware\Definition Updates\{F4B27EC1-EEA9-4090-9DCB-2F87AA091F6F}\MpKsl0248a39b.sys -> [2011/04/03 12:06:32 | 000,028,752 | ---- | M] (Microsoft Corporation)
(MpNWMon) Microsoft Malware Protection Network Driver [Kernel | On_Demand | Running] -> C:\Windows\System32\drivers\MpNWMon.sys -> [2010/10/24 20:25:38 | 000,043,392 | ---- | M] (Microsoft Corporation)

 - you still haven't (properly) uninstalled MSE? You cannot run avast! and MSE at the same time.

Uninstaller tool for MSE: http://go.microsoft.com/?linkid=9748340

On another note: Your HOSTS file is clearly messed up

Code: [Select]


Reset Hosts
127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com
127.0.0.1 008k.com
127.0.0.1 www.00hq.com
127.0.0.1 00hq.com
127.0.0.1 010402.com
127.0.0.1 www.032439.com
127.0.0.1 032439.com
127.0.0.1 www.0scan.com
127.0.0.1 0scan.com
127.0.0.1 1000gratisproben.com
127.0.0.1 www.1000gratisproben.com
127.0.0.1 1001namen.com
127.0.0.1 www.1001namen.com
127.0.0.1 100888290cs.com
127.0.0.1 www.100888290cs.com
127.0.0.1 www.100sexlinks.com
127.0.0.1 100sexlinks.com
127.0.0.1 10sek.com
127.0.0.1 www.10sek.com
127.0.0.1 www.1-2005-search.com
127.0.0.1 1-2005-search.com
[/quote]

[buncer]

Thanks for the advice. How would I fix up my HOSTS file and what difference would it make? Point taken on MSE, but how has it been able to run concurrently for years? Just interested!

[doktornotor]

Point taken on MSE, but how has it been able to run concurrently for years? Just interested!

Pure luck. Or, lack of at the same time since exactly this might have caused that none of those two AVs was able to protect your machine properly due to conflict. As for disinfection, I suggest you wait for essexboy here. MS has a Fix It for hosts file, but that won't remove the source of infection of course.

http://support.microsoft.com/kb/972034

[SafeSurf]

@ doktornotor,

I got here late...thanks for reviewing the OTS log.  Did you notify Essexboy yet?

@ buncer,

After you uninstall MSE and reboot your machine, re-run OTS and post a new log as an attachment so we can make sure MSE is completely gone.  Thank you.

[doktornotor]

@ doktornotor,
I got here late...thanks for reviewing the OTS log.  Did you notify Essexboy yet?

Nah, was busy with the Ramnit guy.

[buncer]

Hi guys,
Thanks again. Have run the hosts fix, removed MSE, and done the OTS with results attached. Do you think Avast will work now?
Thanks

[SafeSurf]

Essexboy has been notified and will review your logs as well to make sure nothing has been missed.  He is our Certified Malware Removal Expert.  Since he is usually here late UK time, you may need to check back on the forum later to check for a reply from him in this thread as he may give you additional instructions or have you run a tool he may provide to you in this thread.