Author Topic: Avast Enhanced Protection Mode?  (Read 16342 times)

0 Members and 1 Guest are viewing this topic.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 82691
  • No support PMs thanks
Re: Avast Enhanced Protection Mode?
« Reply #30 on: July 28, 2011, 06:12:39 PM »
I have the same issue, but on a laptop Windows 7 yet i cannot connect to the internet at all, if i do my wifi router/cable modem beocmes disabled.

How are you connecting right now ?
Use that system to download tools and get help.

But don't reply or do that in this topic - Please create your own new topic, here http://forum.avast.com/index.php?board=4.0 in the viruses and worms forum and click the New topic button at the top of the page and we will try and help you there.
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 1909 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.1.2397 (build 20.1.5069.558) UI-1.0.460/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro

Offline gyorodika

  • Newbie
  • *
  • Posts: 3
Re: Avast Enhanced Protection Mode?
« Reply #31 on: July 29, 2011, 09:29:12 AM »
I fuond a similar problame. I I did everythink which you write and I'm did the OTS scan. But I don't know what is the next station. Please help me.
The facebook is in block, but nothing else.
« Last Edit: July 29, 2011, 09:55:21 AM by gyorodika »

Offline CraigB

  • Avast Überevangelist
  • Serious Graphoman
  • *****
  • Posts: 10966
  • No support PM's thanks
Re: Avast Enhanced Protection Mode?
« Reply #32 on: July 29, 2011, 10:11:37 AM »
I fuond a similar problame. I I did everythink which you write and I'm did the OTS scan. But I don't know what is the next station. Please help me.
The facebook is in block, but nothing else.

As has been mentioned to so many others in this thread ( create your own topic )

Offline deuceloosely

  • Newbie
  • *
  • Posts: 2
Re: Avast Enhanced Protection Mode?
« Reply #33 on: August 22, 2011, 06:39:47 AM »
RogueKiller V5.3.3 [08/18/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html

Operating System: Windows XP (5.1.2600 Service Pack 3) 32 bits version
Started in : Normal mode
User: Deuce [Admin rights]
Mode: Remove -- Date : 08/22/2011 00:00:46

Bad processes: 2
[SUSP PATH] 1030855424:4284780226.exe -- c:\windows\1030855424:4284780226.exe -> KILLED [TermProc]
[RESIDUE] 1030855424:4284780226.exe -- c:\windows\1030855424:4284780226.exe -> KILLED [TermProc]

Registry Entries: 0

Particular Files / Folders:

HOSTS File:
127.0.0.1       localhost
127.0.0.1 facebook.com
127.0.0.1 www.facebook.com
127.0.0.1 af-za.facebook.com
127.0.0.1 az-az.facebook.com
127.0.0.1 id-id.facebook.com
127.0.0.1 ms-my.facebook.com
127.0.0.1 bs-ba.facebook.com
127.0.0.1 ca-es.facebook.com
127.0.0.1 cs-cz.facebook.com
127.0.0.1 cy-gb.facebook.com
127.0.0.1 da-dk.facebook.com
127.0.0.1 de-de.facebook.com
127.0.0.1 et-ee.facebook.com
127.0.0.1 en-gb.facebook.com
127.0.0.1 es-la.facebook.com
127.0.0.1 eo-eo.facebook.com
127.0.0.1 eu-es.facebook.com
127.0.0.1 tl-ph.facebook.com
127.0.0.1 fo-fo.facebook.com
[...]


Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt



The OTS file:
http://www.mediafire.com/?exfgjcx6bzmb9tj

I had to copy and paste it in a new document because I was getting some "common language" error when trying to save through Notepad.

Offline DavidR

  • Avast Überevangelist
  • Certainly Bot
  • *****
  • Posts: 82691
  • No support PMs thanks
Re: Avast Enhanced Protection Mode?
« Reply #34 on: August 22, 2011, 12:12:00 PM »
In the meantime, you could remove these entries from your HOSTS file manually.

HOSTS file redirect a common malware tactic to block AV sites making it difficult to remove malware; the same is true if they want to block facebook in your case - 127.0.0.1 check your HOSTS file using notepad or a text editor of your choice, C:\WINDOWS\system32\drivers\etc\hosts or do a search for HOSTS to find it if not there.
 
Once open you are looking for entries with those facebook.com entries on the line, you can remove those lines and save the file. http://en.wikipedia.org/wiki/Hosts_file

Note, when saving the file, notepad may have a whinge as there is no file type for the HOSTS file; ensure that the file type is set to all files and it should comply with the fact it hasn't got a file type/extension. You may, depending on your OS have the UAC have a whinge, so you may need to run that text editor (notepad, etc.) as an administrator.
WinXP ProSP3/ Core2Duo E8300/ 4GB Ram/ avast! free 18.5.2342/ Firefox ESR, uBlock Origin, uMatrix/ MailWasher Pro7.11.0/ DropMyRights/ WinPatrol+/ Drive Image 7.1/ SnagIt 10.0/ avast! mobile security
Windows 10 Home 1909 64bit/ Acer Aspire F15/ Intel Core i5 7200U 2.5GHz, 8GB DDR4 memory, 256GB SSD, 1TB HDD/ avast! free 20.1.2397 (build 20.1.5069.558) UI-1.0.460/ WinPatrol+/ Firefox, uBlock Origin, uMatrix/ MailWasher Pro

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40632
  • Dragons by Sasha
    • Malware fixes
Re: Avast Enhanced Protection Mode?
« Reply #35 on: August 22, 2011, 02:49:44 PM »
The mediafire lonk is not working

Could you re-upload again please

Offline apocalypso

  • Newbie
  • *
  • Posts: 1
Re: Avast Enhanced Protection Mode?
« Reply #36 on: August 27, 2011, 12:36:49 PM »
Code: [Select]
RogueKiller V5.3.3 [08/18/2011] by Tigzy
contact at http://www.sur-la-toile.com
mail: tigzyRK<at>gmail<dot>com
Feedback: http://www.sur-la-toile.com/discussion-193725-1-BRogueKillerD-Remontees.html

Operating System: Windows 7 (6.1.7600 ) 32 bits version
Started in : Normal mode
User: Jakov [Admin rights]
Mode: Remove -- Date : 08/27/2011 12:30:42

Bad processes: 0

Registry Entries: 1
[HJ NAME] HKLM\[...]\Run : tray_ico1 (C:\Windows\update.tray-8-0\svchost.exe) -> DELETED

Particular Files / Folders:

HOSTS File:
127.0.0.1       localhost
127.0.0.1 facebook.com
127.0.0.1 www.facebook.com
127.0.0.1 af-za.facebook.com
127.0.0.1 az-az.facebook.com
127.0.0.1 id-id.facebook.com
127.0.0.1 ms-my.facebook.com
127.0.0.1 bs-ba.facebook.com
127.0.0.1 ca-es.facebook.com
127.0.0.1 cs-cz.facebook.com
127.0.0.1 cy-gb.facebook.com
127.0.0.1 da-dk.facebook.com
127.0.0.1 de-de.facebook.com
127.0.0.1 et-ee.facebook.com
127.0.0.1 en-gb.facebook.com
127.0.0.1 es-la.facebook.com
127.0.0.1 eo-eo.facebook.com
127.0.0.1 eu-es.facebook.com
127.0.0.1 tl-ph.facebook.com
127.0.0.1 fo-fo.facebook.com
[...]


Finished : << RKreport[2].txt >>
RKreport[1].txt ; RKreport[2].txt




Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40632
  • Dragons by Sasha
    • Malware fixes
Re: Avast Enhanced Protection Mode?
« Reply #37 on: August 27, 2011, 02:03:17 PM »
apocalypso could you start your own thread please and post an OTL log along with the symptoms you are experiencing