Anyone Can Help This, really trible

Avast Free Antivirus / Premium Security
1

I used avast home edition 4.6 before. all internet activity like surf any website, sending/receiving mail through outlook express all is ok and fine.

after i let it automatic update to 4.7, all the internet activity like surf website, and outlook all cant be used (website cant loading, outlook express cant send or receive mails). If i want able to surf website or outlook express. I need to TERMINATE the service of Network, Web Shield, Internet Mail, Outlook/Exchanged. Then my finally problem is was attack by alot trojan, virus, spyware when visiting some website ( so take my time to used other software to kill this all dangerous codec).

Now, if want surf web or outlook express, then need to TERMINATE the related service (last time i remember i dont have this kind problem when used 4.6)

My system is windows XP2, i have used Zonealarm free version, and Bitdefender free version. When first happen, i think it was the zonealarm and bitdefender disturb, then I uninstall all this 2 software from my PC and restart, and go internet again, and try…the problem is same.

then i have try to remove the Avast from my PC, and restart, and Install the new installer Avast 4.7 which download from avast website (before it was update automatic from 4.6). then i try go internet again, then the result is SAD. the problem is same, if i want to surf any website, or sending/receiving mails through outlook express, i need to TERMINATE the related SHIELD.

It is not good, that i terminate the services when surf the web, cause i can be attack by virus and so on dangerous codec. Yesterday is 2nd time i was attack again.ANYONE HAVE IDEA??

Arhh, forgot tell, my window live messenger, yahoo, icq, skype, mirc all is OK.

my email address provider is @gmail.com, and @time.net.my

CANT SURF any website mean, even you go www.yahoo.com, google.com, any website also cannot. it will say “The Page Cannot be displayed”, as normal error as we see. But when you terminate the shield service, all is ok.

Please help…help me…i so sad. :<

2

Well… sometimes is easy to format/reinstall than trying to get clean…

avast should work perfectly, something in your computer is very bad. There is no meaning on disabling antivirus to do any other thing in Internet…

In fact, ZA and BD shouldn’t be a problem to avast. If even uninstalling it you have trouble, well, which antivirus did you use between avast 4.6 and 4.7… it was a lot of time between the two versions ::slight_smile:

Take a look here: http://forum.avast.com/index.php?topic=10428.0 to see how to set up secure email with avast!.

Which is the name of the service (or the process) you’re killing?
Do you still have ZA installed?

3

:<… I tired to format and format again, not good solution. I know avast very good software, that why i used it. and if i want to check out, what have bad thing in my computer how to do it (i used highjack post in below, please help me anything wrong in my pc).Now my computer is used 4.7 version, home edition one. Now my PC only have avast 4.7, Lavasoft Adware SE, i non used and never on window firewall also.
Ok, as below service i will kill
1.) Kill Network and Web Shield - if not kill, i cant go anywhere in website, even yahoo, google. If i terminate this 2 process, I can immediately go anywhere.

2.) Kill Internet Mail and Outlook/Echange - If not kill, my outlook express cant receiving/sending emails. my email provider is @gmail.com, @time.net.my. If I terminate this 2 process, I can immediately receiving/sending all mails.

So what the problem now? I have install ZA personal edition before, and i uninstall already, and Bitdender also uninstall already.

Logfile of HijackThis v1.99.1
Scan saved at 4:12:03 PM, on 1/17/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRAM FILES\EASY FILE & FOLDER PROTECTOR\EFPAP.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\Program Files\McAfee\McAfee VirusScan\Avsynmgr.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\McAfee\McAfee VirusScan\VsStat.exe
C:\Program Files\McAfee\McAfee VirusScan\Avconsol.exe
C:\Program Files\Spyware Doctor\swdoctor.exe
C:\Program Files\Skype\Phone\Skype.exe
C:\WINDOWS\system32\NOTEPAD2.EXE
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\GetRight\GETRIGHT.EXE
C:\Program Files\GetRight\GETRIGHT.EXE
C:\Program Files\MSN Messenger\msnmsgr.exe
E:\Ric Software\Protector & Security Application\Anti Special Unique Tools\Hick Jack This 1.99.1\HijackThis.exe

O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O4 - HKLM..\Run: [IMJPMIG8.1] “C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE” /Spoil /RemAdvDef /Migration32
O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM..\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM..\Run: [CJIMETIPSYNC] C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\CHANGJIE\CINTLCFG.EXE /CJIMETIPSync
O4 - HKLM..\Run: [PHIMETIPSYNC] C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\PHONETIC\TINTLCFG.EXE /PHIMETIPSync
O4 - HKLM..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
O17 - HKLM\System\CCS\Services\Tcpip..{426311FA-E44F-4087-9FE4-3176CF8F873F}: NameServer = 202.188.0.133 202.188.1.5
O17 - HKLM\System\CS1\Services\Tcpip..{426311FA-E44F-4087-9FE4-3176CF8F873F}: NameServer = 202.188.0.133 202.188.1.5
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)

Thanks for your help.

4

Your log shows that you still have McAfee antivirus installed on your system and loading at system start.

It is very bad for your system to be trying to run McAfee and avast together. You need to decide which to keep and which to remove.

See this thread:

http://forum.avast.com/index.php?topic=26042.msg212871#msg212871

5

Ok, i know this. I will to remove mcafee, and used avast only, and will used the MCafee cleaner to clean all mcafee component in my pc. well…let see how…wait

6

yap, i remove all the mcafee ady. but i cant remove it from Add/Remove program. So i remove it from Regedit, and all related file in my system.
Why I cant used Add/Remove to remove it. Because, I have another new problem appear in my PC, the error like this when i go Add/Remove program:

when i go Add/Remove program, inside there, i cant see any Add/Remove Program in each software i install.

and if i try go to Add/Remvoe Window Component, the error message like this
“Setup weas unable to open information file setupqry.inf
Contact your system administrator. The specific error code is 0X2 at line 2088999411.”

So what happen exactly.

Now m,ean now my pC got 2 problem. One is Avast Shield problem, and another is this window add/remove component problem. how now.

7

Did you try to follow this advice from Tech in the thread I referred you to?

To remove McAfee you need to do via Add/Remove and then the manual removal of the registry keys left behind with their on-line instructions. Mcafee has a uninstall tool that might help. http://download.mcafee.com/products/licensed/cust_support_patches/VSCleanupTool.exe
8

Ya i have follow that instrustion, and used that tool also. Now i can confirm in my pc system all MCafee related file is gone. Now before go through Avast problem, can i ask my new question i found it in my Add/Remove Program and Add/Remove Window Program?

1.) when i go Add/Remove program, inside there, i cant see any Add/Remove Program in each software i install.

2.) and if i try go to Add/Remvoe Window Component, the error message like this
“Setup weas unable to open information file setupqry.inf
Contact your system administrator. The specific error code is 0X2 at line 2088999411.”

I face this problem before many times, my finally decision is to format. but i really tired to format. because this problem is come out many times already, even i format so many times. Thanks

Logfile of HijackThis v1.99.1
Scan saved at 4:34:42 PM, on 1/19/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\System32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
C:\PROGRAM FILES\EASY FILE & FOLDER PROTECTOR\EFPAP.exe
C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
C:\Program Files\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\inetsrv\inetinfo.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\tcpsvcs.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\GetRight\GETRIGHT.EXE
C:\Program Files\GetRight\GETRIGHT.EXE
C:\WINDOWS\system32\NOTEPAD2.EXE
C:\Program Files\Skype\Phone\Skype.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\Program Files\ICQLite\ICQLite.exe
C:\Program Files\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\notepad.exe
E:\Ric Software\Protector & Security Application\Anti Special Unique Tools\Hick Jack This 1.99.1\HijackThis.exe

O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: (no name) - {ACB1E670-3217-45C4-A021-6B829A8A27CB} - (no file)
O4 - HKLM..\Run: [IMJPMIG8.1] “C:\WINDOWS\IME\imjp8_1\IMJPMIG.EXE” /Spoil /RemAdvDef /Migration32
O4 - HKLM..\Run: [MSPY2002] C:\WINDOWS\system32\IME\PINTLGNT\ImScInst.exe /SYNC
O4 - HKLM..\Run: [IMSCMig] C:\PROGRA~1\COMMON~1\MICROS~1\IME\IMSC40A\IMSCMIG.EXE /Preload
O4 - HKLM..\Run: [CJIMETIPSYNC] C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\CHANGJIE\CINTLCFG.EXE /CJIMETIPSync
O4 - HKLM..\Run: [PHIMETIPSYNC] C:\Program Files\Common Files\Microsoft Shared\IME\IMTC65\PHONETIC\TINTLCFG.EXE /PHIMETIPSync
O4 - HKLM..\Run: [avast!] C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKCU..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU..\RunOnce: [ICQ Lite] C:\Program Files\ICQLite\ICQLite.exe -trayboot
O8 - Extra context menu item: Convert link target to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert link target to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert selected links to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convert selected links to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: Convert selection to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert selection to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convert to Adobe PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convert to existing PDF - res://C:\Program Files\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Download with GetRight - C:\Program Files\GetRight\GRdownload.htm
O8 - Extra context menu item: Open with GetRight Browser - C:\Program Files\GetRight\GRbrowse.htm
O17 - HKLM\System\CCS\Services\Tcpip..{426311FA-E44F-4087-9FE4-3176CF8F873F}: NameServer = 202.188.0.133 202.188.1.5
O17 - HKLM\System\CS1\Services\Tcpip..{426311FA-E44F-4087-9FE4-3176CF8F873F}: NameServer = 202.188.0.133 202.188.1.5
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Easy File & Folder Protector (ACDService) - Unknown owner - C:\PROGRAM FILES\EASY FILE & FOLDER PROTECTOR\EFPAP.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Program Files\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Program Files\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)