Avast! and MalwareBytes not helping - have a really bad virus problem!

Viruses and worms
1

This is been a mess on my PC since Friday!

I work in the legal services field and on the 17th, I received an email telling me that I was a defendant in a court case in New York and had to appear, and to see attachment. I was so curious that I didn’t notice that the attachment was an .exe file and it turned out to be a virus! I started getting locked up email because my ISP said that it had stolen my email password from Pegasus and gotten into my Email account, so we changed that password.

I’m using the free versions of Avast! and MalwareBytes and have been running scan after scan and every time they find something. I ran a full boot scan with Avast on Saturday and thought it had fixed the problem. It said it deleted that .exe file that I opened, and sent a bunch of trojans to the chest. But now it’s started again, even though I deleted that email and even emptied the recycle bin.

I just ran another 90 minute boot scan and it found that same file, all over again, but this time it told me that data1.cab DXUPDATE.DLL was corrupted too. So I ran a command prompt window and sfc /scannow, but it says everything is fine. Then after reboot from that boot scan today, I started getting Avast! popup windows all over again, telling me not to worry, BUT it sent this file and that file and another file, to the chest! Well I’m worried now!

I was even thinking of registering Avast!, I’ve been using it for so long, but all it seems to be doing is reporting, not decisively stopping this stuff! I’m running another quick scan now, and it’s found 4 infected files already, EVEN THOUGH I just got done with the 90 minute boot scan!

What the heck should I do?!

This afternoon I ran these two AV programs again and now they won’t even detect this, even while I’m getting endless popups on the lower right from Avast! Web shield has blocked harmful…

Is there ANYTHING that the paid version of Avast will do, to stop this, that the Free version won’t? If the free version won’t stop it, will ANY version?

My Softi Scan to PDF just quit working today, too, so now I cant scan multi pages to PDF. We have a small part time home business here and this thing is killing me.

I think they ought to track down the people who put these things out, along with some spammers every year, and just string them up.

Someone told me that they think that the virus scanner companies have off site back rooms where this stuff is produced and put out, but I told them, that there are probably plenty of bored hacker kiddies doing it, without that.

2

hey and welcome to the forum.

i suggest you let a malware expert have a look at your computer

please follow this guide and attach the logs we need the logs from mbam,otl and aswmbr.

http://forum.avast.com/index.php?topic=53253.0

a malware expert will help you from there when on is online later today.

3

if you still have that mail and the attachment you should send it to avast lab so that they can check it and add detection for it if missing

4

Is that computer a work computer? If it is, contact your IT department.

Deleted by OP upon rethinking that

5

I went to run another boot scan as I left the PC last night, and noticed that Avast! wasn’t set to the very top of it’s heuristic setting, so I did that and ran the boot scan overnight. It came up this morning and the virus is still here.

Please just tell me where the log files are, so I can upload them here. That page is complicated for me, I’m just an intermediate user.

I deleted that email, but the format is that it tells you that you’re the defendant in a court case and that you have to show up in another state, and to see the attachment, but the attachment is an .exe

I got another one after that, but instead of New York, it said Chicago. If I get another one, I will ask for how to fwd it to the labs.

6

follow instructions here. http://forum.avast.com/index.php?topic=53253.0

we need Malwarebytes / OTL / aswMBR logs… attach them, not copy and paste

7

Here’s the latest MWB logs. I’m including the ones since Friday, because they seem to have changed, to where it’s not detecting anything now. Ok, it won’t allow more than 4, so here are the first 4.

8

Here are the next two.

9

your malwarebytes was not updated when you did latest scan
update, run quick scan …attach log …then continue with the others

10

I just downloaded MWB on the 17th and didn’t think it needed updating, but will do, thanks…

11

they release around 10 updates a day …always update before you start a scan

12

Good to know, and I’ll pass this on to my sister here too, thanks!

13

Latest updated MBAM log. Now I’ll go run OTL again.

14

OTL log

15

ASWMBR

16

Monitoring…

17

Download TDSSKiller and save it to your desktop

Execute TDSSKiller.exe by doubleclicking on it.
Confirm “End user Licence Agreement” and “KSN Statement” dialog box by clicking on Accept button.

[*] Press Start Scan
[*] If Suspicious object is detected, the default action will be Skip, click on Continue.
[*] If Malicious objects are found, select Cure.

Once complete, a log will be produced at the root drive which is typically C:\ ,for example, C:\TDSSKiller.<version_date_time>log.txt

Please post the contents of that log in your next reply.

18

Log

19

I don’t know if this thing is damaging programs or I just accidentally deleted some program files with all this scanning, but this is the second program that I get this message on now.

20

Is there any way to upload my Avast! logs here, as this is ongoing? Avast! is blocking thousands of things and they seem widely varied, but this is an ongoing thing and until this is recognized, I don’t see any point in keeping running Avast! scans, this thing has been eating up my time and I need to pay the bills here. ( Does Avast update many times a day like MWB? )