Avast blocked by Virus ? ? ?

Viruses and worms
1

I have Avast Internet Security with valid until 2015. Yesterday started reporting the presence of Trojan Horse and Malware. I did a scan which showed the two viruses but there was no way to quarantine or delete them. I programmed a scan and rebooted the PC. At the end windows restarted, and Windows Defender and Avast were disabled. And there is no way to activate them.
The PC is functioning normally, but without protection.
Four years ago I had similar problem and when I tried to install AVG, it requested permission to uninstall the Avast. I permited and before continuing the installation of AVG the virus erased all data from HD. I had to format and install everything from scratch.
Does anyone know which procedure to not go through it again? Thank you.

:frowning:
[b] The company should have a Internet scan for those who paid for the product in order to solve this problem and do not let the customers to solve it. [/ b]

2

Hi lisot,

Please carefully read and follow the instructions here: http://forum.avast.com/index.php?topic=53253.0
And attach the generated logs in your next post.

Tell us if you experience any difficulties or do not understand something.

~!Donovan

3
I did a scan which showed the two viruses but there was no way to quarantine or delete them.
what files where detected...and where are they located...post full file path what malware name did avast give the detected files?
4

When the problem occurred I didn’t wrote down the name of the Malware and the Trojan Horse. Now it’s impossible to know because the Avast is blocked. Thank you.

5

I did all steps and the problem persist.

6

More files.

7

Avast Screen Pictures.

8

OTL files.

9

Is your banking plugin also disabled ?

Let me know if this restores the Avast functionality

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:Commands
[CREATERESTOREPOINT]

:OTL
O4 - HKU\S-1-5-21-1820699767-3497478691-1574591218-1000..\Run: [JavaUpdateIsbs66] C:\programsystem66\gansh.vbs File not found
[2013/07/21 01:25:55 | 000,000,000 | ---D | C] -- C:\ProgramData\boost_interprocess
[2013/07/17 22:47:38 | 000,000,000 | ---D | C] -- C:\programsystem66


:Commands
[resethosts]
[emptytemp]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.

10

Essexboy,
Thanks for your help. My banking plugin was enabled and impossible to remove, so I used the Linux to delete it. Then I ran the OTL and the problem persisted.
After trying all the procedures promptly and kindly suggested in the forum, I decided to install the Kaspersky PURE 3.0 without uninstalling AVAST. The program installed correctly, downloaded the update and then I did the scan. He found a few Trojans and malware, most of them Malwarebytes and OTL had already removed in the previous procedures. (I was impressed that it had found a few more viruses) Throughout update and scan there was a warning: Error in the databases. But it all worked out. Eliminated everything, restarted and apparently all is working fine.
So I try uninstall AVAST through the Control Panel. But this was not possible, and still locked as before.
I had to use the ASWCLEAR.EXE in safe mode and then uninstalled it.
I’m no expert on the subject but it seemed that the virus gagged AVAST (the thief handcuffed the police).
Even still having another year of AVAST Internet Security, I ended up swapping the PURE 3.0.

11

What did Kaspersky find, I am curious

12

I did not take note of which viruses were found, but reported that the computer was infected and asked to remove it. Done that, the computer is working well at now.