Avast constantly locating viruses

Viruses and worms
1

Hello,

When I use Google.com, I get re-directs nearly every time I click on a link. Additionally, Avast Antivirus detects a virus in Firefox.EXE nearly constantly. Even when I am not in Firefox, Avast finds numerous viruses. I ran Malwarebytes and think I may have deleted some important registry keys because, 75% of the time windows freezes during startup. It works all the time in Safe mode (and no virus detects…), and 25% of the time in regular mode but nearly CONSTANT virus detection. Please help! I am more interested in solving the VIRUS problem before going on to the 2nd problem of the boot failures (I cannot locate windows install discs to repair…but like i said, right now I am loaded perfectly fine into regular Windows, no safe mode etc)

Please let me know which logs to provide so we can proceed. Thanks so much!

2

Hi Doc7

Follow this guide. http://forum.avast.com/index.php?topic=53253.0

attach malwarebytes / OTL / aswMBR logs in your next reply.

Anthony

3

Here is the Malware Bytes log, and the other requested logs, which I have attached to the post. Thanks!

Malwarebytes Anti-Malware 1.62.0.1300
www.malwarebytes.org

Database version: v2012.08.27.06

Windows Vista Service Pack 2 x86 NTFS
Internet Explorer 7.0.6002.18005
Dave :: THE-Q [administrator]

8/27/2012 6:56:27 PM
mbam-log-2012-08-27 (18-56-27).txt

Scan type: Quick scan
Scan options enabled: Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken | PUP | PUM
Scan options disabled: P2P
Objects scanned: 241734
Time elapsed: 18 minute(s), 11 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

(end)

4

Hi Doc7

Thankyou for posting the logs.

I dont know when a malware specialist will be on, i suggest a nice cup of drink while you are waiting 8)

There may be time differerences etc, keep a eye out on your post 8)

Thankyou for being patient :wink:

Anthony

5

Hi,
I will be working on your Malware issues 8)

Download TDSSKiller and save it to your desktop

Execute [b]TDSSKiller.exe[/b] by doubleclicking on it.

[*] Press Start Scan

[*] If Suspicious object is detected, the default action will be Skip, click on Continue.
[*] If Malicious objects are found, select Cure.

Once complete, a log will be produced at the root drive which is typically C:\ ,for example, [b]C:\TDSSKiller.<version_date_time>log.txt[/b]

Please post the contents of that log in your next reply.

Download ComboFix from here and save it to your Desktop.
If you are unsure how ComboFix works please read this guide carefully.
note: ComboFix must be downloaded to your Desktop.

Temporarily disable your AntiVirus program.
If you are unsure how to do this please read this or this Instruction.

How to disable avast:

[*]Right-click on the avast! icon in the lower right corner of the screen and choose Open Avast! User Interface.
[*]In the window that opens on the top right corner, click Settings.
[*]In a new window that opens, choose the option Troubleshooting, Uncheck Enable avast! self-defense, and click OK.

[*]Right-click on the avast! icon in the lower right corner of the screen and select avast! shield controls .
[*]In the menu that appears, choose Disable Permanently. When you are prompted to turn off security, click Yes.

Note: Do not forget to turn on this option after the cleaning.

Run ComboFix. Click on I Agree!
ComboFix will check if there is a newer version of ComboFix available.
Click Yes if prompted to download.
ComboFix will display DISCLAIMER OF WARRANTY ON SOFTWARE.
Click Yes to allow ComboFix to continue.
If Recovery Console is not installed, ComboFix will offer download & installation.
Click Yes to allow ComboFix to install Recovery Console.
Note:Do not mouse-click Combofix’s window while it is running.
If you see a message like “Illegal operation attempted on a registry key that has been marked for deletion” just restart computer once more.

When the tool is finished, it will produce a log report for you. (typical location: C:[b]ComboFix.txt[/b] )
Attach log reports ( ComboFix.txt) back to topic.