Avast deletes itself and blue screen

Avast Free Antivirus / Premium Security
1

Hi I was trying some files and stuff. Avast told me there was a virus as i deleted after 30min or so still trying other rar and zip files i had a blue screen saying critical error system shotdown after reboot my avast icon starts but disappears when trying to start it manually it cannot find the file in folder searching i tried to get new version installed it it ask if i want a system scan at startup but boots up normally but avast executable file is again deleted somehow.
I was going to try to re-install it from safemode in case a virus ´was deleting avast but when loading in safe mode it is going blue with critical error and Instant reboot :((((
anyhow i think there is a virus that prevent me from using avast what can be done?
I’m newbie to viruses

th ks for all replies.

2

Welcome to the forum snakie.

There is a rootkit that has been targetting avast, McAfee, etc that may be the cause of your problem. Try scanning with F-Secure Blacklight

http://www.f-secure.com/blacklight/try_blacklight.html

and, if that doesn’t find anything, Panda AntiRootkit

http://www.pandasoftware.com/download/documents/help/rkc/en/rkc_en.htm

Assuming you find and successfully remove a rootkit, reinstall avast! and run a boot scan.

Also, if you can isolate a sample of the rootkit please do so and upload it to avast! for analysis.

3

thks alot ;D the anto-rootkit help me get rid of 2 files from root how ever the program dosent give any choice to see what files they are or how they came or any other options but clean and send report to analyze as i did. But sorry that i couldnt find any way to collect them
But thks alot now i just have to register avast again :slight_smile:

4

Ok - no problem.

You shouldn’t need to re-register avast! Just reinstall and use the same key you had (assuming you saved it).

BTW which worked - Black Light or Panda?

5

Just for the future, deletion isn’t the best first option, you have none left, ‘first do no harm’ don’t delete, send virus to the chest and investigate.