What do you mean by “trying to figure out what is interfering with all the security cameras.” e.g. what is interfering, do you mean you can’t display the feed to the computer, etc. (or is this unrelated to avast) ?
The virus database is constantly updated and added to, so it isn’t unusual to find an old dormant file being detected.
I am very disgusted with my knowledge level. I have tried many firewalls and have learned that they all get turned off. The latest was Comodo with the message click to fix me, but no explanation as to why or how to prevent it again. Is a firewall even needed, especially since I haven’t found one that consistently works? Also is it normal for Avast to now report that the files that it put into its virus chest are now without virus? Thanks. (Sorry, I do not know if it is Avast, or for that mater what is causing all the cameras to not display and for that mater, even the expert after 8 hours of trying. Just expressing some of my frustration. Avast and all firewalls never blocked the cameras before.)
Firewalls getting turned off is unusual and the most common cause is malware as they don’t want to be blocked. A firewall is an essential part of your system security, the win7 one is better than nothing, but outbound protection is disabled by default it is rules based and you have to create the rules so isn’t very user friendly.
You say in other posts scans come up clean, what scanners have you used ?
Try MalwareBytes Anti-Malware (MBAM), On-Demand only in free version http://download.bleepingcomputer.com/malwarebytes/mbam-setup.exe, right click on the link and select Save As or Save File (As depending on your browser), save it to a location where you can find it easily later. Download, Install, Update, run a Quick scan and post the contents of the log file.
As I said before the virus database is constantly updated and added to; this can be because of a false positive detection and the signature would be corrected. This is why it is important not to delete files, but send to the chest and rescan them after a few weeks. If they are no longer detected then they can be restored from the chest.
Presumably your cctv cameras use software to stream the content to your computer ?
If so they would have an IP address (?), this could be excluded from the web shield scanning or there is another option:
Try opening the avastUI, Real_Time Shields, Web Shield, Expert Settings, and check the ‘Scan traffic from well-known browser processes only,’ option.
Note: If you break your posts up into sections it is much easier for us to read’ help and reply.
David, thanks for your knowledgeable suggestion. Thanks for the info on Malwarebytes. Yes, I do run it. Latest scan said Objects infected: 0.
Sorry about all the disorder. Avast was updated at least 1 time between the sequestering of the files yesterday PM and the all clear today AM. This still does not explain the virus total results, nor the flagging right after new reload of Win with the same version of Avast that did not see it before reload. I reloaded Avast from a thumbdrive.
I tried your fix of checking ‘Scan traffic from well-known browser processes only,’, unfortunately, something else must still be blocking all the cameras.
Yes, being without much knowledge, paranoia abounds and malware does come to mind when I see all firewalls turned off at will. Thanks for all your help.
I don’t believe the files placed in the chest would have anything to do with the inability to view the cctv content. Have you ever been able to view the cctv content (prior to these detections or prior to avast) ?
I see nothing in this topic about virustotal results, so I can’t comment, I’m not even sure what it is in relation to either. Again I don’t know what file you are talking about, reloading windows doesn’t remove the existing programs and data unless you have it format the drive, otherwise it just installs windows over the old version. Plus there is no mention of any windows files having been detected, so I’m unable to comment without more details.
But it seems we are diving off at a tangent and not concentration on the existing problem rather than historic events.
I tried your fix of checking 'Scan traffic from well-known browser processes only,', unfortunately, something else must still be blocking all the cameras.
Well, installing several security tools, as for example several firewall tools, all simultaneously or even one after the other, is not going to make things any easier, to say the least. Even after uninstalling, some remnants may be left behind, and that’s why there are specific removal utilities for specific security tools.
Yes, being without much knowledge, paranoia abounds and malware does come to mind when I see all firewalls turned off at will. Thanks for all your help.
As David suggested, this topic is all mixed with very different issues. If you really want a working solution, I would suggest some friend or technician that could at least leave your system in a working state. You are welcome to keep asking here, and I’m sure we will try to help, but the fact is that there is some limit about how much directions, instructions and general help can be provided by means of a forum topic.
Please, don’t get me wrong. Keep asking whatever you want and need, and we’ll try to help anyway we can. I just think that it could be more effective if you get a direct help from someone with direct access to your system (although not everyone might be fit to the specific task).
I apologize for my ignorance and yes I will be in contact with “expert” on site help in the near future, but since “something” had changed the name of a suspect file (virus/Trojan?) and was preventing my deleting it, I felt compelled to inquire. It isn’t very often that a suspect file (virus/Trojan?) changes its name and refuses to be deleted, so I was wondering if this was normal “Avast” behavior or if there was another process on the computer that would be changing the file’s (virus/Trojan?) name and opening it so as to prevent my deleting it. Sorry about bringing up the cameras, but that is still a mystery to me.
Yes, the file was confirmed on virus total, but with a very low score and Avast cleared it (?) with its very next update (or was another process rehiding it after reboot?) In any case I was looking for “expert” advice on how to interpret a file that “Avast” was calling a virus, virus total was confirming, its name was changing like a chameleon and “something” was preventing me from deleting it. Thanks for all your help
Well I hope that by your silence here that all the experts are confirming that everything sited above is “NORMAL” Avast behavior. Apparently Avast does flag files that it does not see with a previous load of Win, that are confirmed by VT, that names are changed and prevented from deletion by Avast. Then Avast clears them all with next reboot of computer. BTW, I got the cameras to work on one test computer that I applied your fix on and installed a better firewall. They even no longer give the multisecond delay as before but show real live data. Thanks.
It is more of we really don’t know that this is normal, certainly in my case.
You have only mentioned two file names, CrucialScan.exe, which I though we had thrashed to within an inch of its life, now you have removed it that should be it.
The other file toy mentioned was $RLYWJLC.exe and I can’ find zero information on it or on RLYWJLC.exe (dropping the $ from the name).
So I really don’t understand what it is that you are trying to say by this:
but since “something” had changed the name of a suspect file (virus/Trojan?) and was preventing my deleting it, I felt compelled to inquire. It isn’t very often that a suspect file (virus/Trojan?) changes its name and refuses to be deleted,
Nothing has previously been mentioned about file names being changed so what is it change to and what is its location?
What is the precise wording of any error message ?
Does it matter? It was not now. The wrong deletion of posts is not a one-time thing (and it has not happend just to me). My post was all technical, and nothing that would trigger any mod to even think about deleting it.
I am used to see users not reporting back, or not answering, giving the impression that we (users trying to help) are just “throwing” our precious time. But when a post is deleted, specially with no reason, really “hurts” (and please don’t take this as an “emotional” reaction or alike).
There is nothing concrete I can do about it (other than stop posting). Sorry for the OT (although I am indeed still P1$$3D 0FF >:( ).
Of course it matters as content is king as they say.
For instance if you had replied to a spammer and quoted text from a spammer. Then if the spammer was banned and posts deleted then referenced to the deleted account may have been cleaned up.
I’m not saying that is what happened in this case, as obviously I’m quite familiar with this topic and I can’t recall any holes in the topic or and spammer posts. So I’m not sure what happened, which is why content/context and who you were replying to might throw some light on it.
As said, the content was technical and in no way related to some spammer, and was certainly not bad language or similar.
Most importantly, also said, there is nothing concrete that can be done now. It’s not the end or the world, and I was certainly not going to receive some Nobel Prize for my writing ;). Usually I wouldn’t even post such a comment (nothing to do about it). I was mostly “shocked” to find this situation.
The faster we move on (and leave the OT behind), the better. Thanks for your inputs. Let’s move on (and I hope this won’t stop from the main issue to keep developing forward, if needed).