Network connection stopped working this morning. Determined DNS was no longer working. (Changed/disabled by trojan?) Got it back and downloaded and ran MBAM. It found and quarantined Trojan.Agent.FPD. Ran FRST. Tried aswMBR several times but it always stopped with some error about root kits. At this point, Avast Internet Security won’t run, can’t be uninstalled or re-installed. What now? Help Please.
Attach both FRST logs please
Please download Farbar Recovery Scan Tool and save it to your Desktop.
Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
[*]Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
[*]Select additions at the bottom
[*]Press Scan button.
https://dl.dropboxusercontent.com/u/73555776/frst.JPG
[*]It will produce a log called FRST.txt in the same directory the tool is run from.
[*]Please attach both logs generated.
Attached files from FRST
What error do you get when you try to start Avast ?
Avast should have run from reboot. Got no indication that it failed to start. Simply wasn’t running. Trying to start it from Start\All Programs\Avast I would get a message saying the program I am trying to start is for a different version of windows.
I just reinstalled Avast from a previously downloaded installer and it work. Avast (after yet another reboot) is now running. What more should I check? Artifacts from Trojan.Agent.FPD?
Could you post the MBAM log please
You want the MBAM that shows where it found the original infection or run another one now?
Here’s the orginal MBAM
DJdJHXvp.zip.part OK that was inactive as the full file was not downloaded
How is the computer now, as it stands I can see nothing untoward apart from traces of two other AV’s Wavetrust and Norton
I guess its OK other than personal concern about how the trojan got past Avast Internet Security and completely dismantled it and my networking. Thanks for checking!
I do not think the damage was caused by malware, as you have several VPN/network programmes running in addition to the 3 antiviruses
Cisco AnyConnect Secure Mobility Client Fortinet Juniper Networks SonicWALL Global VPN Client TortoiseSVN
The VPN clients may be complicating the issue but they have all been in use on this system for months, even years with no problems. Never have I had an issue that disabled an antivirus without it being malware. And, the MBAM scan did find the a trojan that has never shown up before. I did an unusually large number of Internet searches yesterday but didn’t use any of the VPN clients. I find it hard to agree with your conclusion.
All I can go on is what I can see. A part downloaded zip file will not activate
We can look deeper if you so wish
Regardless of the “why”, I am back up and running (seemingly) normally. I do very much appreciate the help.
Out of curiosity how did you get the net back up ?