avast thinks everything is a virus

Viruses and worms
1

Every program I run avast thinks its a virus an deletes it.
I was runing firefox,notpad, wordpad ,paint, everything an it deleted it.
so i was trying to run Malwarebytes Anti-Malware an it deleted that too aslo it deleted AdwCleaner, ComboFix, OTL,tdsskiller,FSS,RogueKiller,aswMBR

and everytime i open any drive C;\ ,D:\ ,F:\ it tells me i have a antorun.inf -gen. Then I cant open my drive any more.

If I reboot my PC an kill avast reinstall Malwarebytes Anti-Malware it will run a scan after can It gives me my list of viruses an I click delete Then reboot. But everything is still there.

I cants post scan logs as it keeps getting deleted.

I added a Image of it.

Edit I just did a fast scan with Avast an It found every file as a virus over 500+ . It thinks every last one of my files are a virus It even thinks Avast is a virus. I just closed it as If I delete all of them my pc will be dead.

2

Please attach your logs. (AdwCleaner, MBAM, OTL and aswMBR…!!)
Instructions: http://forum.avast.com/index.php?topic=53253.0

If you’ve problems, try to run them in safe mode.

3

well…it seems you may have a file infector …Sality…it is like computer cancer, so this may end with a format/reinstall

malware expert is notified, so wait for advice

4

http://forum.avast.com/index.php?topic=53253.0
I cant I tryed.

Sality.
Yes I have seen that pop up.
I cant format as i have files i need on here. an when i tryed to move the files to a drive to my other pc it tells me they are not working.

5

Hi this may not work, no guarantees

Stop Avast for the duration of this run

The following programme may need to be run several times and no guarantee can be given

Download Sality Killer zip to your desktop and extract SalityKiller.exe

Run the utility SalityKiller.exe on the infected computer
A reboot might require after disinfection.

Download the file Sality_RegKeys.zip
unpack the file Sality_RegKeys.zip
run the file Disable_autorun.reg from the archive Sality_RegKeys.zip

Once the scan is over, from the archive Sality_RegKeys.zip run the file of the registry key:

under Windows 2000 run the registry file SafeBootWin200.reg
under Windows XP run the registry file SafeBootWinXP.reg
under Windows 2003 run the registry file SafeBootWinServer2003.reg
under Windows Vista / 2008 run the registry file SafebootVista.reg
under Windows 7 / 2008 R2 run the registry file SafebootWin7.reg

6

Killed avast Running your program now.

I think it infects files my names. Because I reinstalled melwarebytes an renamed it an it did not think its a virus.
Same for the other .exes thats how im running firefox i renamed it to ssssddd.exe an it runs.
So what ever virus i have goes after programs that it knows like avast ,ati, otl, an so on.

I will let you know how everything goes after this.

7

Once done could you run a renamed OTL scan please

8

Ok I will.

Will salitykiller scan all drives?
Aslo if so it may take some time I have 1 1tb, 500gb drive full to 86% an a 320gb Full 93 %

9

It will take a while as it will scan and then clean all the files that it can

10

Done with your program. It Cured 501 .exe files no errors.
Im will run everything to give you scan logs.

Edit Avast just seen Malwarebytes as a virus.

11

essexboy has logged out for today, so just continue whit his advice and check back tomorrow

12

Ok thanks. I will.

Anyways Most of the errors an popups have when away.

13

All logs and images are done after running SalityKiller and the sality_regkeys.

14

The rest of the log files

15

more logs

16

Sorry for all the posts I cant edit.

But i forgot to say. The blocked incomeing connections my be from my webserver?
Im running my site from my PC.

17

Your website may well be infected and carrying the sality virus.

Could you run sality killer one more time please and let me know what the results are

18

the website is clean I looked at all the files an scanned them. Also I have noticed that the sality virus only goes after .exe files an my site does not have .exe files.

i ran sality killer two times last-night an it said 0 files infected.
I will Run it again an post a screen shot .

19

Grand could you then let me know how the computer is behaving

20

scan done.
The pc is working fine.
I uninstalled avast an reinstalled an did a fast scan an its not picking up any sality virus.
I just get the win32:evo-gen{susp}. so i heuristics sensitivity to low.
I think avast is just trying to be to safe.