Avast warning about Win32:Rootkit-gen every three hours

system · 2017-05-03T03:15:05.000Z

I’m having a really stressful time trying to figure out what’s going on with my avast or computer.
Every three hours give or take around 30 seconds, a message pops up from Avast webshield telling me of a rootkit gen.

I attached an image showing the webshield report.txt and I’d really REALLY like some help before I yank my hair out in frustration

[Edit] I also just noted that it’s only every three hours after the real time shield comes online and not every three hours based on the other warnings, I’m even more confused now.

dbrisendine · 2017-05-03T19:57:30.000Z

Before I reset something you need, can you tell me if you need the Proxy settings? What are they used for; what are you using them for?

system · 2017-05-03T20:03:19.000Z

The proxy settings are unused as far as I know, I used them years ago for something and I never got rid of them.
So yeah, don’t need them in the slightest

dbrisendine · 2017-05-04T07:30:41.000Z

Thanks for the information; this should help …

https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
Fix with Farbar Recovery Scan Tool

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[b] This fix was created for this user for use on that particular machine.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif

https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
Running it on another one may cause damage and render the system unstable.
https://sites.google.com/site/cannedfixes/home/hosted-images-formatting/icon_exclaim.gif
[/b]
Download attached fixlist.txt file and save it to the Desktop:

Both files, FRST and fixlist.txt have to be in the same location or the fix will not work!

Right-click on
https://sites.google.com/site/cannedfixes/farbar-recovery-scan-tool/FRST.gif
icon and select
https://sites.google.com/site/cannedfixes/home/hosted-images-tools/RunAsAdmin.jpg
Run as Administrator to start the tool.
(XP users click run after receipt of Windows Security Warning - Open File).
- Press the Fix button just once and wait.
- If for some reason the tool needs a restart, please make sure you let the system restart normally. After that let the tool complete its run.
- When finished FRST will generate a log on the Desktop, called Fixlog.txt.
  Please attach it to your reply.

How is your system running now?

system · 2017-05-04T13:17:54.000Z

Is the fixing process supposed to take multiple hours? Because it’s been “Fixing is in progress, please wait” for around 5 hours now.
I do have a fixlog though for the unfinished fix though so I’ll post that and continue to keep an eye on it.

Pondus · 2017-05-04T13:20:38.000Z

Is the fixing process supposed to take multiple hours?

No, did you abort and try run it again?

@dbrisendine will be back online tomorrow

system · 2017-05-04T13:24:21.000Z

Pondus post:6:

Is the fixing process supposed to take multiple hours?
No, did you abort and try run it again?

My power did for me actually, power went out for one reason or another and came back on again.
The fixlog before the reboot looked exactly like the one linked so it seems to be getting stuck on the same point.

system · 2017-05-05T08:56:16.000Z

I finally timed myself to take a picture of the actual pop up Avast shows when it detects an issue so I’ll link that just in case is helps.

dbrisendine · 2017-05-07T03:49:54.000Z

Just to be on the safe side, please scan with MBAR to see if it finds anything.

Please download Malwarebytes Anti-Rootkit from here

[*]Unzip the contents to a folder in a convenient location.
[*]Open the folder where the contents were unzipped and run mbar.exe
[*]Follow the instructions in the wizard to update and allow the program to scan your computer for threats.
[*]Click on the Cleanup button to remove any threats and reboot if prompted to do so.
[*]Wait while the system shuts down and the cleanup process is performed.
[*]Perform another scan with Malwarebytes Anti-Rootkit to verify that no threats remain. If they do, then click Cleanup once more and repeat the process.
[*]When done, please post the two logs produced they will be in the MBAR folder… mbar-log.txt and system-log.txt

system · 2017-05-07T09:04:15.000Z

Downloaded and ran the Anti-rootkit, found nothing and says my computer is clean

Announcements