Oh my gosh!!! Can ANYONE explain what just happened to me??? I downloaded the software, the thing was there on my toolbar in blue, then I did a scan, and it said there was a problem in the memory that is dangerous. It had me do something, and then it was scanning the c drive (and the screen looked like it looks when you shut down improperly and it scans before you go back to windows - that’s what it looked like, just a blank background and the scanning info stuff).
So, it was scanning (and it was taking a LONG time, so I left it and came back. BUT, when I came back, my lcd was blank. I moved the mouse around trying to get a screen back, but nothing. I hit the power button on the pc and then it came back up and wouldn’t go to windows. I had to do a restore.
Now, I have no blue thing for avast and when I go to programs to avast and double click it just takes me to a website for avast.
WHAT IS GOING ON??? PLEASE, PLEASE, PLEASE HELP!!!
It was doing a boot time scan, which is scanning windows before it loads. It’s because a virus is currently running and deleting it might screw up something.
I do not know why Windows corrupted. or any of the other stuffs
You could first simply repairing the avast installation. Goto Control Panel/Add & Remove Programs/Avast Antivirus. Click on the Change/Remove button then select Repair. You may have to pull down the slider bar to see the repair icon.
If this gets avast back running, right click on the “a” ball and select Avast! log viewer. Have a look for entries in the various catagories that may be relevant to what happened. You can export these to .txt files via the File/Export current list and post them on the forum if you think you need further assistance.
Edit: I’m sorry, I just looked at your post again and saw that you had done a restore. If this was a restore to a period prior to the installation of Avast, or a restore of the operating system from a restore disk or partition please disregard the above - you would need to reinstall Avast!.
I just tried downloading the software again, it had me do a scan like before. I was sitting here this time. I stopped once and asked what to do with an infected file. I deleted it. The scan started again. Then after a very short time, the screen went blank again.
The pc wouldn’t restart windows so I had to do a restore - again.
ANYONE know what is going on? This whole thing has taken HOURS. ANYONE?
courtsman
you should not have to re-download - you did save a copy of the installer to a file- right
reinstall avast, update, and schedule a “scan on boot”
reboot
post a log if you can
When avast is first installed, it will do a complete scan of your computer. This will take some time and maybe a few hours depending on how many files are on your computer. Your computer is going into hibernation before the scanning is complete. This causes the black screen you are seeing. Please stop your computer from hibernating so that the initial scan can be completed. After this first scan, other scans will be quicker.
wasn’t the detected file vga.sys? Vanti rootkit (bundled frequently with OnLineGames/AutoRun/AuCrypt/Oliga virus families) is known to hide behind the vga.sys image… files containing “kavo” “kava” “tavo” etc should be detected also as hidden processes in that case…
But, I was there and kept moving the mouse to KEEP the system FROM hibernating (I thought that had happened the first time so I wanted to make sure it didn’t happen again, but I guess it COULD have happened. Definitely COULD have happened the first time, don’t really believe it happened the second time. Could there be a virus on so that it makes it do what it is doing?)
Why would that make it so that windows doesn’t restart and have to be RESTORED? I mean RESTORED where the system says it can’t start windows and do you want to RESTORE…
If this is normal, ok then. I will try again. I mean AGAIN, again.
I am afraid now. Because it goes back and I have to download avast again and everything…
OK, let’s see if we can find something. If you do not have the latest version of HighJackThis …
Please download HijackThis from the link below, run the program but do not make any fixes, and then post the log results using the “copy & paste” method. It will probably take more than one post to be able to get the complete log posted. OR, you can post it as an attachment to your post by clicking on “Additional Options…” below left of the posting box. Someone will review your log and then offer help.
They won’t be checked after the scan it isn’t an active tool but one that simply displays what is running the log requires analysis and then check marks but in the boxes for those entries deemed to be harmful, etc.
You should consider installing SP1 for Vista.
Also the Vista Firewall by default only protects against inbound attack, not outbound checking.
The mywebsearch toolbar is considered adware by many as it gathers data from your searches used for marketing and possibly the delivery of ads relating to what you have searched for in the past. You should be able to remove the mywebsearch toolbar.
C:\Program Files\MyWebSearch\bar\1.bin\M3SRCHMN.EXE
C:\Program Files\MyWebSearch\bar\1.bin\MWSOEMON.EXE
R3 - URLSearchHook: (no name) - {00A6FAF6-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: MyWebSearch Search Assistant BHO - {00A6FAF1-072E-44cf-8957-5838F569A31D} - C:\Program Files\MyWebSearch\SrchAstt\1.bin\MWSSRCAS.DLL
O2 - BHO: mwsBar BHO - {07B18EA1-A523-4961-B6BB-170DE4475CCA} - C:\Program Files\MyWebSearch\bar\1.bin\MWSBAR.DLL
O4 - HKLM..\Run: [My Web Search Bar Search Scope Monitor] “C:\PROGRA~1\MYWEBS~1\bar\1.bin\m3SrchMn.exe” /m=0
O4 - HKLM..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O4 - HKCU..\Run: [MyWebSearch Email Plugin] C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwsoemon.exe
O23 - Service: My Web Search Service (MyWebSearchService) - MyWebSearch.com - C:\PROGRA~1\MYWEBS~1\bar\1.bin\mwssvc.exe
Have (or did) you another AV installed in this system, if so what was it and how did you get rid of it ?
Well yes you do it is crawling with Nirton Internet Security, so it is no wonder there was a problem with avast, in fact there isn’t a scrap of an avast remnant in this HJT log.
Having two resident scanners installed is not recommended as rather than provide twice the protection it can cause conflicts that could leave you more vulnerable.
3 - zwinky was part of mywebsearch, i think - my daughter used that, but doesn’t anymore.
4 - restarted pc
5 - reran hijackthis and there are still symantic things there. can’t find any in uninstall programs, so don’t know what to do about that.
So, what do I do now? Do I try the avast again? I am so afraid that I will do something that will destroy the pc.
Almost forgot, when I ran hijackthis again, it said “For some reason your system denied write access to the host file. If any hijacked domains are in this file hijackthis may NOT be able to fix this…”
