Cannot download anything on google chrome, it keeps saying virus scan failed right after the download is finished and the file is immediately automatically deleted. I also have the latest chrome version.
post screenshot of message
Attach requested logs >> https://forum.avast.com/index.php?topic=194892.0
Malwarebytes is new text document 4.
Screen shot
You have two antivirus programs installed (Avast and Avira). Having more than one AV program on your system will cause system slowdowns and instability. Go to Control Panel → Programs and Features and uninstall one of them. After that, post new FRST logs.
I have all the avast shields off, and only use it for manual scan, and have avira on real-time. I chose to keep both of them from the get-go and never had any problems. Could you somehow oversee that one and try other steps?
I REALLY wanna keep them both though, that’s why.
If you wish so…
- Open Notepad (click Start button → type notepad.exe → press Enter)
- Copy text from code block below and paste it into Notepad
Start
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\Run: [Problem Support Credential] => C:\fgqbgztdtzjlad\kaavqikkwn.exe
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\Run: [List Security Device Log Peer] => C:\Users\Augustus_2\AppData\Local\viqddgcw.exe
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Google Chrome] => C:\GoogleChrome\WindowsUpdate.lnk [0 2015-02-25] ()
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [Problem Support Credential] => C:\fgqbgztdtzjlad\kaavqikkwn.exe
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\Run: [List Security Device Log Peer] => C:\Users\Augustus_2\AppData\Local\viqddgcw.exe
CHR NewTab: Default -> Not-active:"chrome-extension://bbnejnekcgkmgpbioklhimlnjoconoig/tab.html"
CHR Extension: (ConverttoPDFNow) - C:\Users\Augustus_2\AppData\Local\Google\Chrome\User Data\Default\Extensions\bbnejnekcgkmgpbioklhimlnjoconoig [2016-09-08]
C:\fgqbgztdtzjlad
C:\Users\Augustus_2\AppData\Local\viqddgcw.exe
C:\GoogleChrome
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\MountPoints2: {274230fb-6884-11e6-8356-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\MountPoints2: {3f3e997d-56e4-11e6-8334-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\MountPoints2: {51d41ebb-a25a-11e6-8379-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\MountPoints2: {5261360e-e557-11e4-8253-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\MountPoints2: {53a76d8e-c1e0-11e5-826c-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\MountPoints2: {5de457e8-9caa-11e6-8373-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\MountPoints2: {617cca2d-1b50-11e7-83d5-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\MountPoints2: {64c45c6b-5340-11e6-832e-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\MountPoints2: {6571693b-872a-11e5-8258-1078d2456fc1} - "G:\Lenovo_Suite.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\MountPoints2: {81cc97ae-7f18-11e6-8362-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\MountPoints2: {89cf2cfe-6888-11e7-8418-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\MountPoints2: {8b8525a1-8489-11e6-8365-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\MountPoints2: {aca4e82c-e5dd-11e4-8254-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\MountPoints2: {ba468bb8-37bb-11e6-82f4-1078d2456fc1} - "G:\Setup.exe" /s
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002\...\MountPoints2: {e6612b20-b523-11e6-837f-1078d2456fc1} - "H:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {274230fb-6884-11e6-8356-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {3f3e997d-56e4-11e6-8334-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {51d41ebb-a25a-11e6-8379-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {5261360e-e557-11e4-8253-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {53a76d8e-c1e0-11e5-826c-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {5de457e8-9caa-11e6-8373-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {617cca2d-1b50-11e7-83d5-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {64c45c6b-5340-11e6-832e-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {6571693b-872a-11e5-8258-1078d2456fc1} - "G:\Lenovo_Suite.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {81cc97ae-7f18-11e6-8362-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {89cf2cfe-6888-11e7-8418-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {8b8525a1-8489-11e6-8365-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {aca4e82c-e5dd-11e4-8254-1078d2456fc1} - "G:\Windows/AutoRun.exe"
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {ba468bb8-37bb-11e6-82f4-1078d2456fc1} - "G:\Setup.exe" /s
HKU\S-1-5-21-3055066789-2150723284-2354629069-1002-{ED1FC765-E35E-4C3D-BF15-2C2B11260CE4}-0\...\MountPoints2: {e6612b20-b523-11e6-837f-1078d2456fc1} - "H:\Windows/AutoRun.exe"
End
- Go to File → Save As and save it as fixlist.txt on Desktop
- Open again FRST and click on button Fix
- Wait until FRST finishes
- fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.
What version of avast do you have ?
As the latest version 17.5.2232 has a function to have avast in passive mode. AvastUI > Settings > Trouble shooting.
fixlog
@davidr, i restarted the computer as required but the restart is again still required, and i thought of switching it off and turning it back on, but the button doesn’t move. Is that normal?
Did restart again, but the restart is still apparently required, and i cannot move the passive mode button back. Normal?
I’m at a loss as to what else to suggest, given that avast is in Passive mode, I don’t know if the changes occur when you reboot or whether Avira is getting in the way of any changes after the reboot.
Quite simple, only run one AV…!! That’s it.
https://www.avast.com/faq.php?article=AVKB11#artTitle
I did notice when i first tried turning it on, a notification pop up appeared on lower right of the screen, it was a progress bar saying avast is turning off active protection. The progress bar did not move for about 4 or 5 mins so i opted to close it instead thinking it’d run quietly in the background. I might probably need to uninstall avast and install again. I did switch off real time and internet protection on Avira on my third try, but when the computer finishes restarting it is on again. So it’s off during one session and On on the next restart.
Just checked and the “restart required” is not showing anymore, and i can move the passive mode button back. I still can’t download anything off the internet on chrome.
Remove both avira and avast completely and install only one of them.
Let’s see if that solves the problem.
I’d like to hear from sassdrake, if the alternative process is still going to be continued or uninstall one of them.
Instead of running two AV, why not use a online scanner as second opinion when you want to, then you avoid conflict
F-Secure / Kaspersky / ESET / TrendMicro / Panda have online scanners
I might do that. Sassdrake is quiet.