Can't Upgrade

Asyn · 2015-10-30T05:30:54.000Z

To rule out an infection, attach your basic logs. (MBAM, FRST and aswMBR…!!)
Instructions: http://forum.avast.com/index.php?topic=53253.0

bob3160 · 2015-10-30T13:28:43.000Z

Be Secure post:4:

In that case try Avast cleaner:
http://files.avast.com/iavs9x/avastclear.exe
Run it.
Then you can download and install from here:
http://files.avast.com/iavs9x/avast_free_antivirus_setup.exe

Always download the files you need before you remove your current protection.
That’s a simple rule that should always be followed.

system · 2015-10-30T14:33:22.000Z

I did a scan the other day with MBAM and quarantined a file called PUP.Optional.Yontoo. I researched it and it seemed rather vague (At least for someone with little knowledge about this stuff aka Me. XD) on whether or not it was actually anything bad, so I just left it in quarantine for now.

I will do a new scan with MBAM and the other two you’ve mentioned Asyn, and relay the logs. This laptop is an IBM Thinkpad and it’s…rather a mess, so if nothing viral presents itself, my next guess is it’s just my laptop being broken. Heh

Thank you again, to everyone taking the time to assist me! It is greatly appreciated!

system · 2015-10-30T15:33:29.000Z

Sorry, here are the files.

system · 2015-10-30T15:34:12.000Z

I derped. I hadn’t noticed you could actually attach files on here. Sorry!

(I am finishing up the aswMBR now)

system · 2015-10-30T17:07:35.000Z

OK. Got all 4 logs up.

bob3160 · 2015-10-30T20:15:12.000Z

equinesoul post:11:

OK. Got all 4 logs up.

Next you’ll need to wait fro a Malware removal expert. I’ve notified one. Please be patient, there might be a time difference.

system · 2015-10-30T21:17:06.000Z

Thank you!

essexboy · 2015-10-30T21:18:57.000Z

Run this fix from safe mode and then run avast clear again

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6111824 2015-09-09] (AVAST Software) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll [2015-09-09] (AVAST Software) BHO: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File BHO: No Name -> {6c97a91e-4524-4019-86af-2aa2d567bf5c} -> No File BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-09-09] (AVAST Software) Toolbar: HKLM - No Name - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - No File FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-09-09] [not signed] CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-06] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-09-09] (AVAST Software) R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24016 2015-09-09] (AVAST Software) R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [76000 2015-09-09] (AVAST Software) R1 AswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-09-09] (AVAST Software) R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49776 2015-09-09] (AVAST Software) R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [788784 2015-09-09] (AVAST Software) R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [433264 2015-09-09] (AVAST Software) R3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [161472 2015-09-09] (AVAST Software) S3 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-09-09] (AVAST Software) R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [208664 2015-09-09] (AVAST Software) S1 SBRE; \??\C:\WINDOWS\system32\drivers\SBREdrv.sys [X] Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

system · 2015-10-31T13:44:19.000Z

Ok, I got the txt file ready, and I tried to load in safe mode but nothing happened…I’m probably doing it wrong, and I apologize for my lack of knowledge. I thought it was just hitting F8, but it just booted normally.

I have an IBM Thinkpad Lenovo T60. Is there a different way to get into safe mode?

bob3160 · 2015-10-31T13:51:42.000Z

equinesoul post:15:

Ok, I got the txt file ready, and I tried to load in safe mode but nothing happened…I’m probably doing it wrong, and I apologize for my lack of knowledge. I thought it was just hitting F8, but it just booted normally.

I have an IBM Thinkpad Lenovo T60. Is there a different way to get into safe mode?

Are you hitting the F8 key repeatedly ??? Hitting it just once or holding it down doesn’t work.
This may also help you to get to safe mode if F8 fails:
https://www.youtube.com/watch?v=xb5n6kTqQ1A

system · 2015-10-31T13:53:35.000Z

So I just need to be more aggressive in my demands? XD I’ll give it a go! I had only hit it once.

system · 2015-10-31T14:06:55.000Z

OK, I got into safe mode and ran the Fix option in FRST, but it gave me a pop up after a few moments of running and said it had encountered an error and had to stop. I do have a log though (Attached). I don’t know if it is a result of the fix attempt, but when I booted normally, Avast didn’t display in my icon tray like normal, though I checked and I still have the program.

essexboy · 2015-10-31T14:36:04.000Z

Could you re-run the fix in safe mode please

system · 2015-10-31T14:50:15.000Z

It said it was successful this time. Should I go ahead with the Avast Clear again? Also, should I run it and allow it to restart in safe mode or is it better to boot in safe mode, then run it?

essexboy · 2015-10-31T14:53:17.000Z

Aye try Avastclear again if it does not work this time I will then manually remove the files

system · 2015-10-31T15:29:13.000Z

OK, The avastclear worked, I reinstalled it, and it seems to be functioning normally again. It shows I am on Virus Definition version 151031-0 and Program Version 10.4.2233.

essexboy · 2015-10-31T15:39:42.000Z

Glad to hear

You can delete FRST and its folder

system · 2015-10-31T15:44:48.000Z

What about the aswmbr? Is that still needed? Thank you SO MUCH for your help.

Asyn · 2015-10-31T15:46:14.000Z

equinesoul post:24:

What about the aswmbr? Is that still needed?

Nope.

Announcements