compromised avast_one_essential_setup_online.exe

Has anyone run into a compromised download of avast_one_essential_setup_online.exe?? If so, did you remedy it’s effects? How?

My friend downloaded it onto his recently acquired laptop (from a deceased sister) along with other avast install downloads. He was having trouble getting it to install and asked me for help. I tried to install a download named just and had trouble, so I was just looking at his downloads directory, saw this “avast_one_essential_setup_online.exe” and without thinking (or investigating) ran it. It ran showing 100%, then seconds later started another process and one second in, bang, system crash. I have been unable to boot since.

I have since googled the name and found a reference on a site called “https://any.run/report” which I believe is a project out of sourceforge, that reports malicious behavior of “removes files from windows directory”. I believe that is my problem now, because I have reinstalled windows from recovery and it boots and runs fine. Also, the old uefi is fine, but once it points to c:windows to run - nothin!

If you recovered from this, what files did you have to put into your windows directory to enable boot?

Test the file at VT (https://www.virustotal.com) and post the link to the result here.

I’d suggest booting into Safe Mode. Check to see if there is a restore point prior to the time you ran
the Avast online setup file.
If there isn’t any restore point, you might think about running the Avast removal tool in Safe Mode if you can get to Safe Mode.
https://www.avast.com/uninstall-utility#pc