Hi all,
I would appreciate any help or advice regarding this problem i am experiencing with Avast (program version 6.0.1125).
Around a week ago my pc was infected with the horrid Ms Removal tool virus and a the Antimalware Doctor virus. These two viruses hijacked my machine, i was not able to open any files or the web, because i was bombarded with several threatening messages to purchase their fake anti-virus software. I googled from another machine and found some help tips here: http://au.answers.yahoo.com/question/index?qid=20110410235423AA3tAag
-
Locate and left click “Start” Button.
-
Then left click “My computer”
-
In the “My Computer” address bar copy and paste this file C:\Documents and Settings\All Users\Application Data\ then press “Enter” on your keyboard.
-
Locate a randomly named file for example “hGdKHt0842”, “GfdKHt0842” or anything else that looks familiar to the following examples.
-
Once file is located Right click on that file and click “Rename”. Rename the file by copying and pasting C:\ProgramData\virus\virus1.exe
-
Then close all applications and “Restart” your computer.
-
Once restarted “MS Removal” should not pop up at this point.
-
Then redo steps 1, 2 & 3. And then go ahead and Delete the renamed file C:\ProgramData\virus\virus1.exe
-
Empty your recycle bin.
10 . And WALA!! your PC is restored.
I was grateful that after following these instructions, i could now access my files and the internet without those ridiculous threatening pop upsn so i installed Malwarebytes’ Anti-malware and ran a scan. I also asked someone for advice from another site and they told me to run Combofix to make sure my machine is free of viruses. I did this and everything seemed fine again, however i noticed that even though i was only using firefox, the ie browser suddenly would start opening by its self, advertising Groupon and other random sites. I was concerned, thinking there is a problem with ie, so i go to add/remove programs in control panel and i remove ie. I cant be bothered with the hassle of ie playing up now that ive removed the virus (or at least i thought i removed the virus). Later i notice that new tabs start opening up even in firefox by themselves! Im still able to use my PC at this point. Again following advice from someone on youtube, i was advised to install Avast antivirus. I installed and ran a scan, i dont want to go into detail with posting the log but basically there was a virus or several in my temp folder, this is an example of what Avast would bring up C:\Documents and settings\Administrator\Local Settings\temp\0.6004251575328295.exe is infected by win32:Aleuron-ACM…
After the scan completed i connected to the internet, Avast displayed pop ups saying there were viruses detected or problems with the svchost.exe file from the win32 folder
Also there were lots of pop ups saying it had blocked Malicious URL’s, when these URLs were not even malicious. I could not even open the forum/homepage for Avast or anything relating to Avast and any page that has some sort of antivirus is being blocked by Avast even until now. Also i’d like to add that my CPU was very high at 100% and not dropping.
I googled this problem and came across this http://forums.techguy.org/virus-other-malware-removal/986224-nasty-virus-avast-detects-svchost.html
I followed advice from this site and installed tdss killer from http://support.kaspersky.com/viruses…?qid=208280684
The scan detected a virus in the rootkit (sorry im not very technical, i think thats what it was called) Anyway it removed it and restarted my PC. My CPU dropped from 100% to max of 88% and lowest 40%, so i noticed much improvement. Also i did not receive any pop ups regarding malicious URLs whereas i was receiving them almost every 5 minutes. However i still cannot connect to other sites, like Avast or Antivirus sites and just sites that will give me advice regarding this problem. All of these sites are being blocked. As well as this, since installing Avast, my homepage in Firefox is set to Facebook. I have tried changing this several times through tools, options, General and then in Home page, i change the facebook address to google and i click on OK. But i re-open Firefox and it still opens up to the Facebook home page. Has my homepage been hijacked by some sort of virus pretending to be facebook??
So basically, i can now use my PC and access only certain webpages, i dont receive any pop ups and when i scan using Avast or Malwarebytes’ Antimalware, the scan doesnt bring up any viruses but i feel suspicious why facebook has hijacked my home page and why i cant open the Avast website other web pages.
Any help would be appreciated and im sorry if ive posted in the wrong place!
Thank you,
Sereena