My pleasure ;D
Something just dawned on me. You commented below: Now the best part of the day ----- Your log now appears clean
Thing is, after I did that last boot scan to see if the rootkit had been removed, I didn’t send you any new logs so that clean log would have been from before the rootkit. I’m assuming this is because the tools you gave me to run would not have detected a rootkit … Is this correct?
Is it normal for a rootkit to have gotten past my security measures? I don’t go to anything like porn sites or off-the-wall sites. My Internet usage is very tame.
Also, the fact that I used my credit card service for both charges and payments while I apparently had this Win32:Malware-gen and a rootkit on my system … Should I be concerned about this?
It is always worth after an infection to ask your bank to monitor your account for a while
What was the location of the detected file … Was it in Qoobox or OTL moved files ?
I have no idea. The avast window popped up telling me a rootkit had been detected and should be removed right away. I clicked on the box to remove it and am afraid I didn’t read or look close enough – think I got panicked! Then after I clicked to delete it I was advised to run another boot scan, which I did, and it showed clean. Is there any way to find out what this item I deleted was?
The log should be here C:/Program Data/Avast Software/Avast/Report/aswBoot.txt
I found the log; did you want it?
Funny thing is, there is no mention of a rootkit detection. I promise you that it was an avast window that appeared and said a rootkit had been detected and this item should be removed right away; then gave a box to click for deleting it; then asked for another boot scan to make sure the infection was cleared. The two scans I did on 7-10 both show 0 infections.
No I trust you, I wonder whether it detected the quarantined files that we had tucked away… How is the computer behaving ? Still good
Everything appears to be good. The quarantined files dealt with Win32:Malware-gen, and this would not be a rootkit would it?
My computer seems to be acting fine. I’m just very curious as to why avast would have shown a rootkit, but yet it wasn’t in the report. Even if it was removed it seems it still should have shown up in the report.
I’ll maybe start doing a boot scan occasionally. Only thing is, it takes so long to complete, and if you aren’t sitting right here it closes out and you don’t know what was there – except I guess now I could go into that location you gave me and check: C:/Program Data/Avast Software/Avast/Report/aswBoot.txt.
Nikilet,
If you are concerned with the financial transactions, as Essexboy mentioned, have your financial companies monitor for a while (ask to speak to the Fraud Dept.), put a Fraud Alert on your credit reporting agencies (good for 90 days, then keep renewing - free), ask your bank and/or credit card company to change your account number if you are really concerned, do a free Annual Credit check (you can do one quarterly with each of the 3 companies in the US), keep checking online your transactions, and change your passwords on the accounts you used (make them stronger as well).
I’m reopening this because I think there may be something funny going on with avast. If you will review the above, avast advised of a rootkit found but nothing showed up in the boot scan. Now it happened again. I hadn’t had my computer on for 5 days as I was gone. I came home and turned it on. When I booted everything came up but it appeared to be frozen so I had to do a forced shutdown and restart. It did boot, but shortly after boot avast again popped up with a rootkit warning. I didn’t delete or take any action but I did take a picture of the screen this time. This rootkit seems to have something to do with Malwarebytes. That doesn’t seem right. Is avast giving some kind of false positive?
I really hate to say this but just recently avast seems to be acting up a bit on my system. It seems to really take a long time to boot up whereas it never used to. I have plenty of RAM, and I don’t have that much extra running at startup. For instance, I start Malwarebytes immediately after everything has loaded and do not have it set to auto start at boot.
I have had no response to this post and I am concerned. I would sure appreciate if someone would reply. I’m beginning to wonder if some of the latest updates for avast have resulted in problems. I’ve noticed that if I shut down my computer and reboot it takes avast forever to load. Right now I’m concerned about what would appear to be another rootkit on my system – either than or avast is reporting false positives.
I just checked to make sure avast was updated. Please look at this screen where it starts out … Last encountered error. What does this mean?
Hi Nikilet,
Last encountered error usually happens when a manual update is called for when the automatic update is already running in the background.
As for the post just prior, Avast! runs a rootkit scan 8 minutes in after the system is first started as cold boot. Read this thread here and see if this helps: http://forum.avast.com/index.php?topic=96873.0
If you need additional help, please ask.
That rootkit alert is flagging the Malwarebytes service for some reason
It is not a problem with regards to infection… But it is as an annoyance…
I will install MBAM on my system to see if I can get that alert, if so I will forward it to Avast as a FP
Thank both of you for the responses. MBAM and avast have run so good together. I hope they are not going to start have conflicts with each other.
mchain: Yes, I would say that these notices of rootkit infection happened approximately 8 minutes after booting.
Now, can either of you tell me WHY avast has become so slow booting? Or should I go to another forum topic for this?
I did a Google search and found another person with the EXACT same problem as I am having with avast and the slow boot situation. To use his words: The screen appears quickly and is populated rapidly with my tray and quick launch icons but, but, but. . . The orange ball for Avast seems to take forever as it spins, stops, spins, slows down, freezes, then resumes. During that time, none of the on-screen icons are accessible.
He goes on to say: I really don’t want to quit Avast and go somewhere else, but I note that my experience of boot time delay isn’t unique: in recent months, quite a number of Avast users have posted on the Avast forum and elsewhere on the 'Net saying that Avast is seriously degrading boot-time performance. So far though, there seems no acknowledgment of any problem by Avast, and no fixes.
This post was made July 12 so is pretty recent. Do you know if there has been any solution to this problem?
Nikilet,
essexboy has picked up your thread once more, so I would wait to see what his answer is. Normally, when the help/assistance reaches the point where the tools used are removed, the malware expert will drop the thread, but, here, in this case, that is not what happened. You should have an answer very soon. No post is needed elsewhere.
Could you open Avast go to shields > File system shields > Advanced settings
And confirm that you have the same settings as me
Yes, I do.
OK back away for a quick think… This continuous scanning appears after the desktop loads is that correct ?
Sorry. I’m not sure what you mean when you say “this continuous scanning.” My system works the exact same way as the poster I found. I takes forever for the avast icon to even come up, and then it will freeze, spin, stop, slow down and freeze again and while all this is happening none of the on-screen icons are accessible, just as the poster wrote. I think he mentioned that his computer takes 4 minutes to boot, but I’m sure mine has been taking a lot longer. And it was gradual. I noticed that it was getting slower … and then slower still … and still slower. Lately it’s been almost like it isn’t going to complete the process at all.
I did install Soluto and then restarted, but apparently the avast firewall is blocking Soluto. How can I rectify that?
Set Avast to start after windows services