Same problem faced and same solution followed. Neither iswizard.rar nor wuaudit.exe are generated in my Temp directory now. Thank you for effective guidance!
also my problem. but in first step- scanning with malwarebytes anti-rootkit- maybe in mid of the process my system restarted. no window to continue scanning or report, nothing. what could it be ? i´m not expert so maybe the solution is easy, i don´t know. thank you
@Zam1990
I’m glad I could help. 
@ iv01 ; @ujec
Basically you follow the instructions that were written and made for the user who opened this topic. Following such instructions can even damage your system because of Zoek and MBAR …well, they are not toys.
You need to open a new topic following this guide:
http://forum.avast.com/index.php?topic=53253.0
One of us will assist you with removing malware.
Hi, i have executed the first step of this guide, i attach my zoek reports. Are neeed other step?
BR
Hi and welcome to avast.
That zoek log isn’t written for your machine.
One more time:
This is the topic of this user. You all feel free to open a new topic if you are looking assistance, set&attach the logs for review:
Follow guide from here: http://forum.avast.com/index.php?topic=53253.0
AdwCleaner ← cleening adware & junkware …
Malwarebytes ← preventive & first step for malware removal
OTL and aswMBR ← primary system and antirootkit tool diagnostics.
i have problem with aswMBR, it will crash during scanning the directory c:\Windows\asswmbly\GAC_MSIL. I tried to move the file tath cause the crash but without success because they are plentiful. the file are System.Security
System.Security.resources
system.servicemodel.install
system.servicemodel.install.resources
system.servicemodel.resources
System.ServiceModel.WasHosting
System.ServiceModel.Web
System.ServiceModel.Web.resources
System.ServiceProcess
System.ServiceProcess.resources
System.Speech
System.Speech.resources
System.Transactions.resources
System.Web.Abstractions
System.Web.Abstractions.resources
System.Web.DynamicData
System.Web.DynamicData.Design
System.Web.DynamicData.Design.resources
System.Web.DynamicData.resources
System.Web.Entity
System.Web.Entity.Design
System.Web.Entity.Design.resources
System.Web.Entity.resources
System.Web.Extensions
System.Web.Extensions.Design
System.Web.Extensions.Design.resources
System.Web.Extensions.resources
System.Web.Mobile
System.Web.Mobile.resources
System.Web.RegularExpressions
System.Web.resources
System.Web.Routing
System.Web.Routing.resources
System.Web.Services
System.Web.Services.resources
System.Windows.Forms
System.Windows.Forms.DataVisualization
System.Windows.Forms.DataVisualization.Design
System.Windows.Forms.DataVisualization.resources
System.Windows.Forms.resources
System.Windows.Presentation
System.Windows.Presentation.resources
System.Workflow.Activities
system.workflow.activities.resources
System.Workflow.ComponentModel
system.workflow.componentmodel.resources
System.Workflow.Runtime
system.workflow.runtime.resources
System.WorkflowServices
System.WorkflowServices.resources
System.Xml
System.Xml.Linq
System.XML.resources
TaskScheduler
TaskScheduler.Resources
UIAutomationClient
UIAutomationClient.resources
UIAutomationClientsideProviders
UIAutomationClientsideProviders.resources
UIAutomationProvider
UIAutomationProvider.resources
UiAutomationTypes
UiAutomationTypes.resources
VSTADTEProvider.Interop
WindowsBase
WindowsBase.resources
WindowsFormsIntegration
WindowsFormsIntegration.resources
WsatConfig
There is an alternative to the log of aswMbr?
Many thanks
I have try to explain this guide( http://forum.avast.com/index.php?topic=53253.0) but aswmbr crash. Have any solutions?
Br
If aswMBR can’t run just wrate that into your topic.