Virus Infects My Avast Anti-Virus? Please Assist

-My Avast anti-virus is acting as if it’s been infected.
-My toolbar icon shows orange avast with Red X.
-When I try to log into my account from the Avast User Interface, it allows me to log in, then takes a few minutes to load. I see my account in the background, showing my license is up to date; however, message displays “Your Device Has Been Disconnected from Your Account, Please Sign in Again”.
-When I try to log into my account from Avast Website, it just shows continuous loading, for 40 minutes +; yet, oddly enough, no classic “your connection has timed out” message,nothing, just continuous loading.
-I was only able to access forum by performing a Bing Search for the avast message.
-The Avast WEBforum viruses and worms link came back in the search, I clicked it and viola, it acted as if I was already logged in.
-I’ve already seen the posts “Add this Device to Your Account” this isn’t that

  • I’ve been to AvastIU> Settings> General- Avast Account Status, and have yet to see option available at all to connect the device.
    -Under Settings, when I choose “Update”, error message shows “Avast Service Is Not Running.”
    -Tried to take a screen shot to show that it showed Green, Active. Yet just now when I went back to get another screen shot of the error message I received once I clicked Update, it looks completely different and now shows under Settings>Update> Virus Definitions: Unknown, Connection Unknown
    Under Program> It Reads
    Version 10.3.225
    Release Date 12/31/1969
    -It won’t allow me to Update, won’t allow me to access my account, and settings keep changing.
    -All 5 Shields are disabled, and won’t allow me to re-enable
    -Under My Control Panel > System & Security > Action Center I have an alert for "Anti-virus Protection (Important) avast! Antivirus reports that it is turned off.
    -Gives me option to “Turn on Now”
    -When I Select it I get pop up “Do You Want to Run This Program? You Should ONly Run Programs from Publishers You Trust”
    -Shows Publisher as: AVAST Software a.s.
    -Program C:\Program Files\AVAST Software\Avast\VisthAux.exe
    -I choose Yes, I trust this publisher and want to run this program
    -And nothing happens, I wait, I reboot, etc

Please Help, does any of this sound odd? I feel as though some virus/hacker is trying to keep Avast from running so it can continue to do whatever it is trying to do un-noticed in the background
-Wouldn’t put it past my ex-husband to try something like this, we are going through custody battle
-But even if this is so, there’s got to be a way to stop it and prevent further access
-I could just be being paranoid, but it doesn’t feel too good that my Anti-Virus program isn’t working for me
-I’ve already spent the money on a renewal license months ago so I need this program to do what it is supposed to do
-I am a tech support agent, so If you’ve got some troubleshooting steps, excellent, they’d be much appreciated, but please feel free to not ask basic questions like, have you tried restarting your computer?
Here are my specs:
Manufacturer: Hewlett-Packard
Model:HP G60 Notebook PC
Processer: Pentium (R) Dual-Core CPU T4300 @ 2.10GHz 2.10GHz
Installed Memory (RAM): 4.00 GB
OS: Windows 7
Type: 64-Bit Operating System

Please advise.

Thank you,
Rachel

Attach your basic diagnostic logs. (MBAM, FRST and aswMBR)
Instructions: https://forum.avast.com/index.php?topic=53253.0

Version 10.3.225 [b]Release Date 12/31/1969 [/b]

It’s the release date that’s bothering me there…

Yes, the release date seemed pretty strange to me too. I’ve attached the requested files.
Thank you guys, I really appreciate the assistance.

OK, now you’ve to wait a bit…

I reckon the best bet at this stage is to remove the little adware present and then do a full re-install of Avast

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: HKU\S-1-5-19\...\Run: [Exetender] => "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" HKU\S-1-5-20\...\Run: [Exetender] => "C:\Program Files (x86)\Free Ride Games\GPlayer.exe" HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre6\bin\jp2ssv.dll => No File BHO-x32: No Name -> {0347C33E-8762-4905-BF09-768834316C61} -> No File BHO-x32: No Name -> {d2ce3e00-f94a-4740-988e-03dc2f38c34f} -> No File BHO-x32: No Name -> {FFFFFFFF-CF4E-4F2B-BDC2-0E72E116A856} -> No File Toolbar: HKLM-x32 - No Name - {1E61ED7C-7CB8-49d6-B9E9-AB4C880C8414} - No File Toolbar: HKU\S-1-5-21-2596019795-3223947411-953716397-1000 -> No Name - {604BC32A-9680-40D1-9AC6-E06B23A1BA4C} - No File FF HKLM-x32\...\Firefox\Extensions: [{7BA52691-1876-45ce-9EE6-54BCB3B04BBC}] - C:\ProgramData\Norton\{0C55C096-0F1D-4F28-AAA2-85EF591126E7}\Norton\coFFPlgn => not found 2015-10-27 12:46 - 2014-11-24 18:53 - 00000000 ____D C:\ProgramData\APN 2014-10-22 21:43 - 2014-10-22 21:43 - 0000000 _____ () C:\Users\Ed\AppData\Local\{F0E0B9D4-ED04-466F-840E-EDC83D340B96} CustomCLSID: HKU\S-1-5-21-2596019795-3223947411-953716397-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Ed\AppData\Roaming\Dropbox\bin\Dropbox.exe /autoplay => No File CustomCLSID: HKU\S-1-5-21-2596019795-3223947411-953716397-1000_Classes\CLSID\{355EC88A-02E2-4547-9DEE-F87426484BD1}\InprocServer32 -> C:\Users\Ed\AppData\Local\Google\Update\1.3.23.9\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-2596019795-3223947411-953716397-1000_Classes\CLSID\{90B3DFBF-AF6A-4EA0-8899-F332194690F8}\InprocServer32 -> C:\Users\Ed\AppData\Local\Google\Update\1.3.24.15\psuser_64.dll => No File CustomCLSID: HKU\S-1-5-21-2596019795-3223947411-953716397-1000_Classes\CLSID\{FE498BAB-CB4C-4F88-AC3F-3641AAAF5E9E}\InprocServer32 -> C:\Users\Ed\AppData\Local\Google\Update\1.3.24.7\psuser_64.dll => No File Task: {080E40C9-7B9D-4D85-8401-BCB24AFB570A} - \ProgramRefresh-ATFST -> No File <==== ATTENTION Task: {13064C27-7904-4A38-9032-ED565AA771BB} - System32\Tasks\{679E7B3A-FB2B-4A15-A6A6-70C51089A3B2} => pcalua.exe -a C:\Users\Ed\AppData\Local\Temp\Temp1_ac_addin_win_971.zip\setup.exe Task: {31D669FC-0FB7-47C5-BC10-5CD76428887E} - System32\Tasks\{69A91CC1-BE31-4BB6-A8E1-8B1A7C828DC7} => pcalua.exe -a E:\setup.exe -d E:\ Task: {64DEB8DD-15BE-48EB-AFB8-71779EC34F2B} - \BitGuard -> No File <==== ATTENTION Task: {762E37C7-32A0-42FC-A82A-A6263193F5B8} - System32\Tasks\Express FilesUpdate => C:\Users\Ed\Desktop\Soldworks 2013\ExpressFiles\EFUpdater.exe <==== ATTENTION Task: C:\Windows\Tasks\FreeFileViewerUpdateChecker.job => C:\Program Files (x86)\FreeFileViewer\FFVCheckForUpdates.exe <==== ATTENTION C:\Program Files (x86)\FreeFileViewer RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S0].txt as well.

FINALLY

Download Avast Uninstall Utility to your Desktop.
Download the correct version of Avast
Avast Free
Avast Pro
Avast Internet Security
Avast Premier
Disconnect from the net
Uninstall Avast via control panel

[]Run the uninstall tool and accept the reboot to safe mode
[
]Once complete reboot your system
[*]Reinstall Avast


:-* You guys are awesome! Thank you for your help. The computer is running much better now. I think the adware issue is fixed.
The only thing that is still causing it to run slower than necessary is because of the unnecessary 67 apps/processes that are running. Can’t really afford to pay the extra to Avast to clean this up for me. If you guys have any recommendations (not sure if you’re allowed to do that) on a free download that does the same thing that would be great.
Attached are the logs requested.

Thank you again!!

Download autoruns from here https://technet.microsoft.com/en-gb/sysinternals/bb963902.aspx
Run the programme
Select the Logon tab
Remove the ticks from things that you do not need

This is exactly what is happening to me. Please help! Only difference is that I have a Dell Inspiron N5010

Thank you for any help!
Erin

Erin,

if you want help, start your own thread and provide the log files.