virus ruined pc ?

a buddy of mine needed help with his pc . he said he got a virus and stuff. i removed the virus/malware/adware and updated all the software and everything i could do .but if i download anything from chrome it crashes the pc and if i try to install avast anti virus it crashes with a blue screen and says bad pool heading . i did multiple check for hadware issue and more but i cant figure this out .
i been using usb to get stuff to the pc . firefox you can download and install files . i downloaded sophos virus removal to do a virus scan wish mwb might have missed . honestly if anyone can help me id apprentice it and i really cant figure this out …

what i did / tried

i tried SFC /SCANNOW. in cmd found no issues
used MWB to scan pc for malware found 3 and 752 files that where potentially unwanted .
used ADWCleaner found 3 files and removed those
used rkill found no issue
used tdsskiller found no issue
used sofos to do last scan for malware and virus nothing found now


Sorry for bad English

Attach your basic diagnostic logs. (MBAM and FRST)
Instructions: https://forum.avast.com/index.php?topic=194892

Added aditional information

Sass Drake has been contacted - however it may be a number of hours before he is able to assist.

I see that you already used many malware removal tools but still one remains.

  • Open Notepad (click Start button → type notepad.exe → press Enter)
  • Copy text from code block below and paste it into Notepad
HKU\S-1-5-21-3201618661-983202930-2711339707-1000\...\RunOnce: [Application Restart #0] => C:\Windows\SysWOW64\mshta.exe "C:\Users\Zkans\AppData\Local\Temp\HYD5B49.tmp.1471110177\HTA\index.hta?bittorrent"  "C:\Users\Zkans\AppData\Local\Temp\utt889.tmp.exe" /CLIENTARGS "/bringtofront" /LOG " (the data entry has 442 more characters). <==== ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <==== ATTENTION
VirusTotal: C:\Users\Zkans\AppData\Local\Temp\utt889.tmp.exe;
C:\Users\Zkans\AppData\Local\Temp\utt889.tmp.exe
EmptyTemp:
  • Go to FileSave As
  • Make sure that UTF-8 is selected as Encoding (left side of Save button)
  • Save it as fixlist.txt on Desktop
  • Open again FRST and click on button Fix
  • Wait until FRST finishes
  • fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.

thank you
done
i will wait for further instructions

What is system status now?

i can download using chrome know . but i still cant install avast

Do you get any error message when you try to install Avast?

https://imgur.com/a/vvWX4

its the exact same error when i was trying to download from chrome . wish works know

i might just have to format the whole pc

Hello

Wait for news from the expert, while you can do:

Have you verified reinstalling the pc drivers? it may be that by removing the virus or the remnants of it you will remove some file from the drivers or even worse from windows.
1º visit the page of your pc model and reinstall the drivers, such as video etc
http://www.nirsoft.net/utils/blue_screen_view.html

It looks like hardware issue to me. Test your RAM for faults with MemTest86+.

the ram and the hard drives have no issue first thing i checked using windows built on tool

error 1 aswSP.SYS aswSP.SYS+b92f fffff8800490a000 fffff8800496c000 0x00062000 0x52204be5 2013-08-30 08:38:13 avast! Antivirus avast! self protection module 8.0.1497.376 AVAST Software C:\Windows\system32\drivers\aswSP.SYS

error 2 ntoskrnl.exe ntoskrnl.exe+1a6cbe fffff80003449000 fffff80003a2f000 0x005e6000 0x59b946d1 2017-09-13 15:55:13 Microsoft® Windows® Operating System NT Kernel & System 6.1.7601.23915 (win7sp1_ldr.170913-0600) Microsoft Corporation C:\Windows\system32\ntoskrnl.exe

those 2 are causing the crash according to WinCrashReport

should i delete them ? i did some google and apparently it is not advice to delete system files ;D :o . i need to replace them with working versions that dont give the error but looks very complicated to do

Hi.

Wait for the expert.

I meant : BlueScreenView v1.55

http://www.nirsoft.net/utils/blue_screen_view.html

  • Open Notepad (click Start button → type notepad.exe → press Enter)
  • Copy text from code block below and paste it into Notepad
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-08-30] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
S2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [243296 2016-06-04] (AVAST Software)
C:\Program Files\Alwil Software
C:\Windows\System32\Drivers\aswFsBlk.sys
C:\Windows\system32\drivers\aswMonFlt.sys
C:\Windows\System32\Drivers\aswrdr2.sys
C:\Windows\System32\Drivers\aswRvrt.sys
C:\Windows\System32\Drivers\aswSnx.sys
C:\Windows\System32\Drivers\aswSP.sys
C:\Windows\System32\Drivers\aswTdi.sys
C:\Windows\System32\Drivers\aswVmm.sys
  • Go to FileSave As
  • Make sure that UTF-8 is selected as Encoding (left side of Save button)
  • Save it as fixlist.txt on Desktop
  • Open again FRST and click on button Fix
  • Wait until FRST finishes
  • fixlog.txt should be genereted and opened. Attach it your post and wait further instructions.

done, added

Please post new FRST logs.

added again

New FRST logs = new FRST.txt and Addition.txt logs.

new FRST and addition added