magna86
23
Hi,
Your suggest sounds good but for trying at next case. As in this case, I have been remove all avast driver files ( + OP doesn not respond ) therefore there is nothing from Avast to load in the kernel as I removed by force. I am familiar with disabling driver signature but there are no more of these ‘avast’.sys drivers. They are in FRST Quarantine now.
Related to re-installation Windows, you can’t know whether the user has the OEM license (which is bound for MBR) or not. By re-installation, MBR shall be overwritten and OEM shall be lost.