Help - Search - Members
Full Version: avast is preventing me from installing kaspersky, can't get online as well.
Kaspersky Lab Forum > English User Forum > Virus-related issues
hamdan??
hi there,

currently i am trying to help out a co-worker to install kaspersky onto her desktop, but it seems that an antivirus programme is preventing me to do so, could it be a virus infested programme? can any give any solutions,

the kaspersky that i am trying to install are KIS2009.

had attached the snapshot of the avast location & a confirm virus/problem(my pendrive was found to contained the highlighted virus just by taking her computer snapshot) on her computer.

thanks in advance.
hamdan??
i am not sure whether that i need to do it now, but since that i had done it, therefore i am attaching it.

but i am not sure that whether that it had run complete or not as the computer did reboot but, it is not successfully reboot, as while trying to install KIS07 or something, it also encounter the same problem when i am trying to instal KIS20009. therefore i had tried once, but unsuccesful.

so i cancelled the installation and just obtained the AVZ report.

i hope i had did it right and somebody can help, thanks again.
richbuff
While I review your avz log, see the Avast removal tool: http://www.avast.com/eng/avast-uninstall-utility.html And try to uninstall Avast the normal way, via Windows Control Panel > Add/remove programs, First, before using the uninstall utility, if needed.

Edit: In addition to the above:

Run this script, instructions: http://forum.kaspersky.com/index.php?s=&am...st&p=678368 PC will reboot:
CODE
begin
SetAVZGuardStatus(True);
SearchRootkit(true, true);
QuarantineFile('C:\WINDOWS\system32\nmdfgds0.dll','');
QuarantineFile('C:\WINDOWS\system32\olhrwef.exe','');
DeleteFile('C:\WINDOWS\system32\olhrwef.exe');
DeleteFile('C:\WINDOWS\system32\nmdfgds0.dll');
BC_ImportDeletedList;
ExecuteSysClean;
BC_Activate;
RebootWindows(true);
end.

After run script, attach a Combofix log, please review and follow these instructions carefully.

Download it here -> http://download.bleepingcomputer.com/sUBs/ComboFix.exe

Before Saving it to Desktop, please rename it to something like 123.exe to stop malware from disabling it.

Now, please make sure no other programs are running, close all other windows and pause Kaspersky (right click the K icon and click pause protection > Choose the
option "resume manually" if still active) until after the scanning and removal process has taken place.

Please double click on the file you downloaded. Follow the onscreen prompts to start the scan.
Once the scanning process has started please DO NOT click on the Combofix window or attempt to use your computer as this can cause the scanning process to stall.
It may take a while to complete scanning and this is normal.

You will be disconnected from the internet and your desktop icons/toolbars will disappear during scanning, do not worry, this is normal and it will be restored after
scanning has completed.

Combofix will create a logfile and display it after your computer has rebooted. Usually located in c:\combofix.txt, please attach it to your next post. Also, please don't
forget to resume the Kaspersky that you paused.
hamdan??
i actually had tried to removed from the windows control panel before, and there no more avast showing on the add/remove programs, but when i try to install KIS2009, it still mention to uninstall avast.

therefore i think i will try to removed it by avast removal tool, can i ask, it which folder should save the uninstall untility and if the e.g. if the avast folder is c:/program files/alwil software.

do i need to install the removal tool in c:/program files/alwil software or can i install it at desktop?

thanks you, richbuff.
richbuff
QUOTE
How to uninstall our software using aswClear.exe:

1. Download aswClear.exe on to your desktop
2. Start Windows in Safe Mode
3. Open (execute) the uninstall utility
4. If you installed avast! in a different folder than the default, browse for it. (Note: Be careful! The content of any folder you choose will be deleted!)
5. Click REMOVE
6. Restart your computer



Also, I edited my previous post: Disinfection script and instructions both provided.


hamdan??
hello richbuff,

can i ask a silly question?

should i removed the avast first or to run your scrip first?

thanks
hamdan??
hi there richbuff,

i had runned your scrip and run the combofix.

currently i had able to installed the KIS2009, and trying to update the virus date, but it seems to be very slow. but at least it is running right.

ah almost forget to attached the combofix......


hope to hear from you soon, thanks again for your help.
richbuff
Run this one:
CODE
begin
CreateQurantineArchive('c:\quarantine.zip');
end.

A file called quarantine.zip should be created in C:\. Then please zip up C:\qoobox\quarantine and upload both it and C:\quarantine.zip to a filehost such as http://rapidshare.com/
Then, Private Message me the Download link to the uploaded file. Click my user name and select Send message. Lastly, uninstall Combofix by: pause Kaspersky > Start > run >
type combofix /u > ok. Or Start > run > type aaa /u > ok. Restart Kaspersky.

Also, if you use Windows System restore, turn it off > reboot and do a full scan with Kaspersky. Then turn system restore back on, if you wish; this to remove malware from system
volume information files. How to turn it off/on: http://support.kaspersky.com/faq/?qid=208279208

Before doing the scan, Clear the Detected list: Detected > Active threats > right click > Disinfect all > right click > Clear list > then scan again > then post screenshot of Detected >
Active threats. With columns widened to show full name and object details.

Also, scan with Malwarebytes' Anti-Malware: http://www.malwarebytes.org/mbam.php Update it first, scan and attach its log, but Please Don't fix anything yet, until the log is reviewed.

How to take and post screenshot: PrtSc (Print screen) key (upper right part of keyboard)> open Paint (Start > All programs > Accessories) > Edit > Paste, File > Save as (jpeg or
png, Not bmp). When replying, Browse > click once to select file > Open > Upload > add reply.
hamdan??
hi there richbuff,

i have PM you the link, and had did a full scan with the update kaspersky.

i am attaching the screenshot now and would like to let you know, i have also done a scan with malwarebyte' once, and i think it detected three malwere, but i didn't know where to get the log out?

and after i did the kaspersky scan, the malwerebytes didn't report any infected file.

whould i be worried?

thank you richbuff..

hamdan??
richbuff
You're welcome. It looks like no need to worry. If Malwarebytes has no detections, no need for the log. If any detections, the log is at: C:\Documents and Settings\Username\Application Data\Malwarebytes\Malwarebytes' Anti-Malware\Logs\mbam-log-date (time).txt

Fix the vulnerabilities, see: http://forum.kaspersky.com/index.php?showtopic=68831 and: http://forum.kaspersky.com/index.php?s=&am...st&p=841600
hamdan??
hi there richbuff,

just did the third time scan, i might be wrong on the second time result, as now, there are two infected file, i am uploading the log and screenshot now.


ok, thanks ya, and have a good day ahead...

hamdan??
richbuff
Fix the two harmless registry leftovers that Mbam detects, and you're all good.
hamdan??
hello richbuff,

sorry,

need to ask stupid question again, how to fix the harmless regirtry? as kaspersky didn't detect it?

and also do i need to uninstall the malwarebytes?

thanks for your time and effort, thanks biggrin.gif

hamdan??
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2014 Invision Power Services, Inc.