SAntivirus

I am not sure if I have this in the correct section. I was watching a youtube video with firefox browser and halfway through the video it froze and it took me to another page. There was an option to reload. When I clicked it, nothing happen. Then I tried to open another browser tab and it seemed like my laptop was freezing up. I tried to open my AV program and it won't completely open. I rebooted and everything seems fine. After rebooting, I ran my Avast AV and it didn't detect any issues. Then, I ran my malwarebytes program and it found 121 entried all called "PUP.Optional.Segurazo." Under the type column, they all say "potentially unwanted program." In the objective type column, some say "register key", "file", "process", "process module", or "folder." And there is a location column for each of these 121 entries. Then I noticed that I have a folder called SAntivirus. Somehow it appears that some anti-virus program was installed on my laptop that I didn't install. What could have occurred? What is the best way to remove the 121 entries in malwarebytes that I just described? I opened my Revo Uninstaller and looked for this SAntivirus program. There is a listing called SAntivirus Realtime Protection Lite by Digital Com Inc. I suppose I can just uninstall this unwanted AV using Revo?

I read up on it and you need to get rid of it. I use Revo for everything.

You definitely need to uninstall Segurazo. Either Revo or Geek Uninstaller should do the trick.

https://howtoremove.guide/uninstall-segurazo-antivirus/
https://www.myantispyware.com/2019/0...removal-guide/

BTW, what version of FF are you running? Are you using an adblocker or not?

I apologize I couldn't reply back sooner last night. I fell asleep.

Thanks deege.

Hi, Midknyte. I didn't want to open firefox back up until I remove this program. I checked in my settings and it says I am running version 73.0.1. I am using UBlock Origin. I just ran malwarebytes again before I attempted to uninstall SAntivirus using Revo and it now found 10252 items. I just uninstalled the program with Revo and rebooted and re-ran Malwarebytes and it now found 10217 items and the SAntivirus is still listed in programs. Should I try uninstalling/removing it using Malwarebytes? If so, how?

I just checked Revo and I don't see the SAntivirus program/entry listing in it anymore. When I click on the start button and scroll through the list of programs, I still see the SAntivirus folder and inside it says SAntivirus product.

SUMMARY:
Name SAntivirus
Type Trojan
Danger Level High (Trojans are often used as a backdoor for Ransomware)
Symptoms It is hard to notice any visible symptoms of the Trojan horse infection because these threats normally don’t show any.
Distribution Method Hackers often use spam email messages and malicious attachments to infect web users with Trojans.
Detection Tool
SAntivirus may reinstall itself multiple times if you don't delete its core files. We recommend downloading SpyHunter to scan for malicious programs. This may save you hours and cut down your time to about 15 minutes.

Revo should have removed the folder/files, assuming you chose that option. You can try removing them manually.

I used Geek Uninstaller when I had to remove it from a friend's computer.
https://geekuninstaller.com/download

If you are still having problems after all that, you can create a new thread in the ICU.
http://discussions.virtualdr.com/sho...ted-3-21-2015)

Midknyte, I installed geek uninstaller and I don't see any SAntivirus entry in that program like I didn't in Revo after I attempted to uninstall it the first time using Revo. In the second link you posted earlier, it gives steps to remove it using Malwarebytes by clicking "quarantine selected" after performing a scan. Should I try that next?

If you already removed it with Revo, then it probably wouldn't show up in Geek now.

So you didn't remove files with MBAM? I thought you already did that. You'd definitely want to try that first.

If you're going to do the ICU steps, then you should create a new thread and paste the logs. Broni would be the one to advise you from there.

Midknyte, I re-ran malwarebytes and clicked quarantine on all 10280 entries that it found. I re-ran malwarebytes and ran my AV again and both come out fine. I located the entry that was still listed in my programs section after clicking the start button and just deleted it. It was a shortcut item that didn't get removed when I uninstalled the program. I suppose I don't have to be concerned at this point and everything should be fine with my laptop?

That's progress. I would delete the quarantined files. Personally, I would get rid of Avast.

http://discussions.virtualdr.com/sho...s-private-data

If you want to be extra sure, create a new thread in the ICU as I stated before.

Midknyte, I will think about if I will post in the ICU section, but all seems fine. Thank you for that thread regarding Avast selling of data. I uninstalled Avast and attempting to install Bitdefender AV Plus free version. During the installation, I receive a message "potential incompatible software" message (Avast Update Helper) and another windows asking me to create a Bidefender account or log in. When I click continue, it reboots my laptop and takes me to the same "incompatible software" message. It won't allow me to complete the installation.

You probably need to use Geek or Revo to uninstall Avast. Or you could try the Avast uninstaller.

https://www.avast.com/uninstall-utility

Which version of Windows are you running?

JLS, I too got rid of AVAST, for the same reason, and installed BitDefender on my desktop system running Windows 7. I had a similar problem, having to click on a link only to have my computer reboot. I can't remember the details, but I found a way around the problem and now have BitDefender up and running on that system. There is a way, and it can't be too difficult if I found the way to install BitDefender.

Midknyte, I did use Revo when I uninstalled Avast. I am using windows version 1903. I was trying to search in my folders for Avast to see if I have a folder/files remaining on my laptop. It is called Avast software/Avast/with 2 sub-folders called cache and log. I may have more folders/files on my device, but am not sure which other locations they may be located in windows 10.

Midknyte, I can't remember if I changed the location when I downloaded/installed Avast or used the default. I don't want to delete something that I don't want deleted because of what it states in step 4 of your Avast uninstall link.

4breezes, I appreciate your help and advice, as well. If you can remember what exactly you did to bypass this message I am receiving, let me know. Did you have to create a Bitdefender account to use the free version?

I had Avast AV and Avast browser on my laptop. I rarely used Avast browser. I did uninstall both using Revo. I found more Avast folders and files in folder called ProgramData. I am not sure why I have so many Avast files remaining. Revo usually did a good job removing all files when uninstalling a program.

ProgramData is your app settings folder. Most apps store settings there and it's usually hidden. If you're not going to use Avast anymore, there's no reason to save the settings.

When I uninstalled Avast I did a complete file search for "Avast" and deleted everything I found. There were only a few folders left over and there was no problem deleting them.

I think the reason why those remaining files associated with Avast didn't get deleted is because it has to be deleted by the administrator. I tried just deleting them and a message stating that I needed to provide administrator permission. I thought I had my user name set as administrator. How can I check to see if it is set to administrator? If it isn't how do I change it to remove the remaining files?

Even if you are an administrator, you must explicitly do some actions as administrator. What happened when you gave admin permission to delete the files?

To check if you have admin:
https://www.cnet.com/how-to/how-to-c...administrator/

Midknyte, it says my user name is set as administrator. When I try to delete a file, it says I need permission to perform this action. What actions are you referring to that I need to delete these files?

What is the full path of the files you are trying to delete? Did you take ownership of the folder? Are you sure there are no app using the files?

https://answers.microsoft.com/en-us/...2-e0c8d4fb0007

If you are comfortable with the command prompt, you could delete the file/folder with an elevated (admin) command prompt.

Like I said, even if your account is an admin, you still need to manually run as admin sometimes. It's not like Win7.

The path of Avast software is C:/Avast Software. I open the link you posted and tried to do the steps associated with "take ownership" and something didn't work correctly. I was really familiar with win 7, but not so much with win 10. I apologize if I am being a bit dense.

"Like I said, even if your account is an admin, you still need to manually run as admin sometimes" << Do you mean I have to log out of my user account and log into admin account? How is that done?

If I want to delete the Avast software folder from command prompt, I think I would type del C:/Avast software? How do I get to the elevated (admin) command prompt?

Did you change the default path? Win10 really doesn't like putting user files in C:\.

Quote:

---

Do you mean I have to log out of my user account and log into admin account? How is that done?

---

No. You have to do things like right-click on something and click "Run as administrator". I'm talking generally. Just because your account is an administrator, it doesn't mean everything automatically runs as an administrator.

To open an elevated command prompt, you can just search for cmd in the Cortana search bar. It should show "Command Prompt", then click on the option to Run as administrator. The titlebar will say "Administrator: Command Prompt". Type the following:

RD /S /Q "C:|Avast Software"

/S = subfolders
/Q = quiet (no prompt)
You need the "" because there is a space in the folder name

The folder is in the C:/ProgramData folder. <my bad> I am at the Administrator command prompt. it is at the windows/system32 folder. how do I change directories to just the C prompt. I believe I would need to type>>> RD /S /Q "C:/ProgramData/Avast Software" , correct? I believe I would need to change directories first?

cd \ should take you to the root directly (C:\). You don't need to cd if you're entering the full path

Note that it's backslash for Windows. C:\

RD /S /Q "C:\ProgramData\Avast Software"

I typed cd \ to get to the c prompt, then I typed RD /S /Q "C:\ProgramData\Avast Software" and there was a large number of lines and all said access denied.

And you're sure there are no Avast processes running? It sounds like something still has the files open.

Did you try the Avast removal tool or not? It specifically mentions the Programdata folder.
https://www.avast.com/uninstall-utility

Here are more things to try.
https://appuals.com/how-to-remove-av...es-completely/

I opened task manager and there are a number of processes entries listed between my Avast AV and browser. I tried to end task of them all and some didn't do anything after ending task and some said access denied.

I didn't try the Avast removal tool because of what it says in step 4. I don't want to delete a folder that I didn't mean to delete in the process.

I guess I would try to download and run the eset AV removal tool and see if that works.

I ran the Eset AV removal tool and the only program that it found was my malwarebytes (which I don't want to remove) and it said that this program is not supported anyhow.

Quote:

---

I don't want to delete a folder that I didn't mean to delete in the process.

---

You have to specify the folder where Avast is installed if you didn't use the default path. I'm not sure what you're afraid of.

I booted into safe mode and ran the avast clear program. It found the Avast Software and I clicked to uninstall it. It said it was successfully removed. When I booted back into windows, the Avast Software folder was still listed in ProgramData. I just deleted the entire folder and it deleted it. I tried running Bitdefender AV Plus exe file to install it and it still gives me that same message stating "potential incompatible software" message (Avast Update Helper)." I noticed that the Avast Software folder is listed again in ProgramData after I manually deleted the folder and rebooted back into windows.

Also, there were only 2 processes listed after I ran avast clear which were Avast browser update and Avast browser update (32-bit) in task manager. I was able this time to right click and end task on each of them. But, when I reboot into windows, both processes appear again in task manager.

Did you install Avast Secure browser?
https://support.avast.com/en-us/arti...Secure-Browser

Midknyte, I don't believe it was, but I am not sure.

Quote:

---

Originally Posted by JLS

...

4breezes, I appreciate your help and advice, as well. If you can remember what exactly you did to bypass this message I am receiving, let me know. Did you have to create a Bitdefender account to use the free version?

---

I've drawn a complete blank on the process I followed. I just don"t have any kind of accurate recollection. That being said, I think I may have gone back a screen and taken another path. Did I create a Bitdefender account? I think I must have. After all, I wanted this to work as advertised.

Quote:

---

Avast browser update and Avast browser update (32-bit)

---

It sure looks like you did. I'd run the Avast Browser uninstaller, if you haven't already.

Midknyte, perhaps, I misunderstood what you were asking earlier. When you asked if I had installed the Avast "secure" browser and I said no, I thought you were asking if I installed a certain type of Avast browser (secure version). I did say earlier in my replies that I had installed the Avast browser, but rarely used it. I thought there was a secure version vs. the version that I had installed, which is why I said no. I just ran the Avast secure browser removal tool and ran it. It said it was successfully uninstalled. I rebooted my laptop. After rebooting, I checked to see if I had those 2 Avast browser update processes listed in task manager which I did not. I, also, checked to see if I had any Avast folder/files listed in ProgramData, which I did not. So, at this point, all files were successfully removed from my laptop. Then, I tried to install Bitdefender AV Plus again, and it still gives me that same error message ("potentially incompatible software found - Avast update helper was detected on your system"). I am puzzled why it states this at this point.

I ,also, checked start up in task manager to see if there was any Avast entries listed in there, which there wasn't.