Hi, today my friend's computer got this advance protection mode on her avast antivirus whenever we try to open avast by clicking the avast icon near the clock area.

She said in the morning she open facebook, her friend send her a link, when she clicked it install some flash player, then the computer restart, after that becomes weird, can not go in to facebook page, other page access still ok. The avast problem arise.

I wanted to try open avast from program file, but the folder disappear

so i can not update the avast to catch the virus now...

I want to update malwarebyte but the update process becomes super slow, always halfway drops back to 0%, so i gave up...

I tried to do system restore, but after click system restore it gives me a blank window...

I don't know what to do now other than tell her to copy files to hard disk and format it...

But i afraid the virus infect the HDD and later when copy file from HDD the virus can go into the computer again...

Is anyone encounter this problem before? How can i remove it or prevent it?

hmm...i found similar problem problem (at least) at technical thread.
http://forum.lowyat.net/topic/1962671

oh i see, thanks for the link man, i will try to do it and see if can clean it, thank you thank you =)

I think somehow the link had change ur pc window32 file...
need to copy from other pc and replace it..

ya, i saw the technical section, it change the host file.

but since my friend's com already use for a long time, and probably got other viruses, so decided to backup and format.

then install back AV and malwarebyte to scan hdd before copying those files back to the computer.

i am not really good at tech, but i use things like adblock, no script, and disable those chat link function where ever i can, and don't download unless confirm is important stuffs.

but this is the first time we see the facebook chat virus, originally thought it is really send by friend...

now i put warning on facebook already, hopefully people will not open link simply...

This post has been edited by pandah: Jul 24 2011, 11:00 PM