Good evening people!
As the title says - today I've encounter a serious problem. For a few years from now, I've been using avast! free (yearly, extendionable licence) together with Agnitum Outpost Firewall Pro (lifetime licence). Both of them were regulary updated (daily, basiclly) and were able to catch most of the crap which could come and infect my PC. If I had any objections, then MBAM helped me to decide is it a malware (or other unwanted stuff), or not. But, since a few days, something different is happening. Avast!, as well as op_mon.exe are now gone - both from task manager and autostart entries (not to mention that it were there before). I also cannot run MBAM, Chameleon plugin or even default Windows Defender anymore. Everytime I try to do so, I get the error message, which says "This program is blocked by group policy". Funny thing is - I wasn't doing ANYTHING with AppLocker before that message. I also doesn't mess up by installing other defence software.
I've started looking already in Internet, I've also bumped out on this thread (http://www.bleepingcomputer.com/forums/t/531202/this-program-is-blocked-by-group-policy/) over here. Most of the time it looked like solution to my problem, but I'm not having ANY folder like these four in respondend folder (mention somewhere on page 2 of that thread, I believe), so I decided to give up there. I don't want any other injuries with my registry. I've also tried using MBAM (of course - doesn't start), Chameleon (doesn't start as well, even when launched via help file, using firefox - none of 13 options give any CMD window, error - nothing), avastUI (as well, nothing). TDSS killer with his scan (excluded loading disk sectors) shows nothing, rkill also doesn't seem to be alerted with this abnormal acitivity.
Also - I can't even uninstall, uprage or run (fairly enough) either Outpost Firewall Pro or Avast. The same prompt appear every single time. I'm sure that it's some kind of unwanted trash, because everytime I try to launch "prohibited" software, there's action doing in the background. Nothing much - just a "thinking" pointer, but it's gone as soon as I click "OK" in the error message.
Few more things, that might become handy for help - I'm using Win7 enterprise, I've never mess up with my registry (only activity includes deleting old entries, which are left behind after unistalling software - CCleaner worked there just fine, for more than few years), I'm using this pack (avast! combined with Outpost Firewall Pro; licenced btw) also for a few years (3 or 4) - I've got only on attack on my PC so far (massive launch of processes, multiple tries to driverload and direct disk access - all of it founded and stopped by firewall). I've also tried to find help in both Agnitum and Malwarebytes - typed down two different mails few hours ago. Hope they will be able to do something. My oldest avalaible system restore point is dated on 5th of September, with adnotation "critical Windows update". I wasn't doing any prompted updates for a while - could be some trace of unwanted guests?
About any crappy software - I don't remember such thing for at least a couple of months. The last unwanted thing was connected with last (and only, so far) attack on my PC. But, after running a full MBAM scan, manually (somehow it works only with admin rights and task manager killing!) removing the contaminated folders and looking more carefully for a couple of days - thread was gone. Since that, I've got nothing to do with pirate stuff, porn and other weird places in Web, where You can easily catch something. It might be connected thought with watching Volleyball World Championship on non-legal Internet sides now. But - all plugins were disabled, all security - enabled. It might be it, although - getting infected simply by activating video stream, without having to install some "plugin"?
Hope that I've put everything nice and you will be able to get through it. Rest of my PC functions works as per usual, but it's stkins way to strong to ignore that. Also - I do apologize for any misspelled words or sentences - english isn't my first language, and it's 4 AM already here! :D