Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on March 20, 2015, 09:12:41 PM
-
I am trying to remove avast and anything I do results in the error:
"The stub cannot run installer/updater executable (code 0x3)"
Control panel -> add remove programs doesn't work and I have tried running the avastclear tool in safe mode as admin. nothing.
Help!
-
What Av did you have before ?
We can try to manually remove it if you wish
-
I currently have version 8.0.1497
I have tried updating but the installer doesn't appear to run and I get the error "avast service is not running" when trying to update through the software.
-
And yes I want to remove it manually (or by any other means)
-
Check you have properly set TEMP (and TMP) environment variable.
-
Check you have properly set TEMP (and TMP) environment variable.
Can you clarify? how do I check this?
-
Issue still not fixed
-
And yes I want to remove it manually (or by any other means)
Hi,
Can you look at this tutorial https://forum.avast.com/index.php?topic=53253.0
Scroll down to "Farbar Recovery Scan Tool" and follow the directions for that tool only.
Attach both FRST.tx and Additions.txt logs in your next reply.
As soon as Essexboy is back online he will help you :)
Greetz, Red.
-
What red said :)
-
Attatched
-
OK lets get at it.
First open Avast and go to settings > troubleshooting
Disable Avast self protection
THEN
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint:
HKLM-x32\...\Run: [avast] => C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKU\S-1-5-21-152642020-3837552317-4181921817-1000\...\Run: [Search Protection] => C:\Users\Jack\AppData\Roaming\Search Protection\SP.EXE [901144 2015-03-10] ()
HKU\S-1-5-21-152642020-3837552317-4181921817-1000\...\Run: [CMD] => cmd.exe /c start http://zenigameblinger.org && exit <===== ATTENTION
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-08-30] (AVAST Software)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-08-30] (AVAST Software)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
FF NetworkProxy: "autoconfig_url", "https://mediahint.com/default.pac"
FF NetworkProxy: "http", "88.87.84.60"
FF NetworkProxy: "http_port", 8888
FF NetworkProxy: "type", 2
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1031392 2014-12-01] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
2015-03-16 20:09 - 2015-03-16 20:09 - 00003238 _____ () C:\Windows\System32\Tasks\{0A8B29F5-1FAC-484E-8033-914914F2442C}
2015-03-09 18:37 - 2015-03-09 18:37 - 00003412 _____ () C:\Windows\System32\Tasks\{9D834845-A885-42C6-B67C-75C1E1238A8C}
Task: {70F9E8F7-EA38-47F4-BB68-ABCFF14FAB47} - System32\Tasks\{0A8B29F5-1FAC-484E-8033-914914F2442C} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {A54CF11E-89C6-4719-9284-564AFE1B4934} - System32\Tasks\{9D834845-A885-42C6-B67C-75C1E1238A8C} => pcalua.exe -a "C:\Users\Jack\Local Settings\Application Data\Bundled software uninstaller\bi_client.exe" -c /initurl http://bi.bisrv.com/:affid:/:sid:/:uid:? /affid uninstall /id uninstall /name "Bundled software uninstaller"
AlternateDataStreams: C:\Program Files\Common Files\Microsoft Shared:vLqWTgCTwaBFA7AOZMXUKqV
AlternateDataStreams: C:\ProgramData\Microsoft:IDyHfDlz4C07sPJqVhARfubQ1x1
AlternateDataStreams: C:\ProgramData\Microsoft:Ot8Yv4bQKc53SD3MlZ14H9xSI
AlternateDataStreams: C:\ProgramData\Microsoft:Qx1fPZMhQxiLY51CSqall0
AlternateDataStreams: C:\Users\Jack\Local Settings:qk68qkZ8a1HVgzzCLkxD
AlternateDataStreams: C:\Users\Jack\AppData\Local:qk68qkZ8a1HVgzzCLkxD
AlternateDataStreams: C:\Users\Jack\AppData\Local\Application Data:qk68qkZ8a1HVgzzCLkxD
C:\Program Files\AVAST Software
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
(https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG)
Run FRST and press Fix
On completion a log will be generated please post that
ONCE DONE
Download Avast Uninstall Utility (http://www.avast.com/en-gb/uninstall-utility) to your Desktop.
Download the correct version of Avast
Avast Free (http://files.avast.com/iavs9x/avast_free_antivirus_setup.exe)
Avast Pro (http://files.avast.com/iavs9x/avast_pro_antivirus_setup.exe)
Avast Internet Security (http://files.avast.com/iavs9x/avast_internet_security_setup.exe)
Avast Premier (http://files.avast.com/iavs9x/avast_premier_antivirus_setup.exe)
Disconnect from the net
- Run the uninstall tool and accept the reboot to safe mode
- Once complete reboot your system
- Reinstall Avast
----------
-
Before I do this, does it matter if I have installed anything since creating those logs?
-
Is it another AV ? Otherwise no
-
it was malwarebytes
-
That should be no problem
-
The issue has been fixed, thank you.
-
Glad to help
-
Can I get help with manual removal?
IIRC ... Problem began with a seemingly hung update of definitions from 8.0.1474. Evetually attempted uninstalled (using cntl panel). Now cannot re-install or uninstall using avastclear.exe - getting "The stub cannot run installer/updater executable...".
I ran FRST.exe and examined its output, but too faint of heart to create my own fixit file.
Tnx
-
Attach the logs please
-
Sure! Tnx.
-
Run this fix from safe mode only
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint:
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShell.dll (AVAST Software)
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION
Toolbar: HKU\S-1-5-21-343818398-1284227242-1417001333-1004 -> No Name - {EE2AC4E5-B0B0-4EC6-88A9-BCA1A32AB107} - No File
FF Extension: No Name - C:\Documents and Settings\John\Application Data\Mozilla\Firefox\Profiles\npniy3qb.default\Extensions\nostmp [2012-03-25]
CHR Extension: (No Name) - C:\Documents and Settings\John\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2014-01-08]
CHR Extension: (avast! WebRep) - C:\Documents and Settings\John\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda [2014-01-13]
CHR HKLM\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2014-07-28]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2014-01-22] (AVAST Software)
R2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24184 2014-07-28] ()
R2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [67824 2014-07-28] (AVAST Software)
R1 AswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55112 2014-07-28] (AVAST Software)
R0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49944 2014-07-28] ()
R1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [779536 2014-07-28] (AVAST Software)
R1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [414392 2014-07-28] (AVAST Software)
R1 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57800 2014-07-28] (AVAST Software)
R0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [192352 2014-07-28] ()
2015-03-29 18:55 - 2015-03-29 18:57 - 150062624 _____ (Avast Software s.r.o.) C:\Documents and Settings\John\Desktop\avast_free_antivirus_setup.exe
2015-03-29 18:49 - 2015-03-29 18:51 - 189746552 _____ (Avast Software s.r.o.) C:\Documents and Settings\John\Desktop\avast_pro_antivirus_setup.exe
2015-03-28 14:53 - 2015-03-29 18:40 - 05581328 _____ (Avast Software s.r.o.) C:\Documents and Settings\John\Desktop\avastclear.exe
2015-03-28 14:40 - 2015-03-28 20:14 - 05475064 _____ (Avast Software s.r.o.) C:\Documents and Settings\John\Desktop\avast_free_antivirus_setup_online.exe
AV: avast! Antivirus (Disabled - Out of date) {7591DB91-41F0-48A3-B128-1A293FD8233D}
Task: C:\WINDOWS\Tasks\avast! Emergency Update.job => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
C:\WINDOWS\system32\drivers\aswHwid.sys
C:\WINDOWS\system32\drivers\aswMonFlt.sys
C:\WINDOWS\system32\drivers\aswRdr.sys
C:\WINDOWS\system32\Drivers\aswRvrt.sys
C:\WINDOWS\system32\drivers\aswSnx.sys
C:\WINDOWS\system32\drivers\aswSP.sys
C:\WINDOWS\system32\drivers\aswTdi.sys
C:\WINDOWS\system32\Drivers\aswVmm.sys
C:\Program Files\AVAST Software
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
(https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG)
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Download Avast Uninstall Utility (http://www.avast.com/en-gb/uninstall-utility) to your Desktop.
Download the correct version of Avast
Avast Free (http://files.avast.com/iavs9x/avast_free_antivirus_setup.exe)
Avast Pro (http://files.avast.com/iavs9x/avast_pro_antivirus_setup.exe)
Avast Internet Security (http://files.avast.com/iavs9x/avast_internet_security_setup.exe)
Avast Premier (http://files.avast.com/iavs9x/avast_premier_antivirus_setup.exe)
Disconnect from the net
- Run the uninstall tool and accept the reboot to safe mode
- Once complete reboot your system
- Reinstall Avast
----------
-
May have been other items of interest but I saw:
"Error: Restore point can only be created in normal mode."
and
'bitsadmin' is not recognized as an internal or external command,
operable program or batch file.
Should this be a problem?
log attached.
-
essexboy:
Sir, your extreme wizardry is much appreciated!!!
Clean and re-install successfull.
-
Nope those errors are not a problem as it was run from safe mode. Is Avast installing properly now ?
-
I need help with this issue also. I have attached the text files as in the post for my computer
-
You will need to run this fix from safe mode.
Once done ensure that there are no remaining Avast folders on the system.. There should not be
Then run Avastclear from normal mode
Reboot and then try a re-install of Avast
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
HKLM\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5511352 2015-03-19] (Avast Software s.r.o.)
ProxyEnable: [.DEFAULT] => Internet Explorer proxy is enabled.
ProxyServer: [.DEFAULT] => http=127.0.0.1:13081
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-03-17] (Avast Software s.r.o.)
CHR HKLM\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-17]
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-03-17] (Avast Software s.r.o.)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [3205216 2015-03-17] (Avast Software)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [24144 2015-03-17] ()
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [26096 2015-03-17] (Avast Software s.r.o.)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [73440 2015-03-17] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [81728 2015-03-17] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\system32\Drivers\aswRvrt.sys [49904 2015-03-17] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [788272 2015-03-17] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [427480 2015-03-17] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [106912 2015-03-17] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\system32\Drivers\aswVmm.sys [206976 2015-03-17] ()
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [220240 2015-03-17] (Avast Software)
2015-04-08 08:54 - 2015-03-17 10:45 - 00291312 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe
2015-03-17 10:45 - 2015-03-17 10:45 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr
2015-03-15 12:11 - 2015-03-15 12:11 - 00000197 _____ () C:\Windows\system32\2015-03-15-16-11-07.028-AvastVBoxSVC.exe-3568.log
2015-03-13 01:40 - 2015-03-13 01:40 - 00000197 _____ () C:\Windows\system32\2015-03-13-05-40-53.029-AvastVBoxSVC.exe-2988.log
2015-04-08 08:56 - 2014-11-22 01:33 - 00002029 _____ () C:\Users\Public\Desktop\Avast SafeZone.lnk
2015-04-08 08:56 - 2014-11-22 01:33 - 00001969 _____ () C:\Users\Public\Desktop\Avast Pro Antivirus.lnk
2015-03-17 10:45 - 2014-04-28 18:24 - 00024144 _____ () C:\Windows\system32\Drivers\aswHwid.sys
2015-03-17 10:45 - 2014-02-12 15:13 - 00427480 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys
2015-03-17 10:45 - 2014-02-12 15:13 - 00206976 _____ () C:\Windows\system32\Drivers\aswVmm.sys
2015-03-17 10:45 - 2014-02-12 15:13 - 00106912 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys
2015-03-17 10:45 - 2014-02-12 15:13 - 00081728 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys
2015-03-17 10:45 - 2014-02-12 15:13 - 00073440 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys
2015-03-17 10:45 - 2014-02-12 15:13 - 00049904 _____ () C:\Windows\system32\Drivers\aswRvrt.sys
2015-03-17 10:44 - 2014-02-12 15:13 - 00788272 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys
2015-03-17 10:44 - 2014-02-12 15:13 - 00026096 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswKbd.sys
AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
Task: {2F12B21B-9EA8-42B2-89A3-34032F03CD1F} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-03-17] (Avast Software s.r.o.)
Task: {C858EF06-D6BC-4A20-ACA6-5E51E9EF6F3F} - System32\Tasks\{F2C4CC8B-32EE-4A08-ADF2-B3F5D98C03A1} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\Setup\Instup.exe" -c /control_panel /instop:uninstall
C:\Users\Rich\AppData\Roaming\AVAST Software
C:\Users\Rich\AppData\Local\AvastSupport
C:\ProgramData\AVAST Software
C:\Program Files\AVAST Software
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
(https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG)
Run FRST and press Fix
On completion a log will be generated please post that
-
I followed your instructions but now my keyboard doesn't work on my laptop. I'm not able to login to my computer
-
At the login screen press the ease of access icon on the bottom left and use the virtual keyboard http://www.softwareok.com/?seite=faq-Win-7&faq=22
It should return once avastclear has run
-
My mouse pad doesn't work either
-
Well, I am glad I had an old usb mouse laying around. I was able to go back in and was able to do the avastclear in the normal mode. I am about to reinstall avast. I have attached the fixlog as you requested. Thank you for your help.
-
Same problem here. Please help!