Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: REDACTED on January 04, 2016, 05:36:15 PM
-
Tried 3 times now, reboots near the end of installation, but Windows won't start. Tries Startup Repair but this always fails. Have to go to System Restore to make PC usable again.
-
Have similar issue. First - I have a license on this machine....went on vacation for a few weeks and didn't start computer the whole time. I start it up, and it says that I am using the free version now, and that I need to update. Do an update...hangs on update. Computer shuts down by itself. Uninstalling avast doesn't work either - I had to disable the engine on startup, and I am going to try a fresh install of the software...and put the license that is already on the machine back into the software...
-
Perform a clean installation of avast.
- Download the full installer for the version you want ( https://forum.avast.com/index.php?topic=179855.0 )
- Remove avast through control panel (skip this step if you get a error)
- Run avastclear
- Make sure all remnants of previously installed av's are removed ( http://www.ache.nl for links to tools/instructions )
- Reboot
- Run the installer
- Reboot
-
Anytime I run ANYTHING Avast...it hangs....Even tried AvastCleaner to remove everything....no dice...
-
Boot in safe mode and run avastclear.
-
Tried it twice now....Avastclear window pops up, get the nice circle animation....and it just hangs...hard drive doesn't do squat. Machine works just fine without Avast running..
-
You did started avastclear in safe mode ?
-
yes. Same thing happens. Ran it in safe mode with and without network support....it starts spinning, and then it will just keep spinning over and over and over,,,and slowly things start to come to a crawl... This isn't over a 10 second period either...first time I let it run for 30 minutes on lunch, and when i got back it wasn't even spinning anymore. Second time, I watched it for about 12 minutes and watched it do the same thing.
-
Ok, time to try something else.
Get Farbar, run it and attach two log files to your next post.
We need FRST.txt and Addition.txt
http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/
-
No, does the same. Gets almost to the end of the install progress bar, reboots, and says "Windows failed to start, perhaps a recent hardware or software change caused this". Back to system restore :-(
-
FRST is attached....I have to Zip "Additional"
-
And ZIP doesn't work...so....I opened "Addition.txt" and there was a slew of 0's int he middle of it...
-
Run this from safe mode after you have copied FRST to your desktop
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint:
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-09-28] (AVAST Software)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-09-14] (AVAST Software)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-09-14] (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
S3 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-09-28] (AVAST Software)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4048280 2015-09-28] (Avast Software)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-09-28] (AVAST Software)
R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-09-28] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-09-28] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-09-28] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-09-28] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-06] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-06] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-09-28] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-09-28] (AVAST Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [274336 2015-09-28] (Avast Software)
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Hosts:
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
(https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG)
Run FRST and press Fix
On completion a log will be generated please post that
-
Well this is interesting.....now it wont' get past the Ctrl+Alt+Del page....tried both normal and safe modes.... Hard drive is going bonkers on startup with the CTRL+Alt+Del screen....
I will work with it a bit here to see if I can get past that...
-
had to do a system restore to two days ago to get the Ctrl Alt Del to work....
Thoughts?
-
Fixlog attached...although I am unsure as to what the System REstore may have affected here...
-
OK if you can now try Avastclear that should remove the remnants
-
AvastClear Still hangs....in either regular or safe mode.
-
Is there a list of entries somewhere that I can pull out of the registry? I have no problem doing that if it means I can use this computer again...the previous FRST Fix hung the computer at the CTRL-ALT-DEL screen - is there something in the text file posted here that I can take out that would prevent this from locking up?
-
What do you mean the control alt del screen
-
Tried it twice now....Avastclear window pops up, get the nice circle animation....and it just hangs...hard drive doesn't do squat. Machine works just fine without Avast running..
My computer does NOTHING except start now following the last Avast update, which apparently installed itself. Nothing else works about it. Not the cursor, not the arrows, not Escape, not Ctrl-Al-Del, nothing. I can't start it in any other mode, because none of the keys work (except the on/off button). It's nothing more than a very expensive paperweight at this moment. I have no idea how to fix it.
-
@Essexboy - the computer would boot - and prompt me to hit CTRL+ALT+DEL to login...except hitting CTRL+ALT+DEL did nothing....no login screen...nada...not even in safe mode.
It works NOW after I did the system restore (to 2 days ago)
-
OK so it is set to log in individual users rather than just go straight in
You could use revo uninstaller to try and remove Avast
-
How are you people doing anything? I can't get any part of my notebook computer to work at all since this happened. It turns on, boots up (but won't let me boot into safe mode because I can't move the arrows to switch from normal boot-up), and then just sits there until the screen goes black and I have to do a hard shut-down. I would love to do a system restore to the morning of 1/1, but I can't get into that part of the computer (or any part of the computer for that matter) since this happened. I don't know what to do. :(
-
Trying REvo uninstall - never used this one before...but it seems to want to use the default uninstaller to begin with, which of course hangs anyway. Tried the "Forced Uninstall" as well - giving that some time to do some magic, but the HDD seems to just be pulsing every second and nothing is actually happening..
More to come
-
Surfcity,
you need to start your own thread.
-
Revo has been trying to do the uninstall for about 90 minutes now...and nothing.....any suggestion?
I woudl have no problem manually removing registry entries if I knew what they were....
-
Yeah Revo Hung too....I can get back in to the machine...but can't get rid of Avast or reinstall...
-
I see the conduit infection and several policy restrictions that at least look suspicious.
-
Ran Housecall and HijackThis to remove what I could...Housecalle found 2 things, and HijackThis found a bunch of stuff, as it normally does...some of which weren't issues so I didn't delete them. I'm going to run FRST again and post the results after the Hijackthis removals...
-
re-ran FRST...here are the logs.
-
Could you fix the host file first using the download on this page https://support.microsoft.com/en-gb/kb/972034
Also did you set the group restrictions ?
-
The group restrictions are from our company...the hosts file has been fixed.
-
OK could you run a fresh scan please as I believe the host file was blocking FRST fixing
-
Scan Attached
-
Are these the GPO's you are referring to?
HKLM Group Policy restriction on software: %appdata%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ATTENTION
Those were set from Bitdefender's anti ransomware/bitlocker protection I believe. The only reason I say this is because those two files are listed in the protection options of the software. Note: I disabled this software long before I posted here with the problems...
-
Try this again please from safe mode
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint:
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-09-28] (AVAST Software)
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKLM-x32 -> DefaultScope {32863B3F-5753-4F90-B333-D58195E2ABA9} URL =
SearchScopes: HKU\S-1-5-21-1193042057-2940001013-3384767012-1051 -> DefaultScope {32863B3F-5753-4F90-B333-D58195E2ABA9} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3290973&CUI=UN11955846881890211&UM=2
SearchScopes: HKU\S-1-5-21-1193042057-2940001013-3384767012-1051 -> {32863B3F-5753-4F90-B333-D58195E2ABA9} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3290973&CUI=UN11955846881890211&UM=2
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-03]
CHR HKLM-x32\...\Chrome\Extension: [mhfdcmehmjcclgopdodkjdicohagipid] - D:\HELMDATA\TEMP\USER\ccex.crx <not found>
S3 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-09-28] (AVAST Software)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4048280 2015-09-28] (Avast Software)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-09-28] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-09-28] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-09-28] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-09-28] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-06] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-06] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-09-28] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-09-28] (AVAST Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [274336 2015-09-28] (Avast Software)
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: Reg Delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F
Reg: Reg Add "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
(https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG)
Run FRST and press Fix
On completion a log will be generated please post that
-
First attempt, got a blue screen of death on aswRdr2.sys.... "The driver unloaded without cancelling pending operations"
-
Ok, that seemed to work this time...booted up fine, and now I am rebooting again to give it a solid reboot cycle before delving into the next phase, which, I assume is, reinstalling Avast correct?
-
Yep that is it
Download Avast Uninstall Utility (http://www.avast.com/en-gb/uninstall-utility) to your Desktop.
Download the correct version of Avast
Avast Free (http://files.avast.com/iavs9x/avast_free_antivirus_setup.exe)
Avast Pro (http://files.avast.com/iavs9x/avast_pro_antivirus_setup.exe)
Avast Internet Security (http://files.avast.com/iavs9x/avast_internet_security_setup.exe)
Avast Premier (http://files.avast.com/iavs9x/avast_premier_antivirus_setup.exe)
Disconnect from the net
Uninstall Avast via control panel
- Run the uninstall tool and accept the reboot to safe mode
- Once complete reboot your system
- Reinstall Avast
----------
-
Uninstaller still hangs...in safe mode. Clearavast hangs as well...
-
Tried using Revo and it LOOKED like it was going to actually do it....but after 3 hours of just spinning away, the hard drive pulses every second, and the screen is black....locked up.
Should I do another "FRST" and post to see if anything has changed?
-
I'm trying to use Revo again - thistime I have "unchecked" the "Use Built In Uninstaller" to see what it does/finds...
By the way, in case I didn't mention it before - thanks so much for your help on this....
-
Well it looks like we may be in business...that Revo program is pretty slick and it hunted down the remnants (one of which I am certain was causing the hang of course). I am currently reinstalling Avast now that I CAN reinstall it...
-
Avastclear and now avast installer now won't install - they hang when you run them, but there appears to be no signs of Avast on the system anymore...ran FRST again....attached
-
CheckPoint http://www.checkpoint.com/products-solutions/index.html
Sandboxie
The above two programmes may be interfering with Avast
-
Uninstalled both....going to give it another shot :)
-
Ok, so here's the deal....I ran REvo again, and it found a bunch more Avast stuff...so I deleted everything, rebooted, did it again. It found more stuff again...deleted, rebooted again...did it again, and it didn't find anything. Rebooted, did it again, didn't find anything. Rebooted. Installed Avast (I accidentally used the online installer instead of the full installer) BUT it worked...installed in about 2 minutes. Inserted the license file without an issue. Rebooted again...took quite a bit longer to reboot this time, but it finally did and I think we are in business!
From what I can tell - the update installer failed a few days ago and for some reason, there were two instances of the software - one being the main instance and one being a reference for the updates or something? I'm not really sure -either way - the update failed....but after all this it is working now
-
THANK YOU ALL FOR YOUR HELP!
-
Two installs would cause these types of problems, although I did not see evidence of that
-
I didn't at first...when I was looking into Revo tho...the second time, the registry pointed to a different folder....almost like Avast tried to recover itself or something - I can't really explain it and I am not 100% sure either. Wish I knew what caused it int he first place but as the old Italian saying goes: if it ain't broke, don't fix it...
-
Is all well now ?
-
Yes!