Author Topic: Avastclear: The stub cannot run installer/updater executable (code 0x3)  (Read 20513 times)

0 Members and 1 Guest are viewing this topic.

Offline BULLHORN

  • Newbie
  • *
  • Posts: 9
I am trying to remove avast and anything I do results in the error:

"The stub cannot run installer/updater executable (code 0x3)"

Control panel -> add remove programs doesn't work and I have tried running the avastclear tool in safe mode as admin. nothing.

Help!

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
What Av did you have before ?

We can try to manually remove it if you wish

Offline BULLHORN

  • Newbie
  • *
  • Posts: 9
I currently have version 8.0.1497

I have tried updating but the installer doesn't appear to run and I get the error "avast service is not running" when trying to update through the software.


Offline BULLHORN

  • Newbie
  • *
  • Posts: 9
And yes I want to remove it manually (or by any other means)

Offline drake127

  • Avast team
  • Sr. Member
  • *
  • Posts: 324
Check you have properly set TEMP (and TMP) environment variable.

Offline BULLHORN

  • Newbie
  • *
  • Posts: 9
Check you have properly set TEMP (and TMP) environment variable.

Can you clarify? how do I check this?

Offline BULLHORN

  • Newbie
  • *
  • Posts: 9
Issue still not fixed

Offline Rednose

  • Pirate Party Member
  • Avast Überevangelist
  • Massive Poster
  • *****
  • Posts: 3743
  • Bits of Freedom : https://www.bof.nl
    • Nederlandstalig Avast! forum
And yes I want to remove it manually (or by any other means)

Hi,

Can you look at this tutorial https://forum.avast.com/index.php?topic=53253.0

Scroll down to "Farbar Recovery Scan Tool" and follow the directions for that tool only.
Attach both FRST.tx and Additions.txt logs in your next reply.

As soon as Essexboy is back online he will help you :)

Greetz, Red.
OS: Win 10 / iOS 14 / Debian 10 / Tails 4
Real Time: Avast Premium Security
On Demand: Malwarebytes
VPN: NordVPN ( NordLynx ) with CyberSec

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
What red said :)

Offline BULLHORN

  • Newbie
  • *
  • Posts: 9
Attatched

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: Avastclear: The stub cannot run installer/updater executable (code 0x3)
« Reply #10 on: March 21, 2015, 01:26:38 PM »
OK lets get at it. 

First open Avast and go to settings > troubleshooting
Disable Avast self protection

THEN

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
CreateRestorePoint:
HKLM-x32\...\Run: [avast] => C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKU\S-1-5-21-152642020-3837552317-4181921817-1000\...\Run: [Search Protection] => C:\Users\Jack\AppData\Roaming\Search Protection\SP.EXE [901144 2015-03-10] ()
HKU\S-1-5-21-152642020-3837552317-4181921817-1000\...\Run: [CMD] => cmd.exe /c start http://zenigameblinger.org && exit <===== ATTENTION
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-08-30] (AVAST Software)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-08-30] (AVAST Software)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  No File
FF NetworkProxy: "autoconfig_url", "https://mediahint.com/default.pac"
FF NetworkProxy: "http", "88.87.84.60"
FF NetworkProxy: "http_port", 8888
FF NetworkProxy: "type", 2
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1031392 2014-12-01] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
2015-03-16 20:09 - 2015-03-16 20:09 - 00003238 _____ () C:\Windows\System32\Tasks\{0A8B29F5-1FAC-484E-8033-914914F2442C}
2015-03-09 18:37 - 2015-03-09 18:37 - 00003412 _____ () C:\Windows\System32\Tasks\{9D834845-A885-42C6-B67C-75C1E1238A8C}
Task: {70F9E8F7-EA38-47F4-BB68-ABCFF14FAB47} - System32\Tasks\{0A8B29F5-1FAC-484E-8033-914914F2442C} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {A54CF11E-89C6-4719-9284-564AFE1B4934} - System32\Tasks\{9D834845-A885-42C6-B67C-75C1E1238A8C} => pcalua.exe -a "C:\Users\Jack\Local Settings\Application Data\Bundled software uninstaller\bi_client.exe" -c /initurl http://bi.bisrv.com/:affid:/:sid:/:uid:? /affid uninstall /id uninstall /name "Bundled software uninstaller"
AlternateDataStreams: C:\Program Files\Common Files\Microsoft Shared:vLqWTgCTwaBFA7AOZMXUKqV
AlternateDataStreams: C:\ProgramData\Microsoft:IDyHfDlz4C07sPJqVhARfubQ1x1
AlternateDataStreams: C:\ProgramData\Microsoft:Ot8Yv4bQKc53SD3MlZ14H9xSI
AlternateDataStreams: C:\ProgramData\Microsoft:Qx1fPZMhQxiLY51CSqall0
AlternateDataStreams: C:\Users\Jack\Local Settings:qk68qkZ8a1HVgzzCLkxD
AlternateDataStreams: C:\Users\Jack\AppData\Local:qk68qkZ8a1HVgzzCLkxD
AlternateDataStreams: C:\Users\Jack\AppData\Local\Application Data:qk68qkZ8a1HVgzzCLkxD
C:\Program Files\AVAST Software
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

ONCE DONE

Download Avast Uninstall Utility to your Desktop.
Download the correct version of Avast 
Avast Free
Avast Pro
Avast Internet Security
Avast Premier
Disconnect from the net

  • Run the uninstall tool and accept the reboot to safe mode
  • Once complete reboot your system
  • Reinstall Avast
----------


Offline BULLHORN

  • Newbie
  • *
  • Posts: 9
Re: Avastclear: The stub cannot run installer/updater executable (code 0x3)
« Reply #11 on: March 21, 2015, 02:16:31 PM »
Before I do this, does it matter if I have installed anything since creating those logs?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: Avastclear: The stub cannot run installer/updater executable (code 0x3)
« Reply #12 on: March 21, 2015, 02:29:44 PM »
Is it another AV ?  Otherwise no

Offline BULLHORN

  • Newbie
  • *
  • Posts: 9
Re: Avastclear: The stub cannot run installer/updater executable (code 0x3)
« Reply #13 on: March 21, 2015, 04:03:28 PM »
it was malwarebytes

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40627
  • Dragons by Sasha
    • Malware fixes
Re: Avastclear: The stub cannot run installer/updater executable (code 0x3)
« Reply #14 on: March 21, 2015, 04:05:52 PM »
That should be no problem