Author Topic: The stub cannot run installer/updater executable (code 0x3)  (Read 3032 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
The stub cannot run installer/updater executable (code 0x3)
« on: November 22, 2015, 07:55:12 PM »
I cannot uninstall or update my avast15.  I have tried the new and old avast cleaner. 

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: The stub cannot run installer/updater executable (code 0x3)
« Reply #1 on: November 22, 2015, 08:37:09 PM »
OK a bit of malware to clean first..  You are running ESET and Avast (which has been installed in two different places)

Download and Install Combofix
 
Download ComboFix from one of the following locations:
Link 1
Link 2
 
VERY IMPORTANT !!! Save ComboFix.exe to your Desktop
 
* IMPORTANT - Disable your AntiVirus and AntiSpyware applications, usually via a right click on the System Tray icon. They may otherwise interfere with our tools. If you have difficulty properly disabling your protective programs, refer to this link here
  • Double click on ComboFix.exe & follow the prompts.
  • Accept the disclaimer and allow to update if it asks




  • When finished, it shall produce a log for you.
  • Please include the C:\ComboFix.txt in your next reply.[/b]
Notes:
1. Do not mouse-click Combofix's window while it is running. That may cause it to stall.
2. Do not "re-run" Combofix. If you have a problem, reply back for further instructions.

3.  If after the reboot you get errors about programmes being marked for deletion then reboot, that will cure it.


Please make sure you include the combo fix log in your next reply as well as describe how your computer is running now

THEN

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer and must be run from safe mode

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
CreateRestorePoint:
HKLM\...\Run: [AvastUI.exe] => "AvastUI.exe" /nogui
HKLM\...\Run: [egui] => C:\Program Files\ESET\ESET NOD32 Antivirus\egui.exe [5088456 2015-01-28] (ESET)
HKU\S-1-5-21-3265623674-1887083672-3469687245-1009\...\MountPoints2: {2d435b36-e506-11d9-9b78-e6b009352ae7} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Info.exe protect.ed 480 480
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => ashShell.dll No File
Winsock: Catalog5 01 mswsock.dll No File ATTENTION: LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog5 03 mswsock.dll No File ATTENTION: LibraryPath should be "%SystemRoot%\System32\mswsock.dll"
Winsock: Catalog9 04 mswsock.dll No File
Winsock: Catalog9 05 mswsock.dll No File
HKLM\SOFTWARE\Microsoft\Internet Explorer\AboutURLs,Tabs: "about:newtab" <======= ATTENTION
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2014-11-28] (AVAST Software)
Toolbar: HKU\S-1-5-21-3265623674-1887083672-3469687245-1009 -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  No File
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2015-01-29] [not signed]
S2 ekrn; C:\Program Files\ESET\ESET NOD32 Antivirus\ekrn.exe [1349576 2015-01-28] (ESET)
S2 avast! Antivirus; "AvastSvc.exe" [X]
S2 aswHwid; C:\WINDOWS\system32\drivers\aswHwid.sys [24016 2015-11-20] (AVAST Software)
S2 aswMonFlt; C:\WINDOWS\system32\drivers\aswMonFlt.sys [81168 2015-11-20] (AVAST Software)
R1 aswRdr; C:\WINDOWS\system32\drivers\aswRdr.sys [55200 2015-11-20] (AVAST Software)
S0 aswRvrt; C:\WINDOWS\system32\Drivers\aswRvrt.sys [49776 2015-11-20] (AVAST Software)
S1 aswSnx; C:\WINDOWS\system32\drivers\aswSnx.sys [794952 2015-11-20] (AVAST Software)
S1 aswSP; C:\WINDOWS\system32\drivers\aswSP.sys [435464 2015-11-20] (AVAST Software)
S3 aswStmXP; C:\WINDOWS\system32\drivers\aswStmXP.sys [167152 2015-11-20] (AVAST Software)
S3 aswTdi; C:\WINDOWS\system32\drivers\aswTdi.sys [57888 2015-11-20] (AVAST Software)
S0 aswVmm; C:\WINDOWS\system32\Drivers\aswVmm.sys [209432 2015-11-20] (AVAST Software)
S1 BANTExt; C:\WINDOWS\System32\Drivers\BANTExt.sys [3840 2013-09-10] () [File not signed]
S1 eamonm; C:\WINDOWS\System32\DRIVERS\eamonm.sys [193464 2015-01-30] (ESET)
S1 ehdrv; C:\WINDOWS\System32\DRIVERS\ehdrv.sys [135808 2015-01-30] (ESET)
R1 epfwtdir; C:\WINDOWS\System32\DRIVERS\epfwtdir.sys [120304 2015-01-30] (ESET)
2015-11-20 18:16 - 2014-11-28 13:19 - 00794952 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSnx.sys
2015-11-20 18:16 - 2014-11-28 13:19 - 00435464 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswSP.sys
2015-11-20 18:16 - 2014-11-28 13:19 - 00209432 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswVmm.sys
2015-11-20 18:16 - 2014-11-28 13:19 - 00081168 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswMonFlt.sys
2015-11-20 18:16 - 2014-11-28 13:19 - 00057888 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswTdi.sys
2015-11-20 18:16 - 2014-11-28 13:19 - 00055200 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRdr.sys
2015-11-20 18:16 - 2014-11-28 13:19 - 00049776 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswRvrt.sys
2015-11-20 18:16 - 2014-11-28 13:19 - 00024016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswHwid.sys
2015-11-20 13:57 - 2010-01-15 17:19 - 00002497 _____ C:\Documents and Settings\HP_Owner\Desktop\Microsoft Word.lnk
2015-11-20 18:17 - 2015-11-20 18:16 - 00167152 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswStmXP.sys
2015-11-20 18:16 - 2015-11-20 18:16 - 00322760 _____ (AVAST Software) C:\WINDOWS\system32\aswBoot.exe
2015-11-20 18:16 - 2015-11-20 18:16 - 00043112 _____ (AVAST Software) C:\WINDOWS\avastSS.scr
2015-11-22 09:11 - 2015-11-22 09:11 - 00000000 ____D C:\Program Files\AVAST Software
2015-11-21 20:03 - 2015-11-21 20:03 - 00000000 ____D C:\Program Files\AVAST Software(2)
2015-11-22 10:50 - 2014-11-28 13:20 - 00000368 ____H C:\WINDOWS\Tasks\avast! Emergency Update.job
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: The stub cannot run installer/updater executable (code 0x3)
« Reply #2 on: November 22, 2015, 08:40:36 PM »

REDACTED

  • Guest
Re: The stub cannot run installer/updater executable (code 0x3)
« Reply #3 on: November 22, 2015, 10:22:55 PM »
Here is combofix log.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: The stub cannot run installer/updater executable (code 0x3)
« Reply #4 on: November 22, 2015, 11:05:20 PM »
OK that killed the bad boy... After you have run the FRST fix then do the following :

Download Avast Uninstall Utility to your Desktop.
Download the correct version of Avast 
Avast Free
Avast Pro
Avast Internet Security
Avast Premier
Disconnect from the net
Uninstall Avast via control panel

  • Run the uninstall tool and accept the reboot to safe mode
  • Once complete reboot your system
  • Reinstall Avast
----------

REDACTED

  • Guest
Re: The stub cannot run installer/updater executable (code 0x3)
« Reply #5 on: November 23, 2015, 01:58:13 AM »
I am Still getting same error.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: The stub cannot run installer/updater executable (code 0x3)
« Reply #6 on: November 23, 2015, 02:19:09 AM »
You do need to decide what you want to use.
avast or ESET.
Delete the one you don't want.
Removal instructions/tools > http://www.ache.nl

REDACTED

  • Guest
Re: The stub cannot run installer/updater executable (code 0x3)
« Reply #7 on: November 23, 2015, 12:28:13 PM »
Eset stopped working after combofix. We want avast but can't  delete to install new version the old version screwed up after 11-16 update.  We paid for eset and she does not want to throw it away.  She turns eset off after startup.  If i could get avast going again i may be able to talk her out off eset.  So right now we have nothing.
« Last Edit: November 23, 2015, 12:54:02 PM by xgeolx »

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: The stub cannot run installer/updater executable (code 0x3)
« Reply #8 on: November 23, 2015, 03:35:57 PM »
Run a fresh FRST scan and I may be able to manually remove ESET

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: The stub cannot run installer/updater executable (code 0x3)
« Reply #9 on: November 23, 2015, 03:58:18 PM »
Quote
She turns eset off after startup.
That can very well be the cause of the problem.
Both avast and eset are loading when the system is booted.
That means they can be having a conflict.
Even if one of them is permanently disabled, both are still installed and can cause conflicts.
I can understand that she doesn't want to throw away money but the current situation is asking for problems.

You can buy two cars, but only drive in one at a time ;)