Author Topic: Avast install breaks windows 7  (Read 13915 times)

0 Members and 1 Guest are viewing this topic.

Offline catman2112

  • Jr. Member
  • **
  • Posts: 90
Re: Avast install breaks windows 7
« Reply #30 on: January 07, 2016, 03:58:08 PM »
re-ran FRST...here are the logs.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Avast install breaks windows 7
« Reply #31 on: January 07, 2016, 05:03:14 PM »
Could you fix the host file first using the download on this page https://support.microsoft.com/en-gb/kb/972034

Also did you set the group restrictions ?

Offline catman2112

  • Jr. Member
  • **
  • Posts: 90
Re: Avast install breaks windows 7
« Reply #32 on: January 07, 2016, 06:24:25 PM »
The group restrictions are from our company...the hosts file has been fixed.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Avast install breaks windows 7
« Reply #33 on: January 07, 2016, 07:16:52 PM »
OK could you run a fresh scan please as I believe the host file was blocking FRST fixing

Offline catman2112

  • Jr. Member
  • **
  • Posts: 90
Re: Avast install breaks windows 7
« Reply #34 on: January 07, 2016, 08:18:28 PM »
Scan Attached

Offline catman2112

  • Jr. Member
  • **
  • Posts: 90
Re: Avast install breaks windows 7
« Reply #35 on: January 07, 2016, 08:22:01 PM »
Are these the GPO's you are referring to?

HKLM Group Policy restriction on software: %appdata%\*.exe <====== ATTENTION
HKLM Group Policy restriction on software: %appdata%\Microsoft\Windows\Start Menu\Programs\Startup\*.exe <====== ATTENTION

Those were set from Bitdefender's anti ransomware/bitlocker protection I believe.  The only reason I say this is because those two files are listed in the protection options of the software.  Note: I disabled this software long before I posted here with the problems...

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Avast install breaks windows 7
« Reply #36 on: January 07, 2016, 08:43:53 PM »
Try this again please from safe mode

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
CreateRestorePoint:
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-09-28] (AVAST Software)
SearchScopes: HKLM -> DefaultScope value is missing
SearchScopes: HKLM-x32 -> DefaultScope {32863B3F-5753-4F90-B333-D58195E2ABA9} URL =
SearchScopes: HKU\S-1-5-21-1193042057-2940001013-3384767012-1051 -> DefaultScope {32863B3F-5753-4F90-B333-D58195E2ABA9} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3290973&CUI=UN11955846881890211&UM=2
SearchScopes: HKU\S-1-5-21-1193042057-2940001013-3384767012-1051 -> {32863B3F-5753-4F90-B333-D58195E2ABA9} URL = hxxp://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3290973&CUI=UN11955846881890211&UM=2
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  No File
Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  No File
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-03]
CHR HKLM-x32\...\Chrome\Extension: [mhfdcmehmjcclgopdodkjdicohagipid] - D:\HELMDATA\TEMP\USER\ccex.crx <not found>
S3 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-09-28] (AVAST Software)
S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4048280 2015-09-28] (Avast Software)
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-09-28] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-09-28] (AVAST Software)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-09-28] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-09-28] (AVAST Software)
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-06] (AVAST Software)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-06] (AVAST Software)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-09-28] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-09-28] (AVAST Software)
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [274336 2015-09-28] (Avast Software)
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: Reg Delete "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F
Reg: Reg Add "HKLM\SOFTWARE\Microsoft\Shared Tools\MSConfig\startupreg" /F
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

Offline catman2112

  • Jr. Member
  • **
  • Posts: 90
Re: Avast install breaks windows 7
« Reply #37 on: January 07, 2016, 08:53:25 PM »
First attempt, got a blue screen of death on aswRdr2.sys....  "The driver unloaded without cancelling pending operations"

Offline catman2112

  • Jr. Member
  • **
  • Posts: 90
Re: Avast install breaks windows 7
« Reply #38 on: January 07, 2016, 09:09:44 PM »
Ok, that seemed to work this time...booted up fine, and now I am rebooting again to give it a solid reboot cycle before delving into the next phase, which, I assume is, reinstalling Avast correct?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Avast install breaks windows 7
« Reply #39 on: January 07, 2016, 09:13:46 PM »
Yep that is it

Download Avast Uninstall Utility to your Desktop.
Download the correct version of Avast 
Avast Free
Avast Pro
Avast Internet Security
Avast Premier
Disconnect from the net
Uninstall Avast via control panel

  • Run the uninstall tool and accept the reboot to safe mode
  • Once complete reboot your system
  • Reinstall Avast
----------

Offline catman2112

  • Jr. Member
  • **
  • Posts: 90
Re: Avast install breaks windows 7
« Reply #40 on: January 07, 2016, 11:13:15 PM »
Uninstaller still hangs...in safe mode.  Clearavast hangs as well...

Offline catman2112

  • Jr. Member
  • **
  • Posts: 90
Re: Avast install breaks windows 7
« Reply #41 on: January 08, 2016, 02:22:01 AM »
Tried using Revo and it LOOKED like it was going to actually do it....but after 3 hours of just spinning away, the hard drive pulses every second, and the screen is black....locked up.
Should I do another "FRST" and post to see if anything has changed?

Offline catman2112

  • Jr. Member
  • **
  • Posts: 90
Re: Avast install breaks windows 7
« Reply #42 on: January 08, 2016, 02:37:56 AM »
I'm trying to use Revo again - thistime I have "unchecked" the "Use Built In Uninstaller" to see what it does/finds... 

By the way, in case I didn't mention it before - thanks so much for your help on this....

Offline catman2112

  • Jr. Member
  • **
  • Posts: 90
Re: Avast install breaks windows 7
« Reply #43 on: January 08, 2016, 03:01:34 AM »
Well it looks like we may be in business...that Revo program is pretty slick and it hunted down the remnants (one of which I am certain was causing the hang of course).   I am currently reinstalling Avast now that I CAN reinstall it...

Offline catman2112

  • Jr. Member
  • **
  • Posts: 90
Re: Avast install breaks windows 7
« Reply #44 on: January 08, 2016, 03:55:30 PM »
Avastclear and now avast installer now won't install - they hang when you run them, but there appears to be no signs of Avast on the system anymore...ran FRST again....attached