Author Topic: Update to version 2016 blowed up Avast Free  (Read 4540 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Update to version 2016 blowed up Avast Free
« on: February 12, 2016, 02:17:52 PM »
I looked around but it seems it's not a wide spread issue, but if it is let me know where to read  :D

Product is Avast Free.

Two days ago I was notified a new version (2016) is available, I started the update and instead of reboot, I shut pc down as I finished my session anyway.

Today I notice Avast is not running, looking at the installation folder, all files are in .tmp extension, the logs says they was all renamed successfully, but obviously they're not.

I have Windows 10 and tried in the following order, to repair the installation, to uninstall (was not possible), used Avast Clear to remove installation (unsuccessfully, at least files were not removed), deleted avast folder both in program files and programdata, ran Avast Clear again, installed with online installer (unsuccessfully, files being .tmp again), removed again the installation with both avast clear and manual deleting, entirely deleted Windows/temp and user/appdata/local/temp, installed with offline installer (no success again, and again all files being .tmp)

I'm out of ideas, what can I try to make it work? If any useful info is missing, let me know.

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Update to version 2016 blowed up Avast Free
« Reply #1 on: February 12, 2016, 02:24:24 PM »
Remove avast completely.
You have to do it manually because doing it through control panel and using avastclear isn't doing so.

- Download the full installer > https://forum.avast.com/index.php?topic=182468.0
- Disconnect from the net (just to be safe)
- Remove all folders/files
- Remove all registry entries
- Reboot twice
    Sometimes Windows doesn't pick everything up after 1 reboot.
- Install avast
- Reboot twice

REDACTED

  • Guest
Re: Update to version 2016 blowed up Avast Free
« Reply #2 on: February 12, 2016, 02:29:20 PM »
- Remove all registry entries
Where can I find where to look about entires to delete? Is there a list of registry entries to remove or i need to just delete everything has "avast" name in the registry?

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Update to version 2016 blowed up Avast Free
« Reply #3 on: February 12, 2016, 02:42:24 PM »
You will need to do the last one since avast doesn't provide a list with all (possible) entries that their software create. :(

This will make it easy:
http://www.nirsoft.net/utils/regscanner.html

Run regscanner.exe
In the "find" field type avast
When it is finished searching you will get a long list.
It can have 800(!) or more entries, but that is normal.
In the menu > edit > select all
In the menu > file > delete selected keys/values

REDACTED

  • Guest
Re: Update to version 2016 blowed up Avast Free
« Reply #4 on: February 12, 2016, 03:59:14 PM »
Done as suggested, for some reason registry cleanup helped, now avast is installed and running....but, it ask for a reboot to complete the update, did it thrice and still asking for reboot. Any advice on this one?  :P

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31079
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: Update to version 2016 blowed up Avast Free
« Reply #5 on: February 12, 2016, 04:02:27 PM »
Twice should be enough.
Please run Farbar and attach FRST.txt and Addition.txt to your next post.
Let's see if we can find something that shouldn't be there.

http://www.bleepingcomputer.com/download/farbar-recovery-scan-tool/

REDACTED

  • Guest
Re: Update to version 2016 blowed up Avast Free
« Reply #6 on: February 12, 2016, 04:34:08 PM »
Here we go.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Update to version 2016 blowed up Avast Free
« Reply #7 on: February 12, 2016, 07:06:58 PM »
You may need to run this from safe mode for it to work

CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
CreateRestorePoint:
HKU\S-1-5-21-2210357916-2658277785-522756402-1001\...\Run: [Prices Drop Monitor for Amazon] => "C:\Users\Krdan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Delite Studio\Prices Drop Monitor for Amazon\Prices Drop Monitor for Amazon.appref-ms"
GroupPolicyScripts: Restriction <======= ATTENTION
CHR HKLM\SOFTWARE\Policies\Google: Restriction <======= ATTENTION
HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Restriction <======= ATTENTION
2016-02-12 15:36 - 2016-02-12 14:04 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw47F3.tmp
2016-02-12 15:36 - 2016-02-12 14:03 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw4760.tmp
2016-02-12 15:36 - 2016-02-12 14:03 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw47F2.tmp
2016-02-12 15:36 - 2016-02-12 14:03 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw4832.tmp
2016-02-12 15:36 - 2016-02-12 14:03 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw47D0.tmp
2016-02-12 15:36 - 2016-02-12 14:03 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw4780.tmp
2016-02-12 15:36 - 2016-02-12 14:03 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw47E1.tmp
2016-02-12 15:36 - 2016-02-12 14:03 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw47CF.tmp
2016-02-12 13:58 - 2016-02-12 13:48 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw7DB0.tmp
2016-02-12 13:58 - 2016-02-12 13:48 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw7E71.tmp
2016-02-12 13:58 - 2016-02-12 13:48 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw7E82.tmp
2016-02-12 13:58 - 2016-02-12 13:48 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw7EC1.tmp
2016-02-12 13:58 - 2016-02-12 13:48 - 00154024 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\ngv7D42.tmp
2016-02-12 13:58 - 2016-02-12 13:48 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw7E50.tmp
2016-02-12 13:58 - 2016-02-12 13:48 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw7DD1.tmp
2016-02-12 13:58 - 2016-02-12 13:48 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw7E60.tmp
2016-02-12 13:58 - 2016-02-12 13:48 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw7E3F.tmp
2016-02-12 13:48 - 2016-02-12 13:31 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw77B.tmp
2016-02-12 13:48 - 2016-02-12 13:31 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw77C.tmp
2016-02-12 13:48 - 2016-02-12 13:31 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw78C.tmp
2016-02-12 13:48 - 2016-02-12 13:31 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw769.tmp
2016-02-12 13:48 - 2016-02-12 13:31 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw757.tmp
2016-02-12 13:48 - 2016-02-12 13:31 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw77A.tmp
2016-02-12 13:48 - 2016-02-12 13:31 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw768.tmp
2016-02-12 13:48 - 2016-02-12 13:30 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw756.tmp
2016-02-12 13:48 - 2016-02-12 13:30 - 00154024 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\ngv746.tmp
2016-02-12 13:31 - 2016-02-12 13:27 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw331D.tmp
2016-02-12 13:31 - 2016-02-12 13:27 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw331E.tmp
2016-02-12 13:31 - 2016-02-12 13:27 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw331F.tmp
2016-02-12 13:31 - 2016-02-12 13:27 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw330B.tmp
2016-02-12 13:31 - 2016-02-12 13:27 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw330C.tmp
2016-02-12 13:31 - 2016-02-12 13:26 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw32F9.tmp
2016-02-12 13:31 - 2016-02-12 13:26 - 00154024 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\ngv32C9.tmp
2016-02-12 13:31 - 2016-02-12 13:26 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw32FA.tmp
2016-02-12 13:31 - 2016-02-12 13:26 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw330A.tmp
2016-02-12 13:27 - 2016-02-12 13:24 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswCFE6.tmp
2016-02-12 13:27 - 2016-02-12 13:24 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswD01A.tmp
2016-02-12 13:27 - 2016-02-12 13:24 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswD01B.tmp
2016-02-12 13:27 - 2016-02-12 13:24 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswD02C.tmp
2016-02-12 13:27 - 2016-02-12 13:24 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswD008.tmp
2016-02-12 13:27 - 2016-02-12 13:24 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswCFF7.tmp
2016-02-12 13:27 - 2016-02-12 13:24 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswD009.tmp
2016-02-12 13:27 - 2016-02-12 13:24 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswCFF8.tmp
2016-02-12 13:27 - 2016-02-12 13:23 - 00154024 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\ngvCFD5.tmp
2016-02-12 13:10 - 2016-02-12 12:48 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw84F3.tmp
2016-02-12 13:10 - 2016-02-12 12:48 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw85A4.tmp
2016-02-12 13:10 - 2016-02-12 12:48 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw85B4.tmp
2016-02-12 13:10 - 2016-02-12 12:48 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw85F4.tmp
2016-02-12 13:10 - 2016-02-12 12:48 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw8582.tmp
2016-02-12 13:10 - 2016-02-12 12:48 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw8532.tmp
2016-02-12 13:10 - 2016-02-12 12:48 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw8593.tmp
2016-02-12 13:10 - 2016-02-12 12:48 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw8581.tmp
2016-02-12 12:41 - 2016-02-12 12:33 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFA93.tmp
2016-02-12 12:41 - 2016-02-12 12:32 - 00154024 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\ngvF9C1.tmp
2016-02-12 12:41 - 2016-02-11 23:46 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFA83.tmp
2016-02-12 12:41 - 2016-02-11 23:46 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFAD3.tmp
2016-02-12 12:41 - 2016-02-11 23:46 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFA71.tmp
2016-02-12 12:41 - 2016-02-11 23:46 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFA11.tmp
2016-02-12 12:41 - 2016-02-11 23:46 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFA72.tmp
2016-02-12 12:41 - 2016-02-11 23:46 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswFA60.tmp
2016-02-12 12:41 - 2016-02-11 23:45 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswF9F1.tmp
2016-02-12 12:33 - 2016-02-11 23:46 - 00463744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswCEA0.tmp
2016-02-12 12:33 - 2016-02-11 23:46 - 00287016 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswCEA1.tmp
2016-02-12 12:33 - 2016-02-11 23:46 - 00165344 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswCEA2.tmp
2016-02-12 12:33 - 2016-02-11 23:46 - 00107792 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswCE9E.tmp
2016-02-12 12:33 - 2016-02-11 23:46 - 00103064 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswCE9C.tmp
2016-02-12 12:33 - 2016-02-11 23:46 - 00074544 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswCE9F.tmp
2016-02-12 12:33 - 2016-02-11 23:46 - 00037656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswCE9D.tmp
2016-02-12 12:33 - 2016-02-11 23:45 - 01065720 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswCE9B.tmp
2016-02-12 12:33 - 2016-02-11 23:45 - 00037144 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\aswF71B.tmp
2016-02-11 23:46 - 2015-11-07 15:57 - 01059656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw1EF7.tmp
2016-02-11 23:46 - 2015-11-07 15:57 - 00449992 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw1F0B.tmp
2016-02-11 23:46 - 2015-10-03 15:57 - 00274808 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw1F0C.tmp
2016-02-11 23:46 - 2015-10-03 15:57 - 00153744 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw1F0D.tmp
2016-02-11 23:46 - 2015-10-03 15:57 - 00093528 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw1EF8.tmp
2016-02-11 23:46 - 2015-10-03 15:57 - 00090968 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw1EFA.tmp
2016-02-11 23:46 - 2015-10-03 15:57 - 00065224 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw1F0A.tmp
2016-02-11 23:46 - 2015-10-03 15:57 - 00028656 _____ (AVAST Software) C:\WINDOWS\system32\Drivers\asw1EF9.tmp
C:\Users\Krdan\en_res.dll
C:\Users\Krdan\es_res.dll
C:\Users\Krdan\fr_res.dll
C:\Users\Krdan\grm_res.dll
C:\Users\Krdan\it_res.dll
C:\Users\Krdan\jp_res.dll
C:\Users\Krdan\mfc80u.dll
C:\Users\Krdan\msvcr80.dll
C:\Users\Krdan\PCPE Setup.exe
C:\Users\Krdan\pt_res.dll
C:\Users\Krdan\ResourceReader.dll
C:\Users\Krdan\ru_res.dll
C:\Users\Krdan\zh_res.dll
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

REDACTED

  • Guest
Re: Update to version 2016 blowed up Avast Free
« Reply #8 on: February 13, 2016, 10:41:50 AM »
Done, but Avast still ask for reboot. Furthermore, windows seems to no longer reboots correctly, it hangs on rebooting, after several minutes I had to push reset button.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Update to version 2016 blowed up Avast Free
« Reply #9 on: February 13, 2016, 12:44:23 PM »
Download Avast Uninstall Utility to your Desktop.
Download the correct version of Avast 
Avast Free
Avast Pro
Avast Internet Security
Avast Premier
Disconnect from the net
Uninstall Avast via control panel

  • Run the uninstall tool and accept the reboot to safe mode
  • Once complete reboot your system
  • Reinstall Avast
----------

REDACTED

  • Guest
Re: Update to version 2016 blowed up Avast Free
« Reply #10 on: February 13, 2016, 02:04:26 PM »
Uninstall via control panel is not possible (ask for reboot because there is an installation action pending)
Avast Clear did not work before on my system, as I stated in my first post it says everything is uninstalled but in fact everything is still around. (done in safe mode)

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Update to version 2016 blowed up Avast Free
« Reply #11 on: February 13, 2016, 02:12:23 PM »
OK could you run a fresh FRST scan please and I will remove it manually

REDACTED

  • Guest
Re: Update to version 2016 blowed up Avast Free
« Reply #12 on: February 13, 2016, 02:40:08 PM »
FYI, thanks to Eddy's suggestions I already performed a manual cleanup of everything Avast related:
  • Manually deleted C:\Program Files\AVAST Software
  • Manually deleted C:\ProgramData\AVAST Software
  • Deleted Avast registry entries with RegScanner
  • Further manual cleanup of registry of everything Avast related undeletable by RegScanner
  • Installed via offline installer (avast_free_antivirus_setup.exe), unplugged from network
I could do it again if needed, but I'm not sure where it stuck up.

FRST and Addition attached.

REDACTED

  • Guest
Re: Update to version 2016 blowed up Avast Free
« Reply #13 on: February 13, 2016, 03:10:21 PM »
UPDATE: After doing "dism /online /Cleanup-Image /StartComponentCleanup", for some reason, now Avast no longer ask for reboot, and installed addon for Firefox.

Sometime Windows continue to stuck on rebooting, but i guess this is no longer an Avast related problem.

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: Update to version 2016 blowed up Avast Free
« Reply #14 on: February 13, 2016, 03:28:14 PM »
There do not appear to be any consistent errors showing up and Avast is showing no extra files now.  So this may be another minor element within windows.  Does this happen every boot or just sometimes