Author Topic: The stub cannot run installer/updater executable ... (code 0x3)  (Read 3219 times)

0 Members and 1 Guest are viewing this topic.

REDACTED

  • Guest
Hi,

I have a common Avast issue : I can't uninstall or update it.

I tried to use avastclear in safe mode but nothing changed.

I read several topics here where the issue was solved thanks to FRST. I attached the needed files to do the same.

Your help would be greatly appreciated. Thank you very much!

Offline Eddy

  • Avast Evangelist
  • Maybe Bot
  • ***
  • Posts: 31080
  • Watching (over?) you
    • Malware removal, Biljart and other things.
Re: The stub cannot run installer/updater executable ... (code 0x3)
« Reply #1 on: April 10, 2016, 11:44:03 PM »
I suggest to remove avast manual completely and install the latest version.

REDACTED

  • Guest
Re: The stub cannot run installer/updater executable ... (code 0x3)
« Reply #2 on: April 11, 2016, 03:14:43 PM »
By removing it manually, do you mean that I should remove all avast files and folders from the PC ? In this case, nothing is removed and updated in the registry, so isn't there any problem with it ?

Offline essexboy

  • Malware removal instructor
  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 40589
  • Dragons by Sasha
    • Malware fixes
Re: The stub cannot run installer/updater executable ... (code 0x3)
« Reply #3 on: April 11, 2016, 03:50:39 PM »
This fix must be run from safe mode otherwise it will fail



CAUTION :  This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:
 
Quote
CreateRestorePoint:
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [avast] => C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2013-05-09] (AVAST Software)
SearchScopes: HKLM -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://www.searchqu.com/web?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://www.searchqu.com/web?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1405954297-4098932185-257425090-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://www.searchqu.com/web?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09] (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-09] (AVAST Software)
Toolbar: HKLM-x32 - Pas de nom - {99079a25-328f-4bd4-be04-00955acaa0a7} -  Pas de fichier
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09] (AVAST Software)
Toolbar: HKU\S-1-5-21-1405954297-4098932185-257425090-1000 -> Pas de nom - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} -  Pas de fichier
Toolbar: HKU\S-1-5-21-1405954297-4098932185-257425090-1000 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} -  Pas de fichier
FF user.js: detected! => C:\Users\Dammar\AppData\Roaming\Mozilla\Firefox\Profiles\8knls6kr.default\user.js [2013-06-11]
FF Extension: IMinent Toolbar - C:\Users\Dammar\AppData\Roaming\Mozilla\Firefox\Profiles\8knls6kr.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444} [2012-07-30] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [webbooster@iminent.com] - C:\Program Files (x86)\Iminent\webbooster@iminent.com => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-06-13] [non signé]
CHR HomePage: Default -> hxxp://isearch.omiga-plus.com/?type=hp&ts=1402662148&from=ild&uid=ST3500418AS_Z2A7JG7T
CHR StartupUrls: Default -> "hxxp://isearch.omiga-plus.com/?type=hp&ts=1402662148&from=ild&uid=ST3500418AS_Z2A7JG7T"
CHR DefaultSearchURL: Default -> hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1402662148&from=ild&uid=ST3500418AS_Z2A7JG7T&q={searchTerms}
CHR DefaultSearchKeyword: Default -> omiga-plus
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1025808 2013-05-09] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378432 2013-05-09] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-05-09] ()
2016-04-10 20:18 - 2014-10-27 19:00 - 00000000 ____D C:\Program Files (x86)\Avira
2016-04-10 20:17 - 2014-10-27 19:00 - 00000000 ____D C:\ProgramData\Avira
2016-04-10 20:16 - 2014-10-27 19:01 - 00000000 ____D C:\Users\Dammar\AppData\Roaming\Avira
Task: {078AC3ED-FAB8-481F-8DA9-3CCB68985569} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-09-21] (AVAST Software)
Task: {8C206199-80E6-4CA1-9F90-35B7B2E7010B} - System32\Tasks\{4A8C99BB-AD80-408E-B9F2-C65A1C9494B4} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {F6E01180-B1B0-4CA1-B5E9-9498AA038404} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-19] (Avast Software s.r.o.)
Task: C:\Windows\Tasks\8aec6301-edfb-4cd4-b184-5f4eaafdd6bd-11.job => C:\Program Files (x86)\1ClickMovie-Download V9.0\8aec6301-edfb-4cd4-b184-5f4eaafdd6bd-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\8aec6301-edfb-4cd4-b184-5f4eaafdd6bd-6.job => C:\Program Files (x86)\1ClickMovie-Download V9.0\1ClickMovie-Download V9.0-novainstaller.exe?/AzbPex /azVwQsDXJ='1ClickMovie-Download V9.0' /phwTT=51382 /cmJfhqdsN='001598' /qEPUdcnpr='0' /mCRcBfGlq='0' /TrHxMHR=0C31BB5DA7F4475080D553ACDB6D4195IE /mWQQGmKL=35d7a16c494e7c530482d06c2d1fb042 /irfrQX=1_34_06_10 /OWwoXS=1.34.6.10 /gaDeCGr=1402661936 /MiVesYpR=hxxp:/stats.datademoserv.com /tSvpLfLED=hxxp:/errors.datademoserv.com /WVNMP=hxxp:/cr.install-daddy.com /IQIALwd=ch /UTsXAOTz /SThaut='nova' /fqAgEVsMe=hxxp:/cr.install-daddy.com /QngvpepaW='{asw:[2, 133]}' /xheDptDks=task /mlrPGIL='hxxp:/update.datademoserv.com/novacode/{CAMP_ID}/update.jso <==== ATTENTION
C:\Program Files\AVAST Software
C:\Program Files (x86)\Iminent
C:\Program Files\Common Files\AV\avast! Antivirus
C:\Program Files (x86)\1ClickMovie-Download V9.0
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers

 
Save this as fixlist.txt, in the same location as FRST.exe

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Download Avast Uninstall Utility to your Desktop.
Download the correct version of Avast 
Avast Free
Avast Pro
Avast Internet Security
Avast Premier
Disconnect from the net
Uninstall Avast via control panel

  • Run the uninstall tool and accept the reboot to safe mode
  • Once complete reboot your system
  • Reinstall Avast
----------