avast blocked by group policy

system · 2015-04-13T19:54:46.000Z

Hi
I can’t start avast anymore and instead i just get this “blocked by group policy” - pop-up window telling me it can’t started anymore… >:(

Could please someone help me with that issues ??
I’ve attached the logs running FRST64.exe

Thanks fro your help

Cheers

avastuser3796 · 2015-04-13T21:02:25.000Z

I will notify a remover for you.

essexboy · 2015-04-13T21:11:40.000Z

This should restart Avast

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION HKU\S-1-5-19\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2013-02-12] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-20\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2013-02-12] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-21-129209565-2811551309-3124360674-1001\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2013-02-12] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-21-129209565-2811551309-3124360674-1006\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2013-02-12] (Microsoft Corporation) <==== ATTENTION HKU\S-1-5-18\...\Winlogon: [Shell] C:\Windows\explorer.exe [2871808 2013-02-12] (Microsoft Corporation) <==== ATTENTION ShellIconOverlayIdentifiers: [1SecureIconsProvider] -> {FC9D8189-520A-4417-AED7-9EAC810C6FBA} => No File ProxyServer: [S-1-5-21-129209565-2811551309-3124360674-1001] => 192.168.171.99:8080 FF SelectedSearchEngine: istartsurf FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-04-13] CHR StartupUrls: Default -> "hxxp://www.istartsurf.com/?type=hp&ts=1428855249&from=smt&uid=WDCXWD7500BPKT-75PK4T0_WD-WXK1E72HWKN7HWKN7" CHR DefaultSearchKeyword: Default -> istartsurf CHR DefaultSearchURL: Default -> http://www.istartsurf.com/web/?type=ds&ts=1428855249&from=smt&uid=WDCXWD7500BPKT-75PK4T0_WD-WXK1E72HWKN7HWKN7&q={searchTerms} StartMenuInternet: (HKLM) Opera - C:\Program Files (x86)\Opera\Opera.exe http://www.istartsurf.com/?type=sc&ts=1428855249&from=smt&uid=WDCXWD7500BPKT-75PK4T0_WD-WXK1E72HWKN7HWKN7 2015-04-13 14:56 - 2015-04-13 14:56 - 00003354 _____ () C:\Windows\System32\Tasks\{E2D7B903-1688-4217-BA6A-C57A40212C53} Task: {A466D465-6FD5-4586-9FBA-35D004F90AB7} - System32\Tasks\VPNReactor => C:\Users\spallek\AppData\Local\Temp\Rar$EXa0.639\VPNReactor\VPNReactor.exe <==== ATTENTION Hosts: Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Please download AdwCleaner by Xplode onto your desktop.

[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S0].txt as well.

Announcements