Avast Shields will not turn on

Avast Free Antivirus / Premium Security
1

Hi guys,
I’ve been using avast free ever since I stopped using McAfee due to how bad it is (in my opinion). So after being on avast for probably 6-8 months I noticed a problem. My shields will not turn on. I’ve searched all over google and have found no working solution. When I use the windows services tool, and try to start avast, I get this error:

Windows could not start the avast! Antivirus service on Local Computer.

Error 1053: The service did not respond to the start or control request in a timely fashion.

I have tried the following fixes-
-Scan with malwarebytes (First time I experienced this, I did a quick scan and removed some malware and I was back to normal. When I experienced it this last time, I did about 3 full scans with malwarebytes and there was no malware)
-Uninstall
-Full uninstall with the removal tool in safe mode
-Rebooting
-Hitting the enable button (Obviously)
-Uninstalling avast and using another antivirus (Avira) to scan for viruses (In which I found 8, removed all and rebooted, then removed Avira and reinstalled avast, and still have nothing)
-All hints of both avira and Mcafee are gone.
I really like avast and I would like any help I can so I don’t have to use another antivirus.

2

are you sure all remanents of previous used AV are gone?
have you run the vendors removal tools?

General: Uninstalling a third-party antivirus software
http://www.avast.com/faq.php?article=AVKB11

have you tried avast repair?
controlpanel > ad/remove programs > avast > unnnstall > repair option…wait a minute and reboot

3

I forgot to mention that I have run the repair tool and there was no success with that.

I did find remnants of comodo from awhile ago, and so I went into safe mode to remove those folders. After a full investigation to make sure there was nothing remaining of Comodo, McAfee, or Avira, I rebooted into regular Windows, and there is still no luck.

I run Windows 7 64 bit and I can list my specs if needed.

4

Before we can try to help we really need some more information.
What exact version of avast do you have installed/are you trying to install?
What os/service pack is it you are using?
What other security software do you have installed?
How did you uninstall McAcrap and avira?
And please provide the logs as instructed here: http://forum.avast.com/index.php?topic=53253.0

Edit:
Removing the folders/files is not enough. You also need to remove registry entries.

5
And please provide the logs as instructed here: http://forum.avast.com/index.php?topic=53253.0
in your case OTL diagnostic log will be the important one.
6

Avast 2014 free, or whatever is the free version after I click download now here: http://www.avast.com/index

Windows 7 64 bit Home Premium OEM SP1

Yes.

How?

7

I’d suggest leaving the registry keys as they are. You could do more harm than good.

8

Fixed after I ran the anti spyware tool and rebooted. I’ll let you guys know if the problem reoccurs.

Cheers.

9

Always good to hear a problem is fixed. Thank you for letting us know.
I do suggest you run OTL again and attach the log here.
Let’s see if we can find more culprit or not.

10

There appears to be some remaining adware to kill

Warning This fix is only relevant for this system and no other, using on another computer may cause problems

Be advised that when the fix commences it will shut down all running processes and you may lose the desktop and icons, they will return on reboot

Run OTL

[*]Under the Custom Scans/Fixes box at the bottom, paste in the following

https://dl.dropbox.com/u/73555776/OTL_Fix.GIF


:Commands
[CREATERESTOREPOINT]

:OTL
SRV:64bit: - File not found [Auto | Stopped] -- C:\Program Files\McAfee\MSC\McAPExe.exe -- (McAPExe)
SRV - [2012/09/13 17:38:54 | 000,294,480 | ---- | M] (McAfee, Inc.) [Auto | Stopped] -- C:\Users\Josh\AppData\Local\Temp\MOBCleanup.exe -- (MOBCleanup)
IE - HKU\S-1-5-21-1196666780-3082290909-3120520986-1000\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www1.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=0E203085A93898F4&affID=123485&tt=070813_wc2&tsp=4971
FF - prefs.js..extensions.enabledAddons: ff4e2100-066b-466a-881a-df7dad4c2291%4054467212-c1fd-42ca-aca7-817bdcf73245.com:0.92.5
64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\PROGRAM FILES\IB UPDATER\FIREFOX
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{336D0C35-8A85-403a-B9D2-65C292C39087}: C:\Program Files\IB Updater\Firefox
[2013/08/05 17:17:24 | 000,000,000 | ---D | M] (appbario7) -- C:\Users\Josh\AppData\Roaming\Mozilla\Firefox\Profiles\n12o4ex5.default\extensions\{6926c7f7-6006-42d1-b046-eba1b3010315}
[2013/10/04 20:55:32 | 000,000,000 | ---D | M] ("LyricsGet-10") -- C:\Users\Josh\AppData\Roaming\Mozilla\Firefox\Profiles\n12o4ex5.default\extensions\ff4e2100-066b-466a-881a-df7dad4c2291@54467212-c1fd-42ca-aca7-817bdcf73245.com
[2013/10/15 17:31:56 | 000,000,000 | ---D | M] (GetSavin) -- C:\Users\Josh\AppData\Roaming\Mozilla\Firefox\Profiles\n12o4ex5.default\extensions\getsavin@jetpack
[2013/10/19 11:45:54 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Josh\AppData\Roaming\Mozilla\Firefox\Profiles\n12o4ex5.default\extensions\ff4e2100-066b-466a-881a-df7dad4c2291@54467212-c1fd-42ca-aca7-817bdcf73245.com\extensionData
[2013/10/19 11:45:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Josh\AppData\Roaming\Mozilla\Firefox\Profiles\n12o4ex5.default\extensions\ff4e2100-066b-466a-881a-df7dad4c2291@54467212-c1fd-42ca-aca7-817bdcf73245.com\extensionData\plugins
[2013/10/19 11:45:55 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Josh\AppData\Roaming\Mozilla\Firefox\Profiles\n12o4ex5.default\extensions\ff4e2100-066b-466a-881a-df7dad4c2291@54467212-c1fd-42ca-aca7-817bdcf73245.com\extensionData\userCode
[2013/08/11 12:22:17 | 000,006,547 | ---- | M] () -- C:\Users\Josh\AppData\Roaming\Mozilla\Firefox\Profiles\n12o4ex5.default\searchplugins\babylon.xml
[2013/08/02 12:19:48 | 000,000,995 | ---- | M] () -- C:\Users\Josh\AppData\Roaming\Mozilla\Firefox\Profiles\n12o4ex5.default\searchplugins\conduit.xml
[2013/10/04 20:54:30 | 000,003,746 | ---- | M] () -- C:\Users\Josh\AppData\Roaming\Mozilla\Firefox\Profiles\n12o4ex5.default\searchplugins\safeguard-secure-search.xml
[2013/04/06 01:07:03 | 000,002,519 | ---- | M] () -- C:\Users\Josh\AppData\Roaming\Mozilla\Firefox\Profiles\n12o4ex5.default\searchplugins\WebSearch.xml
[2013/04/06 01:07:03 | 000,002,519 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\WebSearch.xml
O2:64bit: - BHO: (LyricsGet-10) - {11111111-1111-1111-1111-110411221133} - C:\Program Files (x86)\LyricsGet-10\LyricsGet-10-bho64.dll File not found
O2:64bit: - BHO: (DataMngr) - {F2D6C718-7E52-428E-8852-365C4B1A6E36} - C:\Program Files (x86)\Settings Alerter\Datamngr\x64\BrowserConnection.dll (Koyote-Lab, inc)
O2 - BHO: (no name) - {d4f1c433-f9c3-49f2-8645-37dbeca19e90} - No CLSID value found.
O2 - BHO: (DataMngr) - {F2D6C718-7E52-428E-8852-365C4B1A6E36} - C:\Program Files (x86)\Settings Alerter\Datamngr\BrowserConnection.dll (Koyote-Lab, inc)
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - {d4f1c433-f9c3-49f2-8645-37dbeca19e90} - No CLSID value found.
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKU\S-1-5-21-1196666780-3082290909-3120520986-1000\..\Toolbar\WebBrowser: (no name) - {4D594333-0076-A76A-76A7-7A786E7484D7} - No CLSID value found.
O3 - HKU\S-1-5-21-1196666780-3082290909-3120520986-1000\..\Toolbar\WebBrowser: (no name) - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - No CLSID value found.
O3 - HKU\S-1-5-21-1196666780-3082290909-3120520986-1000\..\Toolbar\WebBrowser: (no name) - {D4027C7F-154A-4066-A1AD-4243D8127440} - No CLSID value found.
O4 - HKLM..\Run: [avgnt] "C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe" /min File not found
O4 - HKLM..\Run: [Conime] %windir%\system32\conime.exe File not found
O20:64bit: - AppInit_DLLs: (C:\PROGRA~3\Wincert\WIN64C~1.DLL) - File not found
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SETTIN~1\Datamngr\x64\datamngr.dll) - C:\Program Files (x86)\Settings Alerter\Datamngr\x64\datamngr.dll (Koyote-Lab, inc)
O20:64bit: - AppInit_DLLs: (C:\PROGRA~2\SETTIN~1\Datamngr\x64\IEBHO.dll) - C:\Program Files (x86)\Settings Alerter\Datamngr\x64\IEBHO.dll (Koyote-Lab, inc)
[2013/10/06 11:00:41 | 000,000,000 | ---D | C] -- C:\ProgramData\COMODO
[2013/10/06 11:00:09 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
[2013/04/11 16:06:51 | 000,000,318 | ---- | C] () -- C:\Windows\Tasks\shield check.job

:Files
C:\Users\Josh\AppData\Local\Google\Chrome\User Data\Default\Extensions\hiledapehlkhdehbhppgmekfalnlfajc
C:\Program Files (x86)\LyricsGet-10
C:\Program Files (x86)\Settings Alerter
C:\PROGRA~3\Wincert

:Commands
[resethosts]
[emptytemp]
[Reboot]

[*]Then click the Run Fix button at the top
[*]Let the program run unhindered, reboot the PC when it is done
[*]Open OTL again and click the Quick Scan button. Post the log it produces in your next reply.