Avast wont run or uninstall after upgrade

system · 2015-08-07T11:24:12.000Z

I have windows 7 and use avast pro. And have tried the malware cleaning tools, but it still will not work. I have also tried to delete the avast folder, but some did not delete.

When I try to run avast installation it produces the following error: The exception unknown software exception (0xc06d007e) occurred in the application at location 0x761cb727

I attach certain results

essexboy · 2015-08-07T11:50:51.000Z

Download Avast Uninstall Utility to your Desktop.
Download the correct version of Avast
Avast Free
Avast Pro
Avast Internet Security
Avast Premier
Disconnect from the net
Uninstall Avast via control panel

[]Run the uninstall tool and accept the reboot to safe mode
[]Once complete reboot your system
[*]Reinstall Avast

system · 2015-08-07T12:27:44.000Z

It gives me the stated error when I try to remove it via control panel. When I run the clean tool it also give the same error. As soon as I do something related to avast that error pops up :o.

essexboy · 2015-08-07T12:32:57.000Z

Could you attach the main FRST log and I will try to remove it manually

system · 2015-08-07T12:37:24.000Z

as requested.

essexboy · 2015-08-07T13:32:38.000Z

This must be run from safe mode otherwise it will fail

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6109776 2015-08-06] (AVAST Software) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-08-06] (AVAST Software) GroupPolicy: Group Policy on Chrome detected <======= ATTENTION CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION BHO-x32: No Name -> {2B363F9A-5A1D-F596-CCE7-018580F2EFC2} -> No File BHO-x32: No Name -> {ABE5C550-4240-A1A1-D1F8-8D5BD6406C16} -> No File Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Toolbar: HKU\S-1-5-21-2448610725-4270049149-14148690-1000 -> No Name - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - No File FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-08-14] CHR Extension: (Avast SafePrice) - C:\Users\Steyn\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-07-20] CHR Extension: (Avast Online Security) - C:\Users\Steyn\AppData\Local\Google\Chrome\User Data\Profile 2\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-07-21] S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-08-06] (AVAST Software) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-08-06] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-08-06] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-08-06] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-08-06] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1048856 2015-08-06] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [447944 2015-08-06] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [150672 2015-08-06] (AVAST Software) S3 aswTap; C:\Windows\System32\DRIVERS\aswTap.sys [44640 2014-07-27] (The OpenVPN Project) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-08-06] (AVAST Software) 2015-08-06 08:01 - 2015-08-06 08:01 - 00378880 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe 2015-08-06 08:00 - 2015-08-06 08:00 - 00043112 _____ (AVAST Software) C:\Windows\avastSS.scr 2015-08-06 08:01 - 2014-05-06 14:06 - 00028656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys 2015-08-06 08:01 - 2014-01-04 17:06 - 00150672 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys 2015-08-06 08:01 - 2013-02-28 21:42 - 00274808 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys 2015-08-06 08:01 - 2013-02-28 21:42 - 00065224 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys 2015-08-06 08:01 - 2012-08-14 00:40 - 00447944 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys 2015-08-06 08:01 - 2012-08-14 00:40 - 00093528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys 2015-08-06 08:01 - 2012-08-14 00:40 - 00090968 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys 2015-08-06 08:00 - 2012-08-14 00:40 - 01048856 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} CustomCLSID: HKU\S-1-5-21-2448610725-4270049149-14148690-1000_Classes\CLSID\{1423F872-3F7F-4E57-B621-8B1A9D49B448}\InprocServer32 -> C:\Users\Steyn\AppData\Local\Google\Update\1.3.27.5\psuser_64.dll No File Task: {3EE08842-53DE-430B-9F4C-1AD7BFA7FD2C} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-08-06] (AVAST Software) C:\Program Files\AVAST Software RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

system · 2015-08-07T13:46:39.000Z

I did as you said here are the log.

essexboy · 2015-08-07T14:20:26.000Z

Now run the uninstall utility and let me know the result

system · 2015-08-07T20:07:29.000Z

It worked :). Thank you very much for your help. It installed again and works perfect.

essexboy · 2015-08-07T21:04:37.000Z

system · 2015-12-08T18:32:32.000Z

Hello, I’m having the same issue. Please advise.

Thanks so much!!!

essexboy · 2015-12-08T18:48:31.000Z

Download Avast Uninstall Utility to your Desktop.
Download the correct version of Avast
Avast Free
Avast Pro
Avast Internet Security
Avast Premier
Disconnect from the net
Uninstall Avast via control panel

[]Run the uninstall tool and accept the reboot to safe mode
[]Once complete reboot your system
[*]Reinstall Avast

system · 2015-12-08T18:52:28.000Z

When I try to run the avastclear.exe, I get same error message, as the previous user got.

essexboy · 2015-12-08T20:47:03.000Z

Please download Farbar Recovery Scan Tool and save it to your Desktop.

Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.

[*]Right click to run as administrator (XP users click run after receipt of Windows Security Warning - Open File). When the tool opens click Yes to disclaimer.
[*]Select additions at the bottom
[*]Press Scan button.

https://dl.dropboxusercontent.com/u/73555776/frst.JPG

[*]It will produce a log called FRST.txt in the same directory the tool is run from.
[*]Please attach both logs generated.

system · 2015-12-08T21:32:27.000Z

Thank you for your help. Attached are both of the files.

essexboy · 2015-12-09T15:15:14.000Z

This fix must be run from safemode otherwise it will fail

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [6133520 2015-11-06] (AVAST Software) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-10-06] (AVAST Software) BHO-x32: No Name -> {074C1DC5-9320-4A9A-947D-C042949C6216} -> No File Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No File Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM - No Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} - No File Toolbar: HKLM-x32 - No Name - {517BDDE4-E3A7-4570-B21E-2B52B6139FC7} - No File Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File FF Extension: No Name - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-10-08] [not signed] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [146600 2015-10-06] (AVAST Software) S3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4048280 2015-10-06] (Avast Software) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [28656 2015-10-06] (AVAST Software) R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-10-06] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [90968 2015-10-06] (AVAST Software) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-10-06] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65224 2015-10-06] (AVAST Software) R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1059656 2015-11-06] (AVAST Software) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [449992 2015-11-06] (AVAST Software) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [153744 2015-10-06] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [274808 2015-10-06] (AVAST Software) R0 ngvss; C:\Windows\System32\Drivers\ngvss.sys [132656 2015-10-06] (AVAST Software) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [274336 2015-10-06] (Avast Software) 2015-12-03 12:37 - 2015-12-08 15:21 - 00000000 ____D C:\Windows\System32\Tasks\AVAST Software 2015-12-01 22:30 - 2015-12-01 22:30 - 00000000 __HDC C:\ProgramData\{1BA8C058-81C3-4597-B730-B552D203F516} 2015-12-01 22:29 - 2015-12-01 22:29 - 00000000 __HDC C:\ProgramData\{90D8CE90-3E6B-4034-A281-BC9F19B60A5B} 2015-11-22 19:23 - 2015-11-22 19:23 - 00000000 _____ C:\Users\Stephen\AppData\Local\{A1B8EA44-728E-40FB-8BD1-AE67FFF85E64} 2015-12-08 15:21 - 2013-09-22 13:59 - 00000000 ____D C:\Users\Stephen\AppData\Roaming\OpenCandy 2015-12-04 17:59 - 2012-11-13 09:28 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2015-12-02 10:14 - 2015-09-14 15:37 - 00000000 ____D C:\ProgramData\boost_interprocess 2015-06-08 00:51 - 2015-06-08 00:51 - 0000000 _____ () C:\Users\Stephen\AppData\Local\{815DFD41-23EC-456C-93E3-971B421B004A} 2015-11-22 19:23 - 2015-11-22 19:23 - 0000000 _____ () C:\Users\Stephen\AppData\Local\{A1B8EA44-728E-40FB-8BD1-AE67FFF85E64} 2012-11-15 20:35 - 2012-11-15 20:36 - 0000026 ____H () C:\ProgramData\.811261211181235583101118113995 AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} Task: {7D5FBFAD-B3A8-4DC5-9242-FA07CADDEFFB} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-12-03] (AVAST Software) Task: {CDD33E12-BFF2-4F5D-B9FE-B694D4DAD684} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-10-06] (AVAST Software) C:\Program Files\Common Files\AV\avast! Antivirus C:\Program Files\AVAST Software Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

Then run the avast utility

system · 2015-12-09T17:06:36.000Z

Great, THANK YOU SO MUCH! Did you want me to post the log first, and have you take a look at it before I run the avastclear.exe?

essexboy · 2015-12-09T18:46:59.000Z

Nope run avastclear

system · 2015-12-09T19:58:11.000Z

So, it did manage to get rid of Avast, which was awesome! However, it gave me a blue screen of death, and the bootloader somehow got corrupted. I managed to get that fixed via the command prompt off a Windows Recovery Disk. Once I got the computer loaded, Avast was gone, and I ran the avastcleaner.exe and it removed the remaining files. Thanks for all of your help!

essexboy · 2015-12-09T21:23:31.000Z

Announcements