system
March 20, 2015, 8:12pm
1
I am trying to remove avast and anything I do results in the error:
“The stub cannot run installer/updater executable (code 0x3)”
Control panel → add remove programs doesn’t work and I have tried running the avastclear tool in safe mode as admin. nothing.
Help!
What Av did you have before ?
We can try to manually remove it if you wish
system
March 20, 2015, 8:21pm
3
I currently have version 8.0.1497
I have tried updating but the installer doesn’t appear to run and I get the error “avast service is not running” when trying to update through the software.
system
March 20, 2015, 8:41pm
4
And yes I want to remove it manually (or by any other means)
Check you have properly set TEMP (and TMP) environment variable.
system
March 20, 2015, 8:47pm
6
Can you clarify? how do I check this?
Hi,
Can you look at this tutorial https://forum.avast.com/index.php?topic=53253.0
Scroll down to “Farbar Recovery Scan Tool” and follow the directions for that tool only.
Attach both FRST.tx and Additions.txt logs in your next reply.
As soon as Essexboy is back online he will help you
Greetz, Red.
OK lets get at it.
First open Avast and go to settings > troubleshooting
Disable Avast self protection
THEN
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint:
HKLM-x32\...\Run: [avast] => C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software)
HKU\S-1-5-21-152642020-3837552317-4181921817-1000\...\Run: [Search Protection] => C:\Users\Jack\AppData\Roaming\Search Protection\SP.EXE [901144 2015-03-10] ()
HKU\S-1-5-21-152642020-3837552317-4181921817-1000\...\Run: [CMD] => cmd.exe /c start http://zenigameblinger.org && exit <===== ATTENTION
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-08-30] (AVAST Software)
Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-08-30] (AVAST Software)
Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
FF NetworkProxy: "autoconfig_url", "https://mediahint.com/default.pac"
FF NetworkProxy: "http", "88.87.84.60"
FF NetworkProxy: "http_port", 8888
FF NetworkProxy: "type", 2
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1031392 2014-12-01] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] ()
2015-03-16 20:09 - 2015-03-16 20:09 - 00003238 _____ () C:\Windows\System32\Tasks\{0A8B29F5-1FAC-484E-8033-914914F2442C}
2015-03-09 18:37 - 2015-03-09 18:37 - 00003412 _____ () C:\Windows\System32\Tasks\{9D834845-A885-42C6-B67C-75C1E1238A8C}
Task: {70F9E8F7-EA38-47F4-BB68-ABCFF14FAB47} - System32\Tasks\{0A8B29F5-1FAC-484E-8033-914914F2442C} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {A54CF11E-89C6-4719-9284-564AFE1B4934} - System32\Tasks\{9D834845-A885-42C6-B67C-75C1E1238A8C} => pcalua.exe -a "C:\Users\Jack\Local Settings\Application Data\Bundled software uninstaller\bi_client.exe" -c /initurl http://bi.bisrv.com/:affid:/:sid:/:uid:? /affid uninstall /id uninstall /name "Bundled software uninstaller"
AlternateDataStreams: C:\Program Files\Common Files\Microsoft Shared:vLqWTgCTwaBFA7AOZMXUKqV
AlternateDataStreams: C:\ProgramData\Microsoft:IDyHfDlz4C07sPJqVhARfubQ1x1
AlternateDataStreams: C:\ProgramData\Microsoft:Ot8Yv4bQKc53SD3MlZ14H9xSI
AlternateDataStreams: C:\ProgramData\Microsoft:Qx1fPZMhQxiLY51CSqall0
AlternateDataStreams: C:\Users\Jack\Local Settings:qk68qkZ8a1HVgzzCLkxD
AlternateDataStreams: C:\Users\Jack\AppData\Local:qk68qkZ8a1HVgzzCLkxD
AlternateDataStreams: C:\Users\Jack\AppData\Local\Application Data:qk68qkZ8a1HVgzzCLkxD
C:\Program Files\AVAST Software
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers
Save this as fixlist.txt , in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
ONCE DONE
Download Avast Uninstall Utility to your Desktop .
Download the correct version of Avast
Avast Free
Avast Pro
Avast Internet Security
Avast Premier
Disconnect from the net
[]Run the uninstall tool and accept the reboot to safe mode
[ ]Once complete reboot your system
[*]Reinstall Avast
system
March 21, 2015, 1:16pm
12
Before I do this, does it matter if I have installed anything since creating those logs?
Is it another AV ? Otherwise no
That should be no problem
system
March 21, 2015, 6:29pm
16
The issue has been fixed, thank you.
system
March 30, 2015, 2:38pm
18
Can I get help with manual removal?
IIRC … Problem began with a seemingly hung update of definitions from 8.0.1474. Evetually attempted uninstalled (using cntl panel). Now cannot re-install or uninstall using avastclear.exe - getting “The stub cannot run installer/updater executable…”.
I ran FRST.exe and examined its output, but too faint of heart to create my own fixit file.
Tnx