Avastclear: The stub cannot run installer/updater executable (code 0x3)

I am trying to remove avast and anything I do results in the error:

“The stub cannot run installer/updater executable (code 0x3)”

Control panel → add remove programs doesn’t work and I have tried running the avastclear tool in safe mode as admin. nothing.

Help!

What Av did you have before ?

We can try to manually remove it if you wish

I currently have version 8.0.1497

I have tried updating but the installer doesn’t appear to run and I get the error “avast service is not running” when trying to update through the software.

And yes I want to remove it manually (or by any other means)

Check you have properly set TEMP (and TMP) environment variable.

Can you clarify? how do I check this?

Issue still not fixed

Hi,

Can you look at this tutorial https://forum.avast.com/index.php?topic=53253.0

Scroll down to “Farbar Recovery Scan Tool” and follow the directions for that tool only.
Attach both FRST.tx and Additions.txt logs in your next reply.

As soon as Essexboy is back online he will help you :slight_smile:

Greetz, Red.

What red said :slight_smile:

Attatched

OK lets get at it.

First open Avast and go to settings > troubleshooting
Disable Avast self protection

THEN

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

CreateRestorePoint: HKLM-x32\...\Run: [avast] => C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-08-30] (AVAST Software) HKU\S-1-5-21-152642020-3837552317-4181921817-1000\...\Run: [Search Protection] => C:\Users\Jack\AppData\Roaming\Search Protection\SP.EXE [901144 2015-03-10] () HKU\S-1-5-21-152642020-3837552317-4181921817-1000\...\Run: [CMD] => cmd.exe /c start http://zenigameblinger.org && exit <===== ATTENTION Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-08-30] (AVAST Software) Toolbar: HKLM - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-08-30] (AVAST Software) Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File FF NetworkProxy: "autoconfig_url", "https://mediahint.com/default.pac" FF NetworkProxy: "http", "88.87.84.60" FF NetworkProxy: "http_port", 8888 FF NetworkProxy: "type", 2 FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-08-30] (AVAST Software) R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-08-30] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-08-30] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-08-30] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-08-30] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1031392 2014-12-01] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-08-30] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-08-30] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [204880 2013-08-30] () 2015-03-16 20:09 - 2015-03-16 20:09 - 00003238 _____ () C:\Windows\System32\Tasks\{0A8B29F5-1FAC-484E-8033-914914F2442C} 2015-03-09 18:37 - 2015-03-09 18:37 - 00003412 _____ () C:\Windows\System32\Tasks\{9D834845-A885-42C6-B67C-75C1E1238A8C} Task: {70F9E8F7-EA38-47F4-BB68-ABCFF14FAB47} - System32\Tasks\{0A8B29F5-1FAC-484E-8033-914914F2442C} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup Task: {A54CF11E-89C6-4719-9284-564AFE1B4934} - System32\Tasks\{9D834845-A885-42C6-B67C-75C1E1238A8C} => pcalua.exe -a "C:\Users\Jack\Local Settings\Application Data\Bundled software uninstaller\bi_client.exe" -c /initurl http://bi.bisrv.com/:affid:/:sid:/:uid:? /affid uninstall /id uninstall /name "Bundled software uninstaller" AlternateDataStreams: C:\Program Files\Common Files\Microsoft Shared:vLqWTgCTwaBFA7AOZMXUKqV AlternateDataStreams: C:\ProgramData\Microsoft:IDyHfDlz4C07sPJqVhARfubQ1x1 AlternateDataStreams: C:\ProgramData\Microsoft:Ot8Yv4bQKc53SD3MlZ14H9xSI AlternateDataStreams: C:\ProgramData\Microsoft:Qx1fPZMhQxiLY51CSqall0 AlternateDataStreams: C:\Users\Jack\Local Settings:qk68qkZ8a1HVgzzCLkxD AlternateDataStreams: C:\Users\Jack\AppData\Local:qk68qkZ8a1HVgzzCLkxD AlternateDataStreams: C:\Users\Jack\AppData\Local\Application Data:qk68qkZ8a1HVgzzCLkxD C:\Program Files\AVAST Software Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f RemoveProxy: EmptyTemp: CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

ONCE DONE

Download Avast Uninstall Utility to your Desktop.
Download the correct version of Avast
Avast Free
Avast Pro
Avast Internet Security
Avast Premier
Disconnect from the net

[]Run the uninstall tool and accept the reboot to safe mode
[
]Once complete reboot your system
[*]Reinstall Avast


Before I do this, does it matter if I have installed anything since creating those logs?

Is it another AV ? Otherwise no

it was malwarebytes

That should be no problem

The issue has been fixed, thank you.

Glad to help

Can I get help with manual removal?

IIRC … Problem began with a seemingly hung update of definitions from 8.0.1474. Evetually attempted uninstalled (using cntl panel). Now cannot re-install or uninstall using avastclear.exe - getting “The stub cannot run installer/updater executable…”.

I ran FRST.exe and examined its output, but too faint of heart to create my own fixit file.

Tnx

Attach the logs please

Sure! Tnx.