system
February 21, 2016, 1:27am
1
Can someone please help, I recently noticed that my Avast said that I was unprotected, I clicked the resolve all button, and nothing happened, I un-installed it, and after the un-install the tray icon was still there, I tried to just delete my Avast folder from my program files, and got an access denied error, so after some research, I downloaded and installed AvastClear, and ran it in Safe Mode, per the instructions, and that seemed to do the trick, the tray icon was gone, but now, I’ve been trying to re-install Avast, and during the installation I keep getting this…
the stub cannot run installer/updater executable’ setup\Sfx\insup.exe’ (code 0x3)
I am attaching the Malwarebytes, and Farbar scans, tried to do an aswMBR.exe scan as well, but it stopped and closed during the scan.
Any help would be greatly appreicated.
Hi you have AVG installed and running that will need to be removed.
Run this fix from safe mode otherwise it will not work. Once it has run then run avastclear again
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint:
HKLM\...\Run: [AvastUI.exe] => "AvastUI.exe" /nogui
BHO: No Name -> {02478D38-C3F9-4efb-9B51-7695ECA05670} -> No File
BHO: No Name -> {3049C3E9-B461-4BC5-8870-4C09146192CA} -> No File
BHO: No Name -> {31c7d459-9cc3-44f2-9dca-fc11795309b4} -> No File
BHO: No Name -> {95B7759C-8C7F-4BF1-B163-73684A933233} -> No File
BHO: No Name -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> No File
BHO: No Name -> {EFA17361-CDC0-4927-9AFC-BAAD1F96B2AE} -> No File
BHO: No Name -> {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} -> No File
Toolbar: HKLM - No Name - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - No File
Toolbar: HKLM - No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
Toolbar: HKLM - No Name - {95B7759C-8C7F-4BF1-B163-73684A933233} - No File
Toolbar: HKU\.DEFAULT -> No Name - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - No File
Toolbar: HKU\.DEFAULT -> No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
Toolbar: HKU\S-1-5-21-1085031214-1580436667-1801674531-1004 -> No Name - {31C7D459-9CC3-44F2-9DCA-FC11795309B4} - No File
Toolbar: HKU\S-1-5-21-1085031214-1580436667-1801674531-1004 -> No Name - {CCC7A320-B3CA-4199-B1A6-9F516DD69829} - No File
Toolbar: HKU\S-1-5-21-1085031214-1580436667-1801674531-1004 -> No Name - {E7DF6BFF-55A5-4EB7-A673-4ED3E9456D39} - No File
Handler: linkscanner - No CLSID Value -
Handler: skype-ie-addon-data - No CLSID Value -
FF user.js: detected! => G:\Documents and Settings\Ragewind\Application Data\Mozilla\Firefox\Profiles\ksyktgml.default\user.js [2014-11-25]
FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - WebRep\FF
FF Extension: Avast Online Security - WebRep\FF [2016-02-20]
FF HKLM\...\Firefox\Extensions: [sp@avast.com] - G:\Program Files\AVAST Software\Avast\SafePrice\FF => not found
CHR Extension: (Avast SafePrice) - G:\Documents and Settings\Ragewind\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-11-25]
CHR Extension: (Avast Online Security) - G:\Documents and Settings\Ragewind\Local Settings\Application Data\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-11-25]
S2 avast! Antivirus; "AvastSvc.exe" [X]
R2 aswHwid; G:\windows\system32\drivers\aswHwid.sys [32792 2016-02-20] (AVAST Software)
R2 aswMonFlt; G:\windows\system32\drivers\aswMonFlt.sys [91168 2016-02-20] (AVAST Software)
R1 aswRdr; G:\windows\system32\drivers\aswRdr.sys [64272 2016-02-20] (AVAST Software)
R0 aswRvrt; G:\windows\system32\Drivers\aswRvrt.sys [58776 2016-02-20] (AVAST Software)
R1 aswSnx; G:\windows\system32\drivers\aswSnx.sys [812720 2016-02-20] (AVAST Software)
R1 aswSP; G:\windows\system32\drivers\aswSP.sys [447848 2016-02-20] (AVAST Software)
S3 aswStmXP; G:\windows\system32\drivers\aswStmXP.sys [171608 2016-02-20] (AVAST Software)
S3 aswTdi; G:\windows\system32\drivers\aswTdi.sys [67088 2016-02-20] (AVAST Software)
R0 aswVmm; G:\windows\system32\Drivers\aswVmm.sys [221240 2016-02-20] (AVAST Software)
S3 esgiguard; \??\G:\Program Files\Enigma Software Group\SpyHunter\esgiguard.sys [X]
S3 F-Secure Standalone Minifilter; \??\G:\DOCUME~1\Ragewind\LOCALS~1\Temp\OnlineScanner\Anti-Virus\fsgk.sys [X]
2016-02-20 10:29 - 2016-02-20 10:29 - 00000000 ____D G:\Program Files\AVAST Software
2016-02-20 02:56 - 2015-07-23 13:59 - 00171608 _____ (AVAST Software) G:\windows\system32\Drivers\aswStmXP.sys
2016-02-20 02:56 - 2014-05-12 15:34 - 00032792 _____ (AVAST Software) G:\windows\system32\Drivers\aswHwid.sys
2016-02-20 02:56 - 2014-01-22 09:34 - 00221240 _____ (AVAST Software) G:\windows\system32\Drivers\aswVmm.sys
2016-02-20 02:56 - 2014-01-22 09:34 - 00091168 _____ (AVAST Software) G:\windows\system32\Drivers\aswMonFlt.sys
2016-02-20 02:56 - 2014-01-22 09:34 - 00058776 _____ (AVAST Software) G:\windows\system32\Drivers\aswRvrt.sys
2016-02-20 02:56 - 2012-03-09 18:35 - 00812720 _____ (AVAST Software) G:\windows\system32\Drivers\aswSnx.sys
2016-02-20 02:56 - 2012-03-09 18:35 - 00447848 _____ (AVAST Software) G:\windows\system32\Drivers\aswSP.sys
2016-02-20 02:56 - 2012-03-09 18:35 - 00067088 _____ (AVAST Software) G:\windows\system32\Drivers\aswTdi.sys
2016-02-20 02:56 - 2012-03-09 18:35 - 00064272 _____ (AVAST Software) G:\windows\system32\Drivers\aswRdr.sys
Task: G:\windows\Tasks\avast! Emergency Update.job => G:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers
Save this as fixlist.txt , in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
system
February 21, 2016, 10:05pm
3
Thanks for the help. I removed ASG with their removal tool, then ran the Farbar fix in safe mode, like you said, here’s the log…
Eddy
February 21, 2016, 10:06pm
4
Please do not change the names of log files.
The date/time is already mentioned in them
system
February 22, 2016, 11:36am
5
I didn’t change anything, I just uploaded it from the folder that it was in.
Download Avast Uninstall Utility to your Desktop .
Download the correct version of Avast
Avast Free
Avast Pro
Avast Internet Security
Avast Premier
Disconnect from the net
Uninstall Avast via control panel
[]Run the uninstall tool and accept the reboot to safe mode
[ ]Once complete reboot your system
[*]Reinstall Avast
system
February 22, 2016, 10:05pm
7
I tried to run the uninstall tool, but got the same “the stub cannot run installer/updater executable’ setup\Sfx\insup.exe’ (code 0x3)” error
Are you changing where Avast is installing ?
system
February 24, 2016, 4:56pm
9
No, I don’t even get to that point, I start to run the program and a AVAST graphic comes up with a spinning circle, then after a while the error pops up, and I click the x, and everything goes away.
Could you run a fresh FRST scan please so that I can ensure that nothing was missed
system
February 26, 2016, 5:49pm
11
Okay, here’s the latest scan
This is all that remains of Avast … Just one registry entry
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint:
AV: avast! Antivirus (Enabled - Up to date) {7591DB91-41F0-48A3-B128-1A293FD8233D}
EmptyTemp:
CMD: bitsadmin /reset /allusers
Save this as fixlist.txt , in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
system
March 6, 2016, 9:58pm
13
Sorry, haven’t been around much, but I appreciate the help, I am going to run the fix, later today, but one question, right now, I have Avira Anti-virus on my computer, will that have any effect on the outcome?
Eddy
March 6, 2016, 10:05pm
14
system
March 7, 2016, 1:55am
15
Thanks for the item about having more than one anti-virus programs, I was only using the Avira, till I got Avast to work, then I was going to use Avast exclusively.
BTW, here’s the log…
Eddy
March 7, 2016, 11:40am
16
You need to remove a av completely before installing another.
system
April 28, 2016, 5:06pm
17
Okay, been away from the computer for a while, but as far as I know, all my anti-virus programs have been removed, and yet, when I tried to install AVAST again this morning, low and behold, what did I get? Yup, you guessed it, the same Damn error! so I went back into safe mode, and ran a new scan, and here’s the results.
Why is windows on your G drive and C drive set as removable
system
April 28, 2016, 6:56pm
19
I have no idea, it did have another hard drive originally, but it got damaged, and removed, so this is just how they set it up.
OK run this fix and then run the uninstall tool again
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
2016-04-28 08:43 - 2016-04-28 08:43 - 00000000 ____D G:\Program Files\AVAST Software
Save this as fixlist.txt , in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that