Hi!
Can’t run avast because “This app has been blocked by your system administrator. Contact your system administrator for more info.” and can’t uninstall it either because of a group policy.
Is my system infected (tried some bad stuff yesterday…) or some other problem? Logs attached.
Is this a business computer?
seems you have ESET firewall ?
FW: ESET Palomuuri (Disabled) {D426EE12-AE7E-4602-F40F-BBCA8137EB0B}
(ESET) C:\Program Files\ESET\ESET Security\ekrn.exeThe genuine ekrn.exe file is a software component of ESET Smart Security by ESET.
Expert is notified, it may take hours before he is online
Uninstall ESET Security or Avast. Notify us when you do that.
Found some instructions already about entries in HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\Safer etc… and somehow all the Avast files were in there. Deleted the entries, restarted and everything works again like a charm. And of course after that ran full system scan and some other malware programs (and uninstalled ESET) and everything seems to be in order now.
I’m still not sure how those entries ended up in the registry, was it because of the Avast update or because I deactivated procetion for a few minutes to try something but won’t do it ever again for sure!
always remove old AV according to vendors instructions using removal tool before you install new AV
https://support.avast.com/en-ww/article/Uninstall-other-antivirus