I can’t open Avast
The popup message is “This program is blocked by group policy. For more information, please contact your system administrators”
How to solve this kind of problem?
Any information will be helpful.
I try to fix this problem by download FRST. After scan, there are 3 files that I got.
Then I don’t know where to start next.
Could anyone help me please?
[list]Hello,
I will be helping you in removing malware. Before that … this number of active AV can’t be good. You should act & fix this now!
While we clean your hosts mashine, do not use any USB memory devices. We shall check and clean them later…
Multiple Antivirus Programs
You are running more than 1 Antivirus (AV) program!
AV: ESET NOD32 Antivirus 5.0 (Enabled - Out of date) {77DEAFED-8149-104B-25A1-21771CA47CD1}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AV: Baidu Antivirus (Enabled - Up to date) {10616E6C-0E20-8594-D377-A7D03F6128A6}
AS: ESET NOD32 Antivirus 5.0 (Enabled - Out of date) {CCBF4E09-A773-1FC5-1F11-1A056723366C}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Baidu Antivirus (Enabled - Up to date) {AB008F88-281A-8A1A-E9C7-9CA244E6621B}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
Running - more than one - antivirus program is not recommended because:
[*]They can conflict with each other.
[*]Report the other antivirus software as malicious.
[*]Antivirus programs use an enormous amount of computer’s resources… actively scanning your computer.
[*]Can cause your computer to become unstable…run slowly and even, in rare cases, BSOD crash…etc
I strongly suggest you uninstall one of them. Which one, is your decision.
=> Then download corresponding uninstall tool to remove AV leftovers. You shall find the tools on links below:
http://singularlabs.com/uninstallers/security-software/
http://www.askvg.com/ultimate-collection-of-uninstallers-removal-tools-for-all-popular-anti-virus-software/
First we’re need to remove adware and bad PUP software. From Programs and Features (Start > Control Panel), find & remove/uninstall the following:
Baidu PC Faster
Then …
1. Open notepad and copy/paste the text present inside the code box below.
To do this highlight the contents of the box and right click on it. Paste this into the open notepad.
NOTICE: This script was written specifically for this user, for use on that particular machine. Running this on another machine may cause damage to the operating system
Start Folder: C:\Windows\M57151 Hosts: HKLM Group Policy restriction on software: C:\Program Files\AVAST Software <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\ESET <====== ATTENTION HKLM Group Policy restriction on software: C:\Documents and Settings\All Users\Application Data\AVAST Software <====== ATTENTION HKLM Group Policy restriction on software: C:\Program Files\ESET <====== ATTENTION HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe , "C:\Windows\M57151\Ja412476bLay.com" Task: {4305BE03-B5BC-42AE-B494-5BC35B11CA5A} - System32\Tasks\Baidu PC Faster Update => C:\Program Files\WindowsFaster\Updater.exe [2014-07-08] (Baidu Inc.) Task: {81DEDE34-B8F7-4E98-989F-199CEF5F86B0} - \GoogleUpdateTaskUserS-1-5-21-1420812807-866165870-3839957595-500UA No Task File <==== ATTENTION Task: {EF8D4B5A-AD45-4B5B-BF87-C1E731CAFF9E} - \GoogleUpdateTaskUserS-1-5-21-1420812807-866165870-3839957595-500Core No Task File <==== ATTENTION AlternateDataStreams: C:\Windows:AstInfo AlternateDataStreams: C:\ProgramData\Temp:1CE11B51 HKU\S-1-5-21-1420812807-866165870-3839957595-500\...\MountPoints2: G - G:\AutoRun.exe HKU\S-1-5-21-1420812807-866165870-3839957595-500\...\MountPoints2: {11a38c49-9a7a-11e1-bc4d-e0ca94161293} - G:\AutoRun.exe HKU\S-1-5-21-1420812807-866165870-3839957595-500\...\MountPoints2: {11a38c53-9a7a-11e1-bc4d-e0ca94161293} - G:\AutoRun.exe HKU\S-1-5-21-1420812807-866165870-3839957595-500\...\MountPoints2: {11a38c80-9a7a-11e1-bc4d-e0ca94161293} - G:\AutoRun.exe HKU\S-1-5-21-1420812807-866165870-3839957595-500\...\MountPoints2: {2fdfb195-a325-11e1-8372-e0ca94161293} - G:\AutoRun.exe HKU\S-1-5-21-1420812807-866165870-3839957595-500\...\MountPoints2: {2fdfb1bd-a325-11e1-8372-e0ca94161293} - G:\AutoRun.exe HKU\S-1-5-21-1420812807-866165870-3839957595-500\...\MountPoints2: {56369745-57ed-11e2-b5f8-e29dba66bbbb} - G:\AutoRun.exe HKU\S-1-5-21-1420812807-866165870-3839957595-500\...\MountPoints2: {56369759-57ed-11e2-b5f8-e29dba66bbbb} - G:\AutoRun.exe HKU\S-1-5-21-1420812807-866165870-3839957595-500\...\MountPoints2: {56369763-57ed-11e2-b5f8-e29dba66bbbb} - G:\AutoRun.exe HKU\S-1-5-21-1420812807-866165870-3839957595-500\...\MountPoints2: {e75bee3f-c626-11e1-830f-8a1565660ca4} - G:\AutoRun.exe HKU\S-1-5-21-1420812807-866165870-3839957595-500\...\MountPoints2: {e75bee74-c626-11e1-830f-001e101f3315} - G:\AutoRun.exe HKU\S-1-5-21-1420812807-866165870-3839957595-500\...\Winlogon: [Shell] C:\Windows\explorer.exe [2616320 2010-11-21] (Microsoft Corporation) <==== ATTENTION IFEO\msconfig.exe: [Debugger] C:\Windows\notepad.exe IFEO\regedit.exe: [Debugger] C:\Windows\notepad.exe CHR HKLM\SOFTWARE\Policies\Google: Policy restriction <======= ATTENTION U3 Changer; Reboot: C:\Windows\M57151\Ja412476bLay.com C:\Users\Administrator.XCTO7W7LI8HUM3Q\AppData\Roaming\Tgnpgev C:\Users\Administrator.XCTO7W7LI8HUM3Q\AppData\Local\Obzics C:\Users\Administrator.XCTO7W7LI8HUM3Q\AppData\Local\Temp\spark_install.exe End
2. Save notepad as fixlist.txt to your Desktop.
NOTE: => It’s important that both files, FRST and fixlist.txt are in the same location or the fix will not work.
3. Run FRST/FRST64 and press the Fix button just once and wait.
If the tool needed a restart please make sure you let the system to restart normally and let the tool completes its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach it to your reply.
Note: If the tool warned you about the outdated version please download and run the updated version.
Hi.
I’m also having a problem with my Avast, I can’t run cause it says it is blocked by group policy, I already installed and ran FRST64 a this is what I came up with.
Please help me solve this problem! Cheers!
P.S txt. files attached
May I suggest that you start your own topic.
Even though you stated that the FRST64.txt file is attached, it isn’t part of your post.
Hello Avast Team,
I am also running into this issue with this group. I attached the FRST.txt document.
Please let me know what I will have to do in order to get Avast up and running again.
Thanks,
-Ben
@thisisbenmooney https://forum.avast.com/index.php?topic=165112.new#new