Impossible to Uninstall/install avast free antivirus (code 0x3)

Viruses and worms
1

Hello,
I have a Asus portable computer, running on W7 Family Edition.
I would like to update Free Avast to Free Avast 2015, but it doesn’t work : it asks me to restart computer, but nothing happens, even if I restart my computer 10 times !
Impossible also to unistall the old version that was on it (8.0.1501.0)
The problem is not new, but since now I was using another computer (that crashed down…) so I have to safely use this computer from now.
If I remerber well, this problem started after I clicked by mistake on a free essay version of Avast Internet Security (instead of the normal upgrade of free avast), when the essay version finished.

I did the whole processus indicated in https://forum.avast.com/index.php?topic=53253.0
Here attached are the different logs obtained.
Anyone to help me please ?

2
Impossible also to unistall the old version that was on it (8.0.1501.0)
did you follow instructions for using avast removal tool? https://www.avast.com/en-us/uninstall-utility
3

Hi this fix must be run from safe mode for it to work… I will also remove Trend Micro

CAUTION : This fix is only valid for this specific machine, using it on another may break your computer

Open notepad and copy/paste the text in the quotebox below into it:

KLM\...\Run: [VizorHtmlDialog.exe] => C:\Program Files\Trend Micro\Titanium\UIFramework\VizorHtmlDialog.exe [1123664 2010-10-08] (Trend Micro Inc.) HKLM\...\Run: [Trend Micro Client Framework] => C:\Program Files\Trend Micro\UniClient\UiFrmWrk\UIWatchDog.exe [192520 2010-10-12] (Trend Micro Inc.) HKLM\...\Run: [Trend Micro Titanium] => C:\Program Files\Trend Micro\Titanium\VizorShortCut.exe [322384 2010-09-17] (Trend Micro Inc.) HKLM-x32\...\Run: [avast] => C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2013-05-09] (AVAST Software) BHO: TmIEPlugInBHO Class -> {1CA1377B-DC1D-4A52-9585-6E06050FAC53} -> C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll [2010-09-17] (Trend Micro Inc.) BHO: avast! Online Security -> {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-09] (AVAST Software) BHO: TmBpIeBHO Class -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll [2010-09-17] (Trend Micro Inc.) BHO-x32: TmIEPlugInBHO Class -> {1CA1377B-DC1D-4A52-9585-6E06050FAC53} -> C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll [2010-09-17] (Trend Micro Inc.) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09] (AVAST Software) BHO-x32: TmBpIeBHO Class -> {BBACBAFD-FA5E-4079-8B33-00EB9F13D4AC} -> C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll [2010-09-17] (Trend Micro Inc.) Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-09] (AVAST Software) Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09] (AVAST Software) Handler: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe64.dll [2010-09-17] (Trend Micro Inc.) Handler-x32: tmbp - {1A77E7DC-C9A0-4110-8A37-2F36BAE71ECF} - C:\Program Files\Trend Micro\AMSP\Module\20002\6.5.1234\6.5.1234\TmBpIe32.dll [2010-09-17] (Trend Micro Inc.) Handler: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg.dll [2010-09-17] (Trend Micro Inc.) Handler-x32: tmpx - {0E526CB5-7446-41D1-A403-19BFE95E8C23} - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\TmIEPlg32.dll [2010-09-17] (Trend Micro Inc.) FF SearchPlugin: C:\Users\BureauZ\AppData\Roaming\Mozilla\Firefox\Profiles\4xlex40o.default\searchplugins\yahoo-avast.xml [2014-06-06] FF HKLM-x32\...\Firefox\Extensions: [{22C7F6C6-8D67-4534-92B5-529A0EC09405}] - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension FF Extension: Trend Micro NSC Firefox Extension - C:\Program Files\Trend Micro\AMSP\Module\20004\1.5.1381\6.5.1234\firefoxextension [2011-04-13] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2012-01-05] R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software) R3 TiMiniService; C:\Program Files\Trend Micro\Titanium\TiMiniService.exe [241488 2010-09-17] (Trend Micro Inc.) S3 Amsp; "C:\Program Files\Trend Micro\AMSP\coreServiceShell.exe" coreFrameworkHost.exe -m=rb -dt=60000 [X] R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-10-31] (AVAST Software) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-10-31] (AVAST Software) R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-10-31] (AVAST Software) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-10-31] () R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1030952 2013-10-31] (AVAST Software) R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378944 2013-10-31] (AVAST Software) R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-10-31] (AVAST Software) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-10-31] () R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [22600 2013-03-07] (AVAST Software) R2 tmactmon; C:\Windows\System32\DRIVERS\tmactmon.sys [90704 2010-09-17] (Trend Micro Inc.) R2 tmcomm; C:\Windows\System32\DRIVERS\tmcomm.sys [144464 2010-09-17] (Trend Micro Inc.) R2 tmevtmgr; C:\Windows\System32\DRIVERS\tmevtmgr.sys [67664 2010-09-17] (Trend Micro Inc.) R1 tmtdi; C:\Windows\System32\DRIVERS\tmtdi.sys [105552 2010-09-17] (Trend Micro Inc.) 2015-09-16 09:45 - 2015-09-16 09:46 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{621465B7-E739-45EC-A54C-AA121909FECE} 2015-09-15 15:59 - 2015-09-15 16:00 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{68A4BC05-D595-4B21-B243-B9D80A311D3E} 2015-09-13 23:30 - 2015-09-13 23:30 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{CCE81D01-D15E-409A-B16F-38CC2B32DF52} 2015-09-12 07:59 - 2015-09-12 07:59 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{BBE0DD3D-DA83-44EA-8FAE-8ABADD14C5F1} 2015-09-11 11:08 - 2015-09-11 11:08 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{E136F133-D645-4A17-BCC6-4F48E2DE97A6} 2015-09-10 14:28 - 2015-09-10 14:28 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{B3AF29DC-0E6A-4C62-8E33-26603CB93AD8} 2015-09-09 10:44 - 2015-09-09 10:44 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{637F6B6D-6330-4C04-AE13-B3A1427E9CE4} 2015-09-08 21:14 - 2015-09-08 21:15 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{297B3119-493D-43B6-B3C5-9806D5D72CA6} 2015-09-08 08:09 - 2015-09-08 08:09 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{EB9EF724-2B7D-40D8-821D-02CCC1516629} 2015-08-31 22:19 - 2015-08-31 22:19 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{9E2CA222-1F88-45ED-B890-01F9FCAE1A7D} 2015-08-27 09:08 - 2015-08-27 09:08 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{203B30F9-A0BE-477B-AA75-8A0ABFE72757} 2015-08-25 10:31 - 2015-08-25 10:31 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{7D01BC9D-3ED6-4444-8182-1D68323F4F32} 2015-08-24 17:07 - 2015-08-24 17:07 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{2C5D7B2C-F8F2-4602-81C1-A210C8D03D4E} 2015-08-23 15:18 - 2015-08-23 15:19 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{807BB86A-7092-4D51-8BD1-F6C14B376B5C} 2015-08-22 11:05 - 2015-08-22 11:05 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{2021EDCE-A86C-4D4E-A6B5-C6DD99D05629} 2015-08-21 12:18 - 2015-08-21 12:18 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{AFC9B0F2-106B-4F2C-8190-7A2709C87E1E} 2015-08-19 14:08 - 2015-08-19 14:08 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{A43F5809-DA0F-4A7E-90A7-55BAC476D8AF} 2015-08-17 11:45 - 2015-08-17 11:45 - 00000000 ____D C:\Users\BureauZ\AppData\Local\{736213B4-26D2-4D8C-8E73-B6830CB0AD00} AV: avast! Antivirus (Enabled - Out of date) {2B2D1395-420B-D5C9-657E-930FE358FC3C} AV: Trend Micro Titanium Internet Security (Disabled - Up to date) {68F968AC-2AA0-091D-848C-803E83E35902} AS: avast! Antivirus (Enabled - Out of date) {904CF271-6431-DA47-5FCE-A87D98DFB681} AS: Trend Micro Titanium Internet Security (Disabled - Up to date) {D3988948-0C9A-0693-BE3C-BB4CF86413BF} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} FW: avast! Internet Security (Disabled) {131692B0-0864-D491-4E21-3A3A1D8BBB47} Task: {45AF5E27-4B4F-4204-901A-14BF966BCD8F} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-09-08] (AVAST Software) Task: {4E726028-47C9-4BD4-BE9E-33EF969FC171} - System32\Tasks\{652DC3F0-CB80-4D82-9CCE-A31339B1AC7E} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup Task: {64B799B9-8EB4-4A47-9B8B-01AD06198A9F} - System32\Tasks\{9B41B15F-547F-41D4-9040-44A9BFAF2A22} => C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-05-09] (AVAST Software) Task: {A3DA0CF1-DBBF-43C5-987B-4C5D6DA0157D} - System32\Tasks\{764FB762-ED6A-4FDB-88F8-BF09181597C2} => C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-05-09] (AVAST Software) Task: {ACCF4F2C-FB25-4C1D-B54B-E4317043FDDB} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-23] (Avast Software s.r.o.) Task: {CEDE1559-9087-4DAD-999B-519965D8EC2F} - System32\Tasks\{4003E67D-1864-4F61-B740-3DE439080763} => C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-05-09] (AVAST Software) Task: {F652E5FB-CA7A-4EF0-A81E-C26DD51F1F7A} - System32\Tasks\{0A7AABBA-907B-4552-ACF2-56CCDA597FF5} => C:\Program Files\AVAST Software\Avast\AvastUI.exe [2013-05-09] (AVAST Software) C:\Program Files\AVAST Software C:\Program Files\Trend Micro CMD: bitsadmin /reset /allusers

Save this as fixlist.txt, in the same location as FRST.exe

https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG

Run FRST and press Fix
On completion a log will be generated please post that

THEN

Download Avast Uninstall Utility to your Desktop.
Download the correct version of Avast
Avast Free
Avast Pro
Avast Internet Security
Avast Premier
Disconnect from the net
Uninstall Avast via control panel

[]Run the uninstall tool and accept the reboot to safe mode
[]Once complete reboot your system
[*]Reinstall Avast

4

Thank you for your answer.
I don’t remember for this one in particular, since the pb appeared a long time ago, but I sure tried all the removing methods suggested

5

To Essexboy :
Thank you for your answer.
I ran FRST and join you the log… but I hope that I didn’t make a mistake, because I did that on normal mode ? (I don’t know how to run safe mode - I think it is what we call “mode sans échec” in french ? this only appears on my computer when it is blocked)
:frowning:

6

Using google translate…

Francais http://lmgtfy.com/?q=la+façon+de+démarrer+l'ordinateur+en+mode+sans+échec

English http://lmgtfy.com/?q=how+to+start+computer+in+safe+mode

7

Avast is still protecting its main folder could you now try to uninstall Avast and use the uninstall utility

8

To Pondus :
Thank you for the help, I have learned something ! (and not only the F8 function) :wink:
I did so in order to follow the instructions precedently given.

To Essexboy : At first it was not working, but after taking Trend titanium off, I succeded in uninstalling the old avast version and installing the new one. Thank you for your help !

9

Glad all is well it was Trend that was blocking things :slight_smile: