Install/Unistall.....

OK…this is too strange! For only one of my users and on only one of her 3 laptops Avast installs and then uninstalls right away with no warning. I am sure this is NOT an Avast issue - per se - there must be something on there doing this but I am damned if I can find it. She had Spy bot on there but I uninstalled that and the issue persists…Basically, looking for suggestions or - hopefully - someone else has seen this issue.

It cannot be her user account because I have tried this as both the domain admin and the user, plus her brand new laptop installed perfectly…UGH!

Guess this isn’t a reply to this but wondering about the uninstalling Avast? Have a computer (Windows 97) that is not ever going to be connected on-line again and only use with PrintMaster and trying to make as much room as possible. How do I uninstall it?
If wrong thread to have this on please let me know so I can start a new one.
Thanks

@ iroquoisarcher
You should start your own new topic as your question is unrelated to that of the original poster.

However, uninstalling avast is achieved in the same way for other programs, using windows add remove programs. This would leave you totally unprotected and it isn’t on;y the Internet that can deliver malware.

You are living on borrowed time for win97 and avast 4.8 anyway as it isn’t supported by avast 5.0, 5.1 or avast 6.0 so you couldn’t upgrade. Only avast 4.8 will work on it and support for that is due to cease in the not to distant future, so it is very much on life support right now.

@ jbogut
What AV did she have before as spybot isn’t an AV and shouldn’t have been an issue in the failed install.

Are there any entries in the windows event viewer logs that might be related ?

Are there any elements of the avast install remaining, e.g. Program folder, registry entries, etc. ?

Just got htis from the deploy log…does it tell anyone anything? I am using an account which is both a domain and local admin…no remnants of Avast or McAfee:

02/28/11 15:32:27: rinstInstall begin
02/28/11 15:32:27: Init 50 60 C:\WINDOWS\TEMP\asw1A.tmp C:\Program Files\Alwil Software\Management Tools\InstPkgs NULL C:\WINDOWS\TEMP\asw19.tmp 0
02/28/11 15:32:27: Store
02/28/11 15:32:27: Domains: *,
02/28/11 15:32:27: Init WELLDOM\ROPERMD620
02/28/11 15:32:27: ROPERMD620: GetAccount
02/28/11 15:32:27: ROPERMD620: Queueing
02/28/11 15:32:27: StartThread
02/28/11 15:32:27: Loop
02/28/11 15:32:27: SpawnThreads
02/28/11 15:32:27: ROPERMD620: StartSetup
02/28/11 15:32:27: ROPERMD620: Connecting
02/28/11 15:32:27: ROPERMD620: Copying files
02/28/11 15:32:27: ROPERMD620: CreateDirectory \ROPERMD620\C$~AVINSTL error 5 (Access is denied)
02/28/11 15:32:27: ROPERMD620: RemoveOnError
02/28/11 15:32:27: ROPERMD620: CloseConnection
02/28/11 15:32:27: ROPERMD620: Finished with error
02/28/11 15:32:27: TerminateAll
02/28/11 15:32:27: rinstInstall end 0

Sorry, unfortunately that doesn’t really tell me anything, I’m not familiar with domain accounts.

@ jbogut,

Did you follow the vendor’s instructions for uninstalling SB with Teatimer followed by a reboot? See below.

Uninstall Spybot S&D w/Teatimer: http://www.safer-networking.org/en/howto/uninstall.html.

  • How to disable Spybot-S&D (temporarily). http://www.safer-networking.org/en/howto/disable.html . Even though it says temporarily, the resident parts of SpyBot Search & Destroy must be enabled manually if disabled in this manner. TeaTimer doesn’t load into memory at all when disabled.

What other security software does the user currently have or had in the past that was not uninstalled via the vendor’s uninstaller tool:

  • Antivirus
  • Firewall
  • Trial versions
  • Security software

Have you tried downloading and installing free on-demand MBAM (Malwarebytes) http://www.malwarebytes.org/ to check for malware as malware can prevent the installation of antivirus software? Update MBAM prior to scanning, and quarantine any infection found (if any).

  1. Nope, just uninstalled it but as part of that i did remove all folders, which is what they say to do
  2. Nothing I could find…it looks like an installation of “Dameware” was the culprit but I have yet to check on her second machine - WEIRD
  3. Will try that on 2nd machine if it doesn’t play nice after removing Dameware
  1. You uninstalled SB w/TT? I just need clarification. Thanks.
  2. Who put Dameware on the machine? I’m sure you researched what this is, and you should remove it especially if you are the Admin. I would also do an MBAM scans just to be sure the machine is clean after this since you don’t know what else this user has downloaded or installed.

Is Avast working after uninstalling SB and Dameware? If not, please try an Avast Repair:

  • Go to Control Panel > Add/Remove programs > Avast Antivirus.
  • Scroll down and choose Repair function in the pop-up window.
  • Reboot.

Let us know how the machines (#1 and #2) are behaving and provide MBAM scans if they are not clean (cut and paste or do an attachment to your next post). Thank you.