Are both avast! services running?

The update clearly runs under account of MARIO/mario coucke - if such user doesn’t have administrator rights, it won’t work. But the update service should impersonate the LocalSystem account.