Followed your steps exactly to fully remove Avast. Did everything exactly as recommended. Cannot uninstall or install Avast.
Still get the message “The stub cannot run installer/updated executable ‘C:\Program Files\Awil Software\Avast5\setup\Sfx\avast.setup’ (code 0x3)”
Get message when I try the Avast uninstall untility. Even in SafeMode.
I’m attaching the logs from MalwareBytes, FRST & aswMBR.
Thanks
Greg
Hi what I will do is remove the adware and Avast, then we will go for a full install using the offline installer
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint: Toolbar: HKLM - No Name - {0974BA1E-64EC-11DE-B2A5-E43756D89593} - No File Toolbar: HKLM - No Name - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - No File FF SearchEngineOrder.1: default-search.net HKLM\...\Run: [avast] => C:\Program Files\Alwil Software\Avast5\avastUI.exe [4297136 2012-10-30] (AVAST Software) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => No File SearchScopes: HKLM -> {afdbddaa-5d3f-42ee-b79c-185a7020515b} URL = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT3241284 FF Extension: youtubeadblocker - C:\Users\Becca\AppData\Roaming\Mozilla\Firefox\Profiles\fyac4ril.default\Extensions\5M6Xk@PP.org [2015-01-09] FF Extension: uNisales - C:\Users\Becca\AppData\Roaming\Mozilla\Firefox\Profiles\fyac4ril.default\Extensions\ant@g.com [2015-01-09] FF Extension: unisalEs - C:\Users\Becca\AppData\Roaming\Mozilla\Firefox\Profiles\fyac4ril.default\Extensions\p@QrBXXfd7.com [2015-01-09] FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\Alwil Software\Avast5\WebRep\FF FF Extension: avast! Online Security - C:\Program Files\Alwil Software\Avast5\WebRep\FF [2011-03-02] CHR Extension: (No Name) - C:\Users\Becca\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda [2014-04-19] CHR HKLM\...\Chrome\Extension: [icmlaeflemplmjndnaapfdbbnpncnbda] - C:\Program Files\Alwil Software\Avast5\WebRep\Chrome\aswWebRepChrome.crx [2014-09-26] R2 avast! Antivirus; C:\Program Files\Alwil Software\Avast5\AvastSvc.exe [44808 2012-10-30] (AVAST Software) R2 aswFsBlk; C:\windows\system32\Drivers\aswFsBlk.sys [21256 2012-10-30] (AVAST Software) R1 aswKbd; C:\windows\system32\Drivers\aswKbd.sys [20624 2012-10-30] (AVAST Software) R2 aswMonFlt; C:\windows\system32\drivers\aswMonFlt.sys [58680 2012-10-30] (AVAST Software) R1 aswRdr; C:\windows\System32\Drivers\aswrdr2.sys [44784 2012-10-15] (AVAST Software) S1 aswSnx; C:\windows\system32\Drivers\aswSnx.sys [738504 2012-10-30] (AVAST Software) R1 aswSP; C:\windows\system32\Drivers\aswSP.sys [361032 2012-10-30] (AVAST Software) R1 aswTdi; C:\windows\system32\Drivers\aswTdi.sys [54232 2012-10-30] (AVAST Software) 2015-01-17 20:18 - 2015-01-17 20:18 - 00000042 _____ () C:\windows\system32\AK083E209605E394C.lie 2015-01-17 17:17 - 2015-01-17 17:17 - 05006864 _____ (AVAST Software) C:\Users\Becca\Downloads\avast_free_antivirus_setup_online.exe 2015-01-17 16:20 - 2015-01-17 16:20 - 00000000 ____D () C:\Users\Becca\AppData\Local\{9FF3BB54-6C15-4B02-902E-51B4E9BA1C93} 2015-01-10 12:25 - 2015-01-16 15:15 - 00000000 ____D () C:\Users\Becca\AppData\Local\{C9EE3F96-EE56-44F4-A0E6-FC71B8223E88} 2015-01-09 21:13 - 2015-01-17 16:16 - 00000000 ____D () C:\ProgramData\bdjnepidlfifmckfdghmcaciobnddgcm 2015-01-09 21:12 - 2015-01-17 16:16 - 00000000 ____D () C:\ProgramData\{40722dde-152b-d8ed-4072-22dde152b778} 2015-01-09 21:10 - 2015-01-17 16:16 - 00000000 ____D () C:\ProgramData\gbgnmihbnbbkdmkkaklgdiadhnabbank 2015-01-09 21:10 - 2015-01-17 16:16 - 00000000 ____D () C:\Program Files\unisoales 2015-01-09 21:10 - 2015-01-17 16:16 - 00000000 ____D () C:\Program Files\uNisales 2015-01-09 21:09 - 2015-01-17 16:16 - 00000000 ____D () C:\ProgramData\{1cdf2a9b-d07d-7f39-1cdf-f2a9bd07aa6f} 2015-01-09 12:02 - 2014-12-13 11:08 - 00000000 ____D () C:\Users\Becca\AppData\Local\{FCA35596-BB05-4005-9F3C-DC278946F53B} 2011-05-28 22:15 - 2011-05-30 17:06 - 0010986 ___SH () C:\ProgramData\80n70x50l01od3etil60gw51se8kpkiyh3h30b436qut HKU\S-1-5-21-1162106036-3523657170-133786673-1001\Software\Classes\.exe: exefile => "%1" %* <===== ATTENTION! HKU\S-1-5-21-1162106036-3523657170-133786673-1001\Software\Classes\exefile: "%1" %* <===== ATTENTION! C:\Program Files\Alwil Software C:\windows\system32\Drivers\aswFsBlk.sys C:\windows\system32\Drivers\aswKbd.sys C:\windows\system32\drivers\aswMonFlt.sys C:\windows\System32\Drivers\aswrdr2.sys C:\windows\system32\Drivers\aswSnx.sys C:\windows\system32\Drivers\aswSP.sys C:\windows\system32\Drivers\aswTdi.sys EmptyTemp: CMD: bitsadmin /reset /allusers
Save this as fixlist.txt, in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Please download AdwCleaner by Xplode onto your desktop.
[*]Close all open programs and internet browsers.
[*]Double click on AdwCleaner.exe to run the tool.
[*]Click on Scan.
[*]After the scan is complete click on “Clean”
[*]Confirm each time with Ok.
[*]Your computer will be rebooted automatically. A text file will open after the restart.
[*]Please post the content of that logfile with your next answer.
[*]You can find the logfile at C:\AdwCleaner[S1].txt as well.
FINALLY
Download Avast Uninstall Utility to your Desktop.
Download the correct version of Avast
Avast Free
Avast Pro
Avast Internet Security
Avast Premier
Disconnect from the net
Uninstall Avast via control panel
[]Run the uninstall tool and accept the reboot to safe mode
[]Once complete reboot your system
[*]Reinstall Avast