system
April 10, 2016, 9:25pm
1
Hi,
I have a common Avast issue : I can’t uninstall or update it.
I tried to use avastclear in safe mode but nothing changed.
I read several topics here where the issue was solved thanks to FRST. I attached the needed files to do the same.
Your help would be greatly appreciated. Thank you very much!
Eddy
April 10, 2016, 9:44pm
2
I suggest to remove avast manual completely and install the latest version.
system
April 11, 2016, 1:14pm
3
By removing it manually, do you mean that I should remove all avast files and folders from the PC ? In this case, nothing is removed and updated in the registry, so isn’t there any problem with it ?
This fix must be run from safe mode otherwise it will fail
CAUTION : This fix is only valid for this specific machine, using it on another may break your computer
Open notepad and copy/paste the text in the quotebox below into it:
CreateRestorePoint:
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [avast] => C:\Program Files\AVAST Software\Avast\avastUI.exe [4858968 2013-05-09] (AVAST Software)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2013-05-09] (AVAST Software)
SearchScopes: HKLM -> DefaultScope {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://www.searchqu.com/web?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
SearchScopes: HKLM-x32 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://www.searchqu.com/web?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1405954297-4098932185-257425090-1000 -> {9BB47C17-9C68-4BB3-B188-DD9AF0FD2410} URL = hxxp://www.searchqu.com/web?src=ieb&appid=0&systemid=410&sr=0&q={searchTerms}
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09] (AVAST Software)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2013-05-09] (AVAST Software)
Toolbar: HKLM-x32 - Pas de nom - {99079a25-328f-4bd4-be04-00955acaa0a7} - Pas de fichier
Toolbar: HKLM-x32 - avast! Online Security - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2013-05-09] (AVAST Software)
Toolbar: HKU\S-1-5-21-1405954297-4098932185-257425090-1000 -> Pas de nom - {7FEBEFE3-6B19-4349-98D2-FFB09D4B49CA} - Pas de fichier
Toolbar: HKU\S-1-5-21-1405954297-4098932185-257425090-1000 -> Pas de nom - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - Pas de fichier
FF user.js: detected! => C:\Users\Dammar\AppData\Roaming\Mozilla\Firefox\Profiles\8knls6kr.default\user.js [2013-06-11]
FF Extension: IMinent Toolbar - C:\Users\Dammar\AppData\Roaming\Mozilla\Firefox\Profiles\8knls6kr.default\Extensions\{C9B68337-E93A-44EA-94DC-CB300EC06444} [2012-07-30] [non signé]
FF HKLM-x32\...\Firefox\Extensions: [webbooster@iminent.com] - C:\Program Files (x86)\Iminent\webbooster@iminent.com => non trouvé(e)
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: avast! Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-06-13] [non signé]
CHR HomePage: Default -> hxxp://isearch.omiga-plus.com/?type=hp&ts=1402662148&from=ild&uid=ST3500418AS_Z2A7JG7T
CHR StartupUrls: Default -> "hxxp://isearch.omiga-plus.com/?type=hp&ts=1402662148&from=ild&uid=ST3500418AS_Z2A7JG7T"
CHR DefaultSearchURL: Default -> hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1402662148&from=ild&uid=ST3500418AS_Z2A7JG7T&q={searchTerms}
CHR DefaultSearchKeyword: Default -> omiga-plus
S2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [46808 2013-05-09] (AVAST Software)
R2 aswFsBlk; C:\Windows\System32\Drivers\aswFsBlk.sys [33400 2013-05-09] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [80816 2013-05-09] (AVAST Software)
R1 aswRdr; C:\Windows\System32\Drivers\aswrdr2.sys [72016 2013-05-09] (AVAST Software)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65336 2013-05-09] ()
R1 aswSnx; C:\Windows\System32\Drivers\aswSnx.sys [1025808 2013-05-09] (AVAST Software)
R1 aswSP; C:\Windows\System32\Drivers\aswSP.sys [378432 2013-05-09] (AVAST Software)
R1 aswTdi; C:\Windows\System32\Drivers\aswTdi.sys [64288 2013-05-09] (AVAST Software)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [189936 2013-05-09] ()
2016-04-10 20:18 - 2014-10-27 19:00 - 00000000 ____D C:\Program Files (x86)\Avira
2016-04-10 20:17 - 2014-10-27 19:00 - 00000000 ____D C:\ProgramData\Avira
2016-04-10 20:16 - 2014-10-27 19:01 - 00000000 ____D C:\Users\Dammar\AppData\Roaming\Avira
Task: {078AC3ED-FAB8-481F-8DA9-3CCB68985569} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2015-09-21] (AVAST Software)
Task: {8C206199-80E6-4CA1-9F90-35B7B2E7010B} - System32\Tasks\{4A8C99BB-AD80-408E-B9F2-C65A1C9494B4} => pcalua.exe -a "C:\Program Files\AVAST Software\Avast\aswRunDll.exe" -c "C:\Program Files\AVAST Software\Avast\Setup\setiface.dll" RunSetup
Task: {F6E01180-B1B0-4CA1-B5E9-9498AA038404} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-19] (Avast Software s.r.o.)
Task: C:\Windows\Tasks\8aec6301-edfb-4cd4-b184-5f4eaafdd6bd-11.job => C:\Program Files (x86)\1ClickMovie-Download V9.0\8aec6301-edfb-4cd4-b184-5f4eaafdd6bd-11.exe <==== ATTENTION
Task: C:\Windows\Tasks\8aec6301-edfb-4cd4-b184-5f4eaafdd6bd-6.job => C:\Program Files (x86)\1ClickMovie-Download V9.0\1ClickMovie-Download V9.0-novainstaller.exe?/AzbPex /azVwQsDXJ='1ClickMovie-Download V9.0' /phwTT=51382 /cmJfhqdsN='001598' /qEPUdcnpr='0' /mCRcBfGlq='0' /TrHxMHR=0C31BB5DA7F4475080D553ACDB6D4195IE /mWQQGmKL=35d7a16c494e7c530482d06c2d1fb042 /irfrQX=1_34_06_10 /OWwoXS=1.34.6.10 /gaDeCGr=1402661936 /MiVesYpR=hxxp:/stats.datademoserv.com /tSvpLfLED=hxxp:/errors.datademoserv.com /WVNMP=hxxp:/cr.install-daddy.com /IQIALwd=ch /UTsXAOTz /SThaut='nova' /fqAgEVsMe=hxxp:/cr.install-daddy.com /QngvpepaW='{asw:[2, 133]}' /xheDptDks=task /mlrPGIL='hxxp:/update.datademoserv.com/novacode/{CAMP_ID}/update.jso <==== ATTENTION
C:\Program Files\AVAST Software
C:\Program Files (x86)\Iminent
C:\Program Files\Common Files\AV\avast! Antivirus
C:\Program Files (x86)\1ClickMovie-Download V9.0
Reg: reg delete HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
Reg: reg add HKLM\SOFTWARE\Policies\Microsoft\Windows\IPSec\Policy\Local /f
RemoveProxy:
EmptyTemp:
CMD: bitsadmin /reset /allusers
Save this as fixlist.txt , in the same location as FRST.exe
https://dl.dropboxusercontent.com/u/73555776/FRSTfix.JPG
Run FRST and press Fix
On completion a log will be generated please post that
THEN
Download Avast Uninstall Utility to your Desktop .
Download the correct version of Avast
Avast Free
Avast Pro
Avast Internet Security
Avast Premier
Disconnect from the net
Uninstall Avast via control panel
[]Run the uninstall tool and accept the reboot to safe mode
[ ]Once complete reboot your system
[*]Reinstall Avast