Why is AvastUI.exe unkillable and why is it freezing everything it touches?

Every time i try to scan something with Avast, the Avast scan window does not appear and the window the program I’m trying to scan is in freezes causing me to have to restart windows explorer. Is there a way to kill AvastUI.exe without having to restart my computer?

I’ve tried ending process from windows task manager and taskkill /f from cmd.

Could you tell me which version of Avast you are currently using?

How/what are you trying to scan, is this running an on demand scan scan or right clicking on a particular file ?

Please go through the steps leading up to the freeze.

The Avast function you trying to kill are likely to be protected by the Avast Self Protection.

I agree with you, he would have to deactivate self-defense and take the test. If it doesn’t lock, there may be something that Avast is blocking.
It is still very difficult to know precisely what it is. :slight_smile:

23.12.8700.0

I’m right click scanning a PDF password rewriter. Each time i do the window the program it’s in freezes. It doesn’t respond until i try to close the indow it’s in and then it says i need to restart/close windows explorer. The avast scan window never appears and any attempt to open Avast does nothing except create a new instance of AvastUI.exe in my windows task manager.

Not sure why it is that you feel the need to scan it ?
What is the name of this program ?

If you downloaded this file, it should have been scanned by the Web Shield and also by the File System Shield if you ran it.

You could also try to upload the file or submit a link to VirusTotal of its online location - https://www.virustotal.com

I always scan files from websites i don’t know well. Call it force of habit. The name of the file is isumsoft-pdf-password-refixer

Not sure why it is that you feel the need to scan it ? What is the name of this program ?

If you downloaded this file, it should have been scanned by the Web Shield and also by the File System Shield if you ran it.

You could also try to upload the file or submit a link to VirusTotal of its online location - https://www.virustotal.com

I always scan files from websites i don't know well. Call it force of habit. The name of the file is isumsoft-pdf-password-refixer

When you download from the Web, first the Web Shield scans the site and contents. Secondly when the file is saved to the hard disk the File System Shield should also scan it. If Avast considered it malicious/infected, I would have expected it to have Alerted at that time.

Also as you see from the VT results this .zip file isn’t detected - https://www.virustotal.com/gui/url/93d99d0790b6f5a520487c94cc7fd6b6203e1505939a9411c0468e03dd7cca72 - by any of the scanners

I downloaded the .zip file and uploaded that and only one scanner thought it Adware, which in itself isn’t malware.
https://www.virustotal.com/gui/file/05a4cf53ced9e928700cfbdf7e8a45dd590007f5756d7e5a6371bf90a66f09f0

What about the ones at the bottom that couldn’t be scanned?

They are the ones that do not recognize the files as viruses, as if they do not exist in their product database.

Just because something can’t be scanned or is unrated doesn’t necessarily mean it is malware, etc. In cases like this you have to go with the majority. If that isn’t good enough, you can always delete the file concerned.

I agree, I always go for the majority. I’ve always been like this. :slight_smile:

It’s not a decision i can make lightly. The PDF that i need the program to open contains medical information that i need to undergo a surgery (otherwise insurance won’t cover it) I’ve spent days trying to crack it so i need this program in order to retrieve the password for the PDF. I need to find out indefinitely if its safe or not. But as for AvastUI.exe, i still need a way to deal with that as it’s still frozen.

Dear friend, the only way is for you to request this file again now without a password.
1 - Since AVAST informs you that the program you are using is suspicious.
2 - Or you talk to Avast support and send them this program so they can analyze the program and give a verdict. :slight_smile:

Unfortunately the original file is lost to time. But I’ll see about getting help from avast support. Thank you :slight_smile:

Okay my friend, when you get results from Avast support, come here on the forum and comment on everything that happened to you with support.

The VT URL scan was 1 year old, the VT file scan you provided was 2 months old (i have refreshed) Always use the Reanalyze button for a fresh result.

The scan result is the same, and since no other AV vendor has added detection in that time that indicate a FP from VBA32, also consider that the detection from VBA32 could be for the zip container and not the file inside

The file you uploaded is a zip file, meaning all the info found at the “details” button is for the zip container and not the file inside
so you can not see the correct hash, file type, when it was made, first uploaded, who made it…

So for correct file details upload the file inside the zip

Some of the engines at VT does not target all file types … there may be engines that dont unpack and scan inside zip, there may be engines that only target files for mobile phones…

Malwarebytes have program for android, Mac, Windows but the engine at VT only target windows files

Bitdefender have 3 engines at VT Bitdefender / Bitdefender Theta / Bitdefender Falx

Bitdefender Falx
This engine is specialized in Android and reinforces the participation of Bitdefender that already had two engines in our service, their multi-platform scanner (BitDefender) and a 100% machine learning engine (BitDefenderTheta). In the words of the company:

So i contacted Avast support and unfortunately they did not have a way to kill the process so i had to restart my computer (much to my chagrin) so everything is working now. They also explained to me that all those things in Virustotal were not files but places scanning the same file so now your “majority” comment makes sense to me (i was confused before). Thank you for your help and advice.

“Files that can’t be scanned” - The explanation comes from 2014 but is still viable today.
https://blog.avast.com/2014/02/28/how-do-i-handle-files-that-avast-cant-scan/