Trying to remove Avira

[changeling616]

Hello all,

I was having strange issues with my Windows 10 machine and could not seem to get rid of the issue with Malwarebytes.

I then installed Avira on my computer... but do not yet know how to remove it because when I try remove program feature, I get a message saying "Avira cannot be uninstalled because it is required by the following applications: - Antivirus".

How do I remove the program? I tried the instructions given by Avira for Windows 10.   Avira says to use the following commands:

1. Click the Windows icon in the lower left hand corner of your screen → Settings → System → Apps & features .
2. Click first on "Avira Antivirus" and subsequently on Uninstall.
3. Confirm the following product uninstall notification with Uninstall.
4. Confirm the request of the “User Account Control” with Yes.
5. Confirm the request of the Avira setup with Yes.
6. The Avira Setup will take some minutes to uninstall the product.
7. Confirm the notification to restart your system with Yes.
8. After the reboot of your PC the Avira product is completely removed.

That is how I got the error message I described above.

I was also told, at a different page use the Windows Powershell(Admin) and run some commands. That did not help either.  Unfortunately, now I cannot find the page with those instructions, so I do not know the commands I entered.

[AdvancedSetup]

Hello @changeling616 and

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system.
You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well.

 

Thank you

Ron

 

[changeling616]

32 minutes ago, AdvancedSetup said:

Hello @changeling616 and

 

Please download Farbar Recovery Scan Tool and save it to your desktop.

Note: You need to run the version compatible with your system.
You can check here if you're not sure if your computer is 32-bit or 64-bit

• Double-click to run it. When the tool opens click Yes to disclaimer.
• Press Scan button.
• It will make a log (FRST.txt) in the same directory the tool is run. Please attach it to your reply.
• The first time the tool is run, it also makes another log (Addition.txt). Please attach it to your reply as well.

 

Thank you

Ron

Thanks for the welcome. I have attached the two files.

Addition_03-10-2017 05.22.51.txt

FRST_03-10-2017 05.22.51.txt

[AdvancedSetup]

I'm sorry for the delay. My wife was hospitalized for over a week and I'm just now getting back to work and have quite a few items to catch up on.

Are you still needing help with this?

Thank you

Ron

 

[changeling616]

Sorry to hear about your wife. Hope she is okay. I wondered what happened....

Yes, I am still needing help on this.

[AdvancedSetup]

Okay, no problem @changeling616

Please download the attached fixlist.txt file and save it to the Desktop.
NOTE. It's important that both files, FRST or FRST64 and fixlist.txt are in the same location or the fix will not work.

NOTICE: This script was written specifically for this user, for use on this particular machine. Running this on another machine may cause damage to your operating system.

Run FRST or FRST64 and press the Fix button just once and wait.
If the tool needs a restart please make sure you let the system restart normally and let the tool complete its run after restart.
The tool will make a log on the Desktop (Fixlog.txt). Please attach or post it to your next reply.

Note: If the tool warned you about an outdated version please download and run the updated version.

fixlist.txt

After the reboot also run a new FRST scan and make sure you  place a check mark in the Additions.txt check box and post back all 3 logs as an attachment.

Also let me know if you're still showing any signs of Avira still running or errors.

Thanks

Ron

 

[changeling616]

Avira seems to have been removed. Lost the recently visited files, and had to re-log into Gmail (even though password was still there).

FRST_14-10-2017 22.33.07.txt

Addition.txt

Fixlog.txt

[AdvancedSetup]

Okay, Avira blocked some of the removals as it was still live. Please save the fixlist from post 6 again and run it  again and reboot. Then run the FRST scan again and post back all 3 new logs again.

Thanks

Ron

 

[changeling616]

Did what you said.

FRST.txt

Addition.txt

Fixlog.txt

[AdvancedSetup]

It appears that we may need to try to remove these from Safe Mode or manually review the permissions on the keys. Most of the files have been removed, but not all. It's being protected from removal.

Do you know how to use Regedit and check, reset the permissions?

 

[changeling616]

Since those Regedit does not sound familiar, I would have to say "no".

[AdvancedSetup]

Click on the search and type in REGEDIT.EXE and run it.

Then browse to the following key

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\avdevprot

Then right click and choose PERMISISONS

Then click on the Advanced button

Then click the Owner tab

Click on your own account and place a check mark in the "Replace owner on subcontainers and objects"

Then click the OK button.

Then check the permissions again and this time see if you can modify for your account to have FULL Control

Then if so, you should be able to highlight the main key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\avdevprot

and press the delete key and remove it.

Let me know if that works or not.

 

 

[changeling616]

I was able to get to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\avdevprot but did not see PERMISSIONS. I am running Windows 10 Home Edition (not Professional). Does that make a difference?

[AdvancedSetup]

It's possible. I know they did have differences in previous Windows versions. I know Microsoft tries to cut corners so it is annoying to find that sometimes there are little differences like this. I rarely install or setup a home version because for the most part the tools can remove on their own.

Let me research a bit more. We can try some other tools, or methods if needed.

 

[AdvancedSetup]

Please check your private messages

Ron

 

[AdvancedSetup]

Okay, so it turns out that Avira comes with a launcher that tries to get you to install other Avira products. It runs on startup.

It also comes with a Shopping Helper so instead of trying to uninstall Avira as one would think, you need to first uninstall the Shopper, then the Antivirus, then the Avira program.

At this time your computer should now be free from Avira.

If there is anything else please let me know.

Take care and stay safe out there.

Backup Software

 

Ron