[Résolu] Impossible de ré-activer Avast! sur Windows 8.1

[twinsuna]

Salut,

Quelques étranges problèmes depuis quelques temps. Impossible de ré-activer Avast! (il ne me propose que l'achat), impossible de l'installer ("erreur à l'installation"), je me retrouve donc avec Avira qui me signale des erreurs lors des scans complets. Y a-t-il une âme charitable pour analyser mon cas?

Rapports:
FRST.txt: http://pjjoint.malekal.com/files.php?id ... 5f9o911y13
Addition: http://pjjoint.malekal.com/files.php?id ... 1e12v6k5r7
Shortcut: http://pjjoint.malekal.com/files.php?id ... 10t14z8m14

Adw: http://pjjoint.malekal.com/files.php?id ... q13o9p10q9

Merci d'avance,
twin

[Malekal_morte]

Salut,

impossible de l'installer ("erreur à l'installation")

Plus d'infos sur l'erreur ?
Tu prends bien la version gratuite et pas payante ?

[twinsuna]

Le message d'erreur: "il y a une erreur lors du processus d'installation".
Le journal d'installation d'avast! (très/trop long, ne peut pas être copier/coller ici, ni héberger sur pijoint, j'avoue ne pas connaître le site): http://m.uploadedit.com/ba3h/1440677212385.txt

[Malekal_morte]

Pas mal d'erreur.

2015-08-27 11:45:56Errorpkgengine[2732,3912]DownloadPackage(download): 'C:\Users\TCHSBR~1\AppData\Local\Temp\_av_iup.tm~a03684\iplugins-4.vpx', ip: 212.27.40.236, has failed with code: 40961 (0x0000A001) [Invalid signature]
2015-08-27 11:45:56Errorpkgengine[2732,3912]UpdateVPXs: package iplugins was not updated. Status: 40961 (0x0000A001) [Invalid signature]
2015-08-27 11:45:56Fatalinstupcore[2732,3912]The installation failed with error 40961 (0x0000A001) [Invalid signature]. Performing uninstall...
2015-08-27 11:45:56Infoinstupcore[2732,3912]Product uninstallation has started.
2015-08-27 11:45:56Erroravast_connector[2732,3912]Create: LoadLibraryEx('AavmRpch.dll') has failed with code: 126 (0x0000007E) []

2015-08-27 11:46:06Erroraction[2732,3912]The DSA verification of file 'C:\Program Files\AVAST Software\Avast\Certificates\avast.der' failed!
2015-08-27 11:46:06Infosystem[2732,3912]Executing '"C:\Program Files\AVAST Software\Avast\x64\SetupInf.exe" /netservice:sw_aswNdis /uninstall'.
2015-08-27 11:46:06Errorsystem[2732,3912]Unable to create process, code 2 (0x00000002) []

2015-08-27 11:43:30Infoservers[2732,3912]Server definition(s) loaded for 'C:\Users\TCHSBR~1\AppData\Local\Temp\_av_iup.tm~a03684\servers.def': 29 (maintenance:0)
2015-08-27 11:43:30Infoservers[2732,3912]ChooseServer: selected server 'Download l4454684 AVAST9 Server' with current url 'http://v7event.stats.avast.com/cgi-bin/iavsevents.cgi' of type 'URL_TYPE_STATS10'.
2015-08-27 11:43:54Errorstats[2732,5964]Unable to send statistics with error 0x00009903 (Unable to send statistics with HTTP status code 0!)
2015-08-27 11:44:39Infoservers[2732,3912]Server definition(s) loaded for 'C:\Users\TCHSBR~1\AppData\Local\Temp\_av_iup.tm~a03684\servers.def': 29 (maintenance:0)
2015-08-27 11:44:39Infoservers[2732,3912]ChooseServer: selected server 'Download h9806250 AVAST9 Server' with current url 'http://h9806250.ivps9x.u.avast.com/ivps9x' of type 'URL_TYPE_DOWNLOAD_VPS'.
2015-08-27 11:44:39Noticepackageinfo[2732,3912]IsFullOkay: iplugins-4.vpx - not okay (doesn't exist)
2015-08-27 11:44:39Noticepackageinfo[2732,3912]IsFullOkay: iplugins-4.vpx - not okay (doesn't exist)
2015-08-27 11:44:39Infopackageinfo[2732,3912]SetFullAsMarked: Package iplugins set to 1
2015-08-27 11:44:45Errordldwrap[2732,3912]GetFileWithRetry: file 'C:\Users\TCHSBR~1\AppData\Local\Temp\_av_iup.tm~a03684\iplugins-4.vpx' has been downloaded but it has invalid signature. Next try: 1
2015-08-27 11:44:45Infoservers[2732,3912]ChooseServer: selected server 'Download h5741724 AVAST9 Server' with current url 'http://h5741724.ivps9x.u.avast.com/ivps9x' of type 'URL_TYPE_DOWNLOAD_VPS'.
2015-08-27 11:44:52Errordldwrap[2732,3912]GetFileWithRetry: file 'C:\Users\TCHSBR~1\AppData\Local\Temp\_av_iup.tm~a03684\iplugins-4.vpx' has been downloaded but it has invalid signature. Next try: 2
2015-08-27 11:44:52Infoservers[2732,3912]ChooseServer: selected server 'Download y3852252 AVAST9 Server' with current url 'http://y3852252.ivps9x.u.avast.com/ivps9x' of type 'URL_TYPE_DOWNLOAD_VPS'.
2015-08-27 11:45:00Errordldwrap[2732,3912]GetFileWithRetry: file 'C:\Users\TCHSBR~1\AppData\Local\Temp\_av_iup.tm~a03684\iplugins-4.vpx' has been downloaded but it has invalid signature. Next try: 3
2015-08-27 11:45:00Infoservers[2732,3912]ChooseServer: selected server 'Download l4685637 AVAST9 Server' with current url 'http://l4685637.ivps9x.u.avast.com/ivps9x' of type 'URL_TYPE_DOWNLOAD_VPS'.
2015-08-27 11:45:08Errordldwrap[2732,3912]GetFileWithRetry: file 'C:\Users\TCHSBR~1\AppData\Local\Temp\_av_iup.tm~a03684\iplugins-4.vpx' has been downloaded but it has invalid signature. Next try: 4
2015-08-27 11:45:08Infoservers[2732,3912]ChooseServer: selected server 'Download d5119087 AVAST9 Server' with current url 'http://d5119087.ivps9x.u.avast.com/ivps9x' of type 'URL_TYPE_DOWNLOAD_VPS'.
2015-08-27 11:45:15Errordldwrap[2732,3912]GetFileWithRetry: file 'C:\Users\TCHSBR~1\AppData\Local\Temp\_av_iup.tm~a03684\iplugins-4.vpx' has been downloaded but it has invalid signature. Next try: 5
2015-08-27 11:45:15Infoservers[2732,3912]ChooseServer: selected server 'Download c0934533 AVAST9 Server' with current url 'http://c0934533.ivps9x.u.avast.com/ivps9x' of type 'URL_TYPE_DOWNLOAD_VPS'.
2015-08-27 11:45:24Errordldwrap[2732,3912]GetFileWithRetry: file 'C:\Users\TCHSBR~1\AppData\Local\Temp\_av_iup.tm~a03684\iplugins-4.vpx' has been downloaded but it has invalid signature. Next try: 6
2015-08-27 11:45:24Infoservers[2732,3912]ChooseServer: selected server 'Download s8733302 AVAST9 Server' with current url 'http://s8733302.ivps9x.u.avast.com/ivps9x' of type 'URL_TYPE_DOWNLOAD_VPS'.
2015-08-27 11:45:32Errordldwrap[2732,3912]GetFileWithRetry: file 'C:\Users\TCHSBR~1\AppData\Local\Temp\_av_iup.tm~a03684\iplugins-4.vpx' has been downloaded but it has invalid signature. Next try: 7
2015-08-27 11:45:32Infoservers[2732,3912]ChooseServer: selected server 'Download g9346650 AVAST9 Server' with current url 'http://g9346650.ivps9x.u.avast.com/ivps9x' of type 'URL_TYPE_DOWNLOAD_VPS'.
2015-08-27 11:45:39Errordldwrap[2732,3912]GetFileWithRetry: file 'C:\Users\TCHSBR~1\AppData\Local\Temp\_av_iup.tm~a03684\iplugins-4.vpx' has been downloaded but it has invalid signature. Next try: 8
2015-08-27 11:45:39Infoservers[2732,3912]ChooseServer: selected server 'Download j4462055 AVAST9 Server' with current url 'http://j4462055.ivps9x.u.avast.com/ivps9x' of type 'URL_TYPE_DOWNLOAD_VPS'.
2015-08-27 11:45:47Errordldwrap[2732,3912]GetFileWithRetry: file 'C:\Users\TCHSBR~1\AppData\Local\Temp\_av_iup.tm~a03684\iplugins-4.vpx' has been downloaded but it has invalid signature. Next try: 9
2015-08-27 11:45:47Infoservers[2732,3912]ChooseServer: selected server 'Download t4766941 AVAST9 Server' with current url 'http://t4766941.ivps9x.u.avast.com/ivps9x' of type 'URL_TYPE_DOWNLOAD_VPS'.
2015-08-27 11:45:54Errordldwrap[2732,3912]GetFileWithRetry: file 'C:\Users\TCHSBR~1\AppData\Local\Temp\_av_iup.tm~a03684\iplugins-4.vpx' has been downloaded but it has invalid signature. Next try: 10
2015-08-27 11:45:54Infoservers[2732,3912]ChooseServer: selected server 'Download l4685637 AVAST9 Server' with current url 'http://l4685637.ivps9x.u.avast.com/ivps9x' of type 'URL_TYPE_DOWNLOAD_VPS'.
2015-08-27 11:45:56Errorpkgengine[2732,3912]DownloadPackage(download): 'C:\Users\TCHSBR~1\AppData\Local\Temp\_av_iup.tm~a03684\iplugins-4.vpx', ip: 212.27.40.236, has failed with code: 40961 (0x0000A001) [Invalid signature]
2015-08-27 11:45:56Errorpkgengine[2732,3912]UpdateVPXs: package iplugins was not updated. Status: 40961 (0x0000A001) [Invalid signature]
2015-08-27 11:45:56Fatalinstupcore[2732,3912]The installation failed with error 40961 (0x0000A001) [Invalid signature]. Performing uninstall...
2015-08-27 11:45:56Infoinstupcore[2732,3912]Product uninstallation has started.
2015-08-27 11:45:56Erroravast_connector[2732,3912]Create: LoadLibraryEx('AavmRpch.dll') has failed with code: 126 (0x0000007E) []
2015-08-27 11:45:57Infoservers[2732,3912]Server definition(s) loaded for 'C:\Users\TCHSBR~1\AppData\Local\Temp\_av_iup.tm~a03684\servers.def': 29 (maintenance:0)
2015-08-27 11:45:57Infoservers[2732,3912]ChooseServer: selected server 'Download k5839205 AVAST9 Server' with current url 'http://v7.stats.avast.com/cgi-bin/iavs4stats.cgi' of type 'URL_TYPE_STATS'.
2015-08-27 11:45:57Infostats[2732,3912]Statistics sent successfully.
2015-08-27 11:45:57Infoproductcond[2732,3912]IsNgSupported: IsAswVmmVirtualizationActive returned 2 (0x00000002) [] and false
2015-08-27 11:45:57Errorproductcond[2732,3912]IsNgSupported: error in CondExtractSetupPackage
2015-08-27 11:45:57Fatalinstup[2732,3912]Unable to retrieve the (requested) program edition!
2015-08-27 11:45:57Infoproductcond[2732,3912]IsNgSupported: IsAswVmmVirtualizationActive returned 2 (0x00000002) [] and false
2015-08-27 11:45:57Errorproductcond[2732,3912]IsNgSupported: error in CondExtractSetupPackage

Désinstalle Pokki, ça sert à rien.
Tu as la version Premium de Malwarebytes ?
Lance ce programme : https://www.avast.com/uninstall-utility
Retente.

[twinsuna]

Re,

Si je ne me trompe pas, Pokki c'est ce qui me met un menu démarrer sur windows 8?
Et ça m'est on ne peut plus utile! J'ai la version gratuite de Malwarebytes.
Le rapport que je t'ai envoyé fait suite à ma tentative de désinstallation/réinstallation d'avast!
J'ai déjà utilisé l'utilitaire de désinstallation...

[Malekal_morte]

Ben pokki a un peu tendance à tenter de refourguer des adwares, mais si tu t'en sers ok.

Pour Avast!, il a déjà été désinstallé et sur FRST, y a plus rien.
Le dossier C:\Program Files\AVAST Software est inexistant ?



Passe un coup de TDSSKiller : http://forum.malekal.com/tdsskiller-kas ... 28637.html
Fais skip sur les détections.
Clic en haut à  droite sur reports.
Vas sur http://pjjoint.malekal.com et copie/colle le contenu du rapport TDSSKiller en bas, fais envoyer.
Donne le lien du rapport pjjoint ici dans un nouveau message.



puis :

Passe un coup de SFC (System File Check) :
=> http://forum.malekal.com/sfc-outils-ver ... 50094.html
Fais passer le rapport CBS.log via http://pjjoint.malekal.com

[twinsuna]

TDSSKiller, aucune menace détectée:
http://pjjoint.malekal.com/files.php?id ... i15x10x9y8
SFC:
http://pjjoint.malekal.com/files.php?id ... 10u8f11x11

[Malekal_morte]

Je pense pas que ça ait un lien mais un fichier est corrompu.

2015-08-27 21:42:06, Info CSI 000005af Hashes for file member \SystemRoot\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB do not match actual file [l:36{18}]"Amd64\CNBJ2530.DPB" :
Found: {l:32 b:t7aFRP7MYOeEc8/Kom4gwzUSVxLRkGnLNZ28bJJ/l/E=} Expected: {l:32 b:n520k714Uu3utHa5JGQ6HQYbZphKhlMWq5pEmfnCDuw=}
2015-08-27 21:42:06, Info CSI 000005b0 [SR] Cannot repair member file [l:36{18}]"Amd64\CNBJ2530.DPB" of prncacla.inf, Version = 6.3.9600.17415, pA = PROCESSOR_ARCHITECTURE_AMD64 (9), Culture neutral, VersionScope = 1 nonSxS, PublicKeyToken = {l:8 b:31bf3856ad364e35}, Type = [l:24{12}]"driverUpdate", TypeName neutral, PublicKey neutral in the store, hash mismatch
2015-08-27 21:42:15, Info CSI 000005b1 Hashes for file member \SystemRoot\WinSxS\amd64_prncacla.inf_31bf3856ad364e35_6.3.9600.17415_none_95dd5540d57f8c01\Amd64\CNBJ2530.DPB do not match actual file [l:36{18}]"Amd64\CNBJ2530.DPB" :

Utilise ce programme : SFCFix.
Donne le rapport ici.

(je serai plus long à répondre à partir d'aujourd'hui jusqu'à Mardi)

[twinsuna]

Ok, merci beaucoup pour le suivi jusque là déjà!

le rapport SFCix, aucune corruption détectée, lancé depuis le fichier exécutable:
SFCFix version 2.4.5.0 by niemiro.
Start time: 2015-08-28 12:23:40.974
Microsoft Windows 8.1 Update 3 - amd64
Not using a script file.




AutoAnalysis::
FIXED: Performed DISM repair on file Amd64\CNBJ2530.DPB of version 6.3.9600.17415.




SUMMARY: No corruptions were detected.
AutoAnalysis:: directive completed successfully.




Successfully processed all directives.
SFCFix version 2.4.5.0 by niemiro has completed.
Currently storing 0 datablocks.
Finish time: 2015-08-28 13:48:41.345
----------------------EOF-----------------------

[Malekal_morte]

Pour Avast!, pas trop d'idée vu que tout a été supprimé.
rentente une nouvelle fois et si c'est pas mieux, je pense qu'il faudrait contacter le support Avast!.

Ce n'est pas un problème de malware, à mon sens.

[twinsuna]

Eh bien Avast! peut maintenant être installé... Pourtant SFCix n'a pas agi??
Merci beaucoup pour le suivi en tout cas! Si tu estimes que je peux retourner surfer sans constituer un danger pour les autres, je passes le topic en mode "résolu".
A bientôt!

[Malekal_morte]

Si tu avais un fichier corrompu, en général, ça cause des freez, plantage de la CPU.
Je vois pas trop le rapport avec Avast!, mais faut croire que ça le géner.

AutoAnalysis::
FIXED: Performed DISM repair on file Amd64\CNBJ2530.DPB of version 6.3.9600.17415.

[twinsuna]

Eh bien ça restera un mystère insoluble... merci bien!!!

[Malekal_morte]