Antivirus won't install: instructions for solving the problem

If an antivirus is not installed on your personal computer, the very first thing that comes to mind is that you downloaded a damaged installer file from the Internet. For example, the Internet connection was interrupted for a moment.

Typically, soft portals offer several alternative links for downloading files. Try downloading the antivirus installer from a mirror. It is believed that it is best to download programs from the official website of the developer. However, in some cases this path is not suitable. On the developer's websites, you will most often find only the latest version of the antivirus, and your old Windows XP operating system may easily turn out to be incompatible with modern software.

Why not install the inconvenient Eight for the sake of a single antivirus? You can visit alternative sites, where previous versions of programs are also presented. For example, the completely reliable resource Majorgeeks.com.

Antivirus won't install, despite the fact that you tried running installers taken from different sources? Then you need to ask the following question: is it impossible to run only one specific antivirus or does none at all want to work on your computer?

1. First of all, check your Windows Firewall and network settings. It is quite possible that you have very strict access limits and the system simply does not allow software from suspicious sources. And for Microsoft, any manufacturer is suspicious if they have a name other than Microsoft.
2. The antivirus program from Kaspersky Lab behaves in approximately the same way - only Microsoft products are allowed for installation.

What to do if, on principle, you do not want to install Kaspersky anti-virus software? They say it heavily loads the system and generally intrusively interferes with the user’s personal life. You want to visit a site, but Internet Explorer with the support of the Kaspersky anti-virus package will not allow you to do this.

Chinese software has greatly advanced in quality in recent years, and KingSoft antivirus is now one of the best free ones.

Software compatibility issue

Some antiviruses cannot work properly in parallel on one computer. A well-known fact that has long become an Internet tale is that NOD and Kaspersky identify each other as viruses and brutally try to destroy the competitor.

To check whether you can install an additional antivirus, first try disabling the existing one. If installed, you can start checking compatibility.

Depending on the version of Windows, a specific antivirus program is required. This needs to be clarified immediately on the website from where you are going to download the installer. Review the system requirements carefully. For a normal installation of the antivirus, there may simply not be enough RAM or free space on the hard drive. Or, as mentioned above, a modern antivirus requires the latest version of the operating system.

Reasons why it is not installed on Windows

First, let's figure out why antiviruses are not installed on Windows 10. In most cases, the following situations prevent this:

1. Your computer/laptop is infected with virus software.
2. Inability for two different antiviruses to work.
3. Equipment incompatibility.
4. Files from previously removed antivirus software remain in the operating system.

The reasons discussed often explain the situation when no antivirus is installed with Windows 10. To solve the problem, you can act independently, clean your PC and prepare for installation. Let's look at how to do this correctly below.

Files from a previously removed antivirus remain on the system

Serious antivirus programs such as Avast, AVG, Norton are not easy to install on your computer, but even more difficult to remove. When you try to remove some antiviruses, deep mutual connections in the registry are severely broken and this can even lead to complete failure of the computer.

If you want to completely remove one of the well-known, popular antiviruses without negative consequences, visit the official website of the developer and download a special uninstaller utility from there. After removal, thoroughly scan the system with a powerful cleaner. For example, Advanced System Care.

Still can't install a new antivirus?

Try downloading the antivirus to another computer and running it from USB

If we cannot download the antivirus from our computer, we will try to download it from the other side. If we have another computer at hand, we can try to boot it from it, copy it to a USB drive and try to install it on the computer via the USB drive. Even if we do not have another computer, we can download the installer on our mobile phone, connect it to the PC and search for the security software installer in the storage.

Most likely, when we try to launch an antivirus program, we will see a window in which we will be asked for administrator permissions. We give it to them.

Now we simply follow the instructions of the wizard to install the antivirus on the computer. Once it is installed, we will run a full analysis of the entire system to catch and eliminate the threat it posed to you on our PC.

We can also use portable antivirus to run it on PC without having to install anything. Very useful for not attracting the attention of the virus and being able to detect and eliminate it.

Virus infection of your computer

There are such cunning viruses that not only disrupt the operation of the computer and steal personal data. They also interfere with the operation of installed antivirus software and prevent new programs from installing. Some particularly malicious viruses do not even allow the user to open pages of sites from which antivirus software could be downloaded.

If it is impossible to install only antiviruses on your computer, and all other programs can be installed freely, there is a high probability of a virus infection of the system.

If the virus does not prevent you from visiting the official websites of antivirus manufacturers, such as ESET, Dr.Web, Kaspersky, then go to the website and run an antivirus scan of your computer from there. Since the verification will be done via the Internet, the procedure may take quite a long time.

How to remove a Trojan?

First I tried searching in the registry. Since the web browser crashed after trying to open the AdwCleaner website (and others), I assumed that the virus must have a database of addresses and stop words. I didn't find anything in the system registry.

I checked the Appdata and Program Data folders for suspicious elements - zero results. I went to the forums hoping to see solutions. But almost everywhere they advised downloading the AVZ utility and using it to run a script that removes malicious code. But I couldn’t load the AVZ - the browser window closed. Then I managed to download it onto a flash drive from another computer. Unfortunately, the Trojan blocked the application from launching.

By some miracle I managed to download DrWeb Cure It, which I recommend to everyone in almost every instruction. Unfortunately, the free antivirus didn't help. 360 Total Security suffered the same fate.

Now I will share the methods that I found on the forums. They were useful to many.

Checking your computer in protected mode

Prudent users download the Dr.Web CureIt healing utility in advance and store it on a flash drive just in case. Or better yet, on a flash drive or CD. For some reason the utility works more powerful from disk.

If you are not one of the prudent types, then try downloading the healing file via the Internet. If your Internet is not working, you can turn to your friends for help. If you have them, of course. If you have no friends, no one has canceled such useful things as Internet cafes and communication salons. Tired of the lack of buyers (due to the economic crisis), sellers will be happy to help you.

Now, you have a flash drive with Dr.Web in your hands. All that remains is to log in to the system in safe mode and start the treatment process. After this, restart your computer and try to install the antivirus again.

If none of the above helps, all that remains is to format the hard drive and install Windows again.

Checking the hosts file

A virus that closes the browser can add IP addresses and website names to a system file located along the path:

C | Windows | System32 | Drivers | etc

We open the document in a regular notepad with administrator rights and make sure that there are no lines to the left of which there is no # sign. Ideally, the content should be like this:

We delete everything below, save the changes and restart the PC.

Unfortunately, this method did not help me remove the antivirus blocking trojan.

What to do if the antivirus complains about the program when scanning

If the program raises questions for the antivirus when scanning, or you tried adding it to the list of trusted ones, but this did not help, you can try adding it to the scan exceptions. To do this, let's go back to the Threats and exceptions in the settings.

• Open the settings of Kaspersky Internet Security (or Kaspersky Security Cloud).
• Select the Threats and exceptions .
• Scroll down to the very bottom.
• Click the Configure exceptions .

Exception settings in Kaspersky Internet Security, Kaspersky Total Security and Kaspersky Security Cloud

• In the window that opens, click Add .

Adding a new exception

• Click Browse .
• Select the file you want to add to exceptions.

Path to the exception file and selection of components that will ignore it

• Select components that will ignore the file during scanning. To begin with, we recommend checking the Scan and File Anti-Virus , and if this does not help, experiment with the other checkboxes, but do not select everything at once.

Why do you need an antivirus?

Lately, miners (“miners” of cryptocurrencies) have been on a trend.

Please note that the type of malware here is indicated as Tool. That is, these are essentially utilities that are used for malicious purposes. Their harmfulness (in addition to using PC resources without permission) lies in their hidden installation and operation without the user’s permission.

It is also worth paying attention to the huge number of miners for Macs and devices running Linux - Windows is no longer the only platform on which attackers make money.

A typical website visitor on an average laptop generates 30 hashes per second. For The Pirate Bay with an average session time of 5 minutes and a monthly audience of 315 million people, this gives 30x300x315000000 = 2,835,000 megahashes per month.

If you treat people humanely and load the processor at only 30%, then there are 850,000 megahashes left. Coinhive pays website owners 0.00015 XMR per million hashes, so The Pirate Bay could earn 127.5 XMR ($12,000) per month and completely kill its reputation in the eyes of users.

A miner cannot work without a connection to the Internet - he needs to transmit the results of his work. Therefore, the first thing that comes to mind is to block the domains it accesses.

You can protect yourself from most mining scripts by blocking at least the most popular domains in hosts and keeping the list up to date by adding new domains as they are discovered.

Unfortunately, recently miner scripts have started randomly changing domains.

But there is one problem. To add a new domain, you need to find the malicious program on your computer, find out which domain it is accessing, and only then block its access to the network.

You can take a different route - track activity on each site using a special plugin.

The installed browser plugin (No Coin, minerBlock) monitors activity on each site and signals if a mining script is detected on it. This approach even helps against scripts with random domains. Plus, here you can whitelist the site if you really want to donate some CPU time to it.

The downside to this approach is that such extensions are unlikely to work well against miners with low activity.

Finally, you can do something radical:

But still, the most reliable way to block mining scripts is to install an extension that generally blocks the execution of any scripts, like NoScript for Firefox.

The idea is good, but banning the execution of every single script, unfortunately, does not apply to all sites - many will not be able to work without them.

Other reasons

If Kaspersky does not install on Win 7, 8 or 10, it means:

• He doesn't have enough space on his hard drive. Remove unnecessary programs and data so that Kaspersky can run smoothly.
• There is some incompatible data. Try creating a different Windows account. And already install Antivirus in it.
• You did not restart your computer after uninstalling another antivirus.
• The register contains entries from the old defender. Use the app to clean and correct keys and links. For example, CCleaner or Registry Fix.
• System requirements do not meet. Try installing the old version of the utility.
• You made a mistake when entering the license key.

Kaspersky is reliable protection against malware. It is suitable for both large organizations and ordinary users. And it’s a shame when Kaspersky is not installed on Windows 10, 8 or 7. But the reason why the defender does not load on the computer can be eliminated. Then you can use an antivirus.

The installer is damaged

If Kaspersky does not install on Windows 7, 8 or 10, there may be a problem with the installer itself (it is damaged or contains errors). This happens if the download of a file is interrupted and it is not completely downloaded. But, most often, unlicensed software is to blame. Paid programs are hacked. Sometimes this is done by inexperienced people. And the result is a non-working EXE file.

There are two ways out:

• Install the licensed utility. It definitely won't be buggy.
• Try downloading the hacked application from another source.

Problems with the .NET Framework

For Kaspersky to work stably on Win 10, 8 and 7, it needs the .NET Framework utility version 4.0 and higher. This program should already be on Windows. But if it functions with errors, you need to update or reinstall it.

• Go to Microsoft.com.
• Type "Microsoft .NET Framework" into the search bar.
• In the "Downloads" section, select the latest version of the utility.
• Click on the red "Download" button.

Download .NET Framework version 4.0

• Run the resulting file.
• Wait for the process to complete.

Check if antivirus is installed. If not, try uninstalling the Framework completely and downloading it again.

Solution

After reboot, run the following script:

I hope this is needed in its topic

Please report the name of the quarantine(s) in the topic: 2018.12.18_quarantine_5eec924d866cc14f836acc8f1573c28b.7z

I also attached a new log

, AVZ started without problems and in normal mode, the
taskhostw.exe
is no longer visible.

Attachments

Download Farbar Recovery Scan Tool (or from a mirror) and save it to your Desktop.

Note: You must select a version that is compatible with your operating system. If you are not sure which version is suitable for your system, download both and try to run it. Only one of them will run on your system. Launch the program. When the program starts, click Yes to accept the warning.

Click the Scan

.
After the scan is completed, reports FRST.txt
and
Addition.txt
in the same folder from where the program was launched. Attach reports to your next post. (If it doesn't fit, pack it away). Read more in this guide.

I did everything as they said, packed the files into an archive.

A small request (I apologize right away for being off topic)

, is it possible to delete folders and all files associated with avast, 360, etc., in other words, this is garbage after antiviruses. There is currently no antivirus installed. And also, it seems that after AVZ the network (modem) was no longer recognized and the network status icon shows a cross. I looked in services, WWAN seems to be responsible for this, but when I try to start it, it denies access.

Attachments

I tried to install Kaspersky

,
the installation closes on its own
, right as soon as the executable opens.

Dr.web

shows error 16.

Malwarebytes

denies access, apparently due to a folder that is hidden. During installation, I specified a different path, but it still asks for exactly that folder

CureIT Utilities

,
AVZ
, etc. (which do not need to be installed) launch without problems.
I also attached several screenshots of the folder, and all the folders marked with a red circle were not created by antiviruses, because I NEVER
installed them.
Another interesting thing is that absolutely all hidden folders are empty (according to the properties), they cannot be opened, access is denied. I think the virus is working so that no antivirus can be installed. It is noteworthy that these folders are located in 3 different folders (look at the screenshots).

[ Closed ] The virus blocks the installation of antiviruses

Good afternoon After the virus attack, it became impossible to download antiviruses, i.e. when entering a site for example esetnod32, kaspersky, dr.web, the browser immediately closed. I downloaded antivirus installers from another computer and threw them on the infected one, also without results, the installers immediately turned off or gave an error. ESET Online Scanner and CureIt helped remove the viruses, after which it became possible to download antiviruses, but it was still not possible to install them.

1) Copy the text below into Notepad and save the file as fixlist.txt in the same folder from where you launched the Farbar Recovery Scan Tool: . Run FRST and click the Fix button once and wait.

The FRST program will create a log file (Fixlog.txt). Please attach it in your next post!

2) Next (even if the problem is solved) run a log using Malwarebytes (the program should install) https://forum.esetnod32.ru/forum9/topic10688/

3) Remove tails from: Bitdefender Avast and other antiviruses that you tried to install. https://www.comss.ru/page.php?id=1199 https://www.comss.ru/page.php?id=383

! Avoid excessive quoting.

Thank you! After using FIX, it became possible to install antiviruses. FIX and Malwarebytes logs are attached.

If it’s not too much trouble, can you explain in a nutshell how the ability to install antiviruses was blocked, and how your script returned it, thank you!

after scanning is completed: You can not delete entries related to Mail.Ru and Yandex (if you use the program) On the tab: Folders for Mail.Ru and Yandex, remove [V]

Delete what was found in AdwCleaner using the Clean button, confirm the action with auto-reboot

Source

What to do if your antivirus prevents you from starting the program

As a rule, an antivirus blocks the launch of a program if it sees something potentially dangerous in its activity. If you are confident that your application does only what it needs to do, add it to your trusted list. To do this, in the exception settings:

• Open the settings of Kaspersky Internet Security (or Kaspersky Security Cloud).
• Select the Threats and exceptions .
• Scroll down to the very bottom.
• Click Specify trusted programs .

Settings for trusted applications in Kaspersky Internet Security, Kaspersky Total Security and Kaspersky Security Cloud

• Specify the path to the desired application (that is, to the file that you are launching).

Selecting a trusted program

• Select which specific actions of the protection program you want to ignore.

The general rule here is simple: the fewer ticks, the better. We recommend experimenting by turning the following three on and off one by one:

• Don't check opened files
• Do not control program activity
• Don't scan encrypted traffic

Never allow interaction with the security solution interface! Respectable applications don't need this.

Valid options for exclusion from protection