Crash on Windows 2019 server

[Lukas Mizoch]

Hello, we have 4 new Supermicro servers with identical hardware. Two are running on Windows 2016 and two on Windows 2019. On all is installed Avast Business Antivirus 18.8 (2546).

Every several days Windows 2019 servers are stuck on blue screen without logo (not BSOD) and do not response to keyboard or mouse. They must be shut down manually by power button.

Last thing in event logs is something associated with Avast (see attached screenshot), so I suppose Avast may be reason.

Is anybody else have this kind of problem?

[Rory Yeager]

I am having the same issue.  Supermicro board but running the Server 2019 VM on Hyper-v. 

Process C:\Program Files\AVAST Software\Avast\setup\instup.exe (process ID:6428) reset policy scheme from {381b4222-f694-41f0-9685-ff5bb260df2e} to {381b4222-f694-41f0-9685-ff5bb260df2e}

[Lukas Mizoch]

Per Avast Support info, try uninstall Defender via PowerShell:

Code: [Select]

Uninstall-WindowsFeature -Name Windows-Defender

[Rory Yeager]

I'll give that a try.  Thank you.

[thomas.maise]

Hello we having the same issue on all Windows 2016 Server. Any news?

[Asyn]

Hello we having the same issue on all Windows 2016 Server. Any news?

See Reply #2.

[thomas.maise]

OK, thanks for the tip. Did this problem with uninstalling defender via powershell confirm that this was the problem?

[thomas.maise]

The problem is still there. Are there any other approaches to the problem

[Asyn]

Contact business support: https://www.avast.com/business-support-contact-form.php

[acoloma]

Has this been fixed?
We have a new Dell Server, PowerEdge R7415 running Windows Server 2019 and it randomly freeze. Once we get a crash dump file, Dell recommended removing Avast for Business.
Server is under is observation after removing Avast

[Lukas Mizoch]

After uninstalling Defender (about month ago) our servers did not freeze anymore.

[Asyn]

After uninstalling Defender (about month ago) our servers did not freeze anymore.

Thanks for the feedback.

[.: Mac :.]

To any others having the issue, Microsoft has decided that unlike client Windows systems, the Server OS family does NOT deactivate defender when a 3rd party AV is installed. As such you should remove defender via the powershell method.