Author Topic: Existing Anti-Virus programs that do not exist  (Read 6714 times)

0 Members and 1 Guest are viewing this topic.

Offline rodalsa

  • Newbie
  • *
  • Posts: 14
Existing Anti-Virus programs that do not exist
« on: February 21, 2008, 07:09:52 PM »
Can someone tell me why Avast home claims that I have an existing anti-virus on my XP Home machine when XP tells me that I need to install an anti-virus program?

Specifically I would like to know where in the XP Home operating system Avast obtains 'its fact' that there is an anti-virus program from Symantec already installed on my machine.

Additionally I would like to know what to do to eliminate this 'existing' anti-virus message.  That is, what part of the registry (I find 4 or 5 entries in the registry with Symantec's name in them) -- what folder(s) -- what file(s) should I delete?  There is NO entry for an anti-virus program in Add/Remove programs.

Failing that what problems are in store for me if I go ahead and install Avast.  XP home claims I need an anti-virus program.

Thanks.

Rod
Everything written, said, heard or viewed passes through the mind of man.   Frightening, isn't it?

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: Existing Anti-Virus programs that do not exist
« Reply #1 on: February 21, 2008, 07:16:58 PM »
Can you try to fully remove NAV?

1) Remove NAV through Add/Remove programs from Control Panel. Boot.
2) Use Norton Removal Tool for Windows 2000/XP/Vista. Boot.
3) Install avast! (or repair the installation) and boot.
The best things in life are free.

Offline rodalsa

  • Newbie
  • *
  • Posts: 14
Re: Existing Anti-Virus programs that do not exist
« Reply #2 on: February 21, 2008, 07:59:47 PM »
Thanks,

I did not have any Anti-Virus programs listed in the Add/Remove programs as stated in my first post.
The Norton Removal Tool did the job.  I was lucky.  I did not have ANY Symantec products on my system.
That tool should be more product specific or at least allow you to choose. Imagine having four or five of Symantics products and having to reinstall three or four simply because you wanted to get rid of one of them.

I created a new folder to put Avast in named Avast! Anti-Virus.  Avast reported it to NOT be empty when it was.  I pushed through with a Yes and installed Avast anyway.

Avast is up and running.

Thanks again.

Rod
Everything written, said, heard or viewed passes through the mind of man.   Frightening, isn't it?

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: Existing Anti-Virus programs that do not exist
« Reply #3 on: February 21, 2008, 08:09:12 PM »
I did not have any Anti-Virus programs listed in the Add/Remove programs as stated in my first post.
Maybe some preinstalled (OEM) software that came with your computer...

I created a new folder to put Avast in named Avast! Anti-Virus.  Avast reported it to NOT be empty when it was.
If you create the folder 'before' installing, avast will warn you. Don't worry.
Glad you're ok now.
The best things in life are free.

Offline MauriceW

  • Jr. Member
  • **
  • Posts: 44
Re: Existing Anti-Virus programs that do not exist
« Reply #4 on: February 23, 2008, 06:16:23 AM »
Rodalsa

quote
Can someone tell me why Avast home claims that I have an existing anti-virus on my XP Home machine when XP tells me that I need to install an anti-virus program?
endquote

It is Windows Management Service (WMS) in XP
which sends you messages about status of Firewalls,Updates and Antivirus Apps.
It gets confused after Apps are Installed and Uninstalled.
You need to reset WMS Repository by deleting it and recreating it.

Three commands are needed at a DOS prompt
or create this little batch file if you are unsure about using DOS at the command prompt.

1) Put the following into a text file via Notepad:-
~~~~~~~~~~~~~
rem Start of batch file to fix WMS Repository
@ echo off
cls
echo.
echo Stopping Windows Management Service - please wait ...
rem First command
net stop winmgmt
echo.
echo.
echo Removing Repository folder - please wait ...
rem Second command
rd /S /Q %systemroot%\system32\wbem\Repository
echo.
echo.
echo Starting Windows Management Service - please wait ...
rem Third command
net start winmgmt
cls
echo.
echo Done! Now re-boot PC.
pause
rem End of batch file
~~~~~~~~~~~~~
2) Save this as (say) WMS.txt into your root folder (usually C:\ )
3) Open root folder C:\*.* in Explorer
4) Rename this file to WMS.bat (ignore warning)
5) Double Left click the WSS.bat file

A black window will open showing progress - follow instructions

Hope this helps

Maurice

Win7 Home 4GB RAM on HPdv7 dual HD
Office2007; Regular ERUNT
Security:-  Avast! 5 , All browsing in Sandboxie 3.46 Occasional SAS, MBAM
OS fairly stable - no malware.

Offline psw

  • Sr. Member
  • ****
  • Posts: 286
Re: Existing Anti-Virus programs that do not exist
« Reply #5 on: February 23, 2008, 01:36:35 PM »
It is Windows Management Service (WMS) in XP
which sends you messages about status of Firewalls,Updates and Antivirus Apps.
It gets confused after Apps are Installed and Uninstalled.
You need to reset WMS Repository by deleting it and recreating it.

Sorry, but you are wrong. Sometimes drivers from the previous AVP can not be uninstalled by standard Uninstall and remain be loaded after reboot.
E.g. KAV driver klif.sys is doing so.

In this case you can look at the list of running drivers via
sc query type= driver

Offline MauriceW

  • Jr. Member
  • **
  • Posts: 44
Re: Existing Anti-Virus programs that do not exist
« Reply #6 on: February 23, 2008, 11:35:46 PM »

psw,

In my experience, Windows XP Management service can give wrong security status messages about firewalls, antivirus and security updates even after all drivers and services from a previous security application have been removed
including all registry references.

I have lost the reference to the source of the suggestion made in my previous post
but offer as further reading:-
http://support.microsoft.com/kb/933062

I intend further study of this matter.

Maurice


Win7 Home 4GB RAM on HPdv7 dual HD
Office2007; Regular ERUNT
Security:-  Avast! 5 , All browsing in Sandboxie 3.46 Occasional SAS, MBAM
OS fairly stable - no malware.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: Existing Anti-Virus programs that do not exist
« Reply #7 on: February 24, 2008, 03:46:01 PM »
About Windows Security Center and Repository (detection of firewall and antivirus)
http://forum.avast.com/index.php?topic=23457.msg193534#msg193534
The best things in life are free.

Offline MauriceW

  • Jr. Member
  • **
  • Posts: 44
Re: Existing Anti-Virus programs that do not exist
« Reply #8 on: February 25, 2008, 07:13:19 AM »
Tech,

Thanks for pointing me to that other Avast thread - I got some more useful info there.

My further researches into the problem behaviour of Windows Security Centre (WSC) and the Repository, rapidly lead me to the Problems with Windows Management Instrumentation (WMI) and then to WMI Diagnostics.
(http://www.microsoft.com/technet/scriptcenter/topics/help/wmidiag.mspx).
It quickly became clear that I was out of my depth and into potentially dangerous territory. Time not to fix what isn't broken!!

I've installed the MS KB933062 WMI stability update, and will see what happens when next I change antiVirus and/or firewall applications. I.e. Does WSC behave?

If it doesn't, I will then use the aforementioned batch file, which seems to work (for me at least).

So it seems Rodalsa's simple, and reasonable, question gets harder and harder to answer completely.

Maurice



Win7 Home 4GB RAM on HPdv7 dual HD
Office2007; Regular ERUNT
Security:-  Avast! 5 , All browsing in Sandboxie 3.46 Occasional SAS, MBAM
OS fairly stable - no malware.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67255
Re: Existing Anti-Virus programs that do not exist
« Reply #9 on: February 25, 2008, 04:49:26 PM »
You're welcome MauriceW.
Please, post back, the results of your testings ;)
The best things in life are free.

Offline MauriceW

  • Jr. Member
  • **
  • Posts: 44
Re: Existing Anti-Virus programs that do not exist
« Reply #10 on: February 27, 2008, 06:49:42 AM »
Just to report on effectivness of MS KB933062 WMI stability update.

Win XP SP2 running AVG, Online Armor, WinPatrol.
Disabled Online Armor - restart
Restart
Uninstalled AVG with Revo Uninstaller
Restart
Window Security Centre (WSC) warning  "No AntiVirus detected"
Installed !Avast 4.7 Home
Restart
WSC report "!Avast 4.7.1098 reports that it is up-to-date ....."
Win7 Home 4GB RAM on HPdv7 dual HD
Office2007; Regular ERUNT
Security:-  Avast! 5 , All browsing in Sandboxie 3.46 Occasional SAS, MBAM
OS fairly stable - no malware.

Offline spiRits3033

  • Newbie
  • *
  • Posts: 14
  • FCC: I'm just doing my job...
Re: Existing Anti-Virus programs that do not exist
« Reply #11 on: March 01, 2008, 02:47:33 AM »
It is Windows Management Service (WMS) in XP
which sends you messages about status of Firewalls,Updates and Antivirus Apps.
It gets confused after Apps are Installed and Uninstalled.
You need to reset WMS Repository by deleting it and recreating it.

Sorry, but you are wrong. Sometimes drivers from the previous AVP can not be uninstalled by standard Uninstall and remain be loaded after reboot.
E.g. KAV driver klif.sys is doing so.

In this case you can look at the list of running drivers via
sc query type= driver

I've had instances where Windows Security Center in Vista listed some uninstalled antivirus programs/firewalls. In those cases, recreating the WSC repository by disabling the service and deleting the folder fixed the problem after a reboot. I know sometimes left behind drivers and incomplete uninstallation processes can link to this WSC problem, but sometimes there is just a problem with Windows Vista WSC...in my opinion... when none of the drivers are listed, or files listed in task manager.

Never tried it as a batch file though.. I've always done it manually! ;)
~spiRits3033

"Life is hard, but it's harder when your dumb."
-Jim Mandich