Avast shields deactivate due2 AntiVirPE, though it's not running

[whocares]

Hi,

on Win2000-SP4 with all important updates & avast4 Home,
I recently installed a complete AntiVirPE program-update (from H+B EDV)

I did install the Guard Service & driver (avgntdd.sys), but disabled them:
they don't show up in processes or AS-Viewers list..
only the AntiVirUpdateService is running.

(Earlier, avast ran without problems although AVPE was installed.
But previously, I may have NOT installed AVPE's Guard on initial install; AVPEUpdate-Service was running, though..)


Now on every bootup or re-login, avast gives me a message that H+B EDV AntiVir is running, and thus disables the avast Shields (only StandardShield was running previously)

How come ?
Does avast see the UpdateService and misjudges it as part of AVPE's Guard ?
If so, this should please be rectified..

Or is there something running hidden ?
How can I check..?
Thanks..

 

[whocares]

P.S.: Message in avast's  error log is:


23.05.2004 15:41:13   NT-AUTORITÄT\SYSTEM   512   AAVM - initialization error: Instant Messaging provider: cannot start because 'H+BEDV AntiVir' is active!, 00000000.  
23.05.2004 15:41:13   NT-AUTORITÄT\SYSTEM   512   AAVM - initialization error: P2P provider: cannot start because 'H+BEDV AntiVir' is active!, 00000000.  
23.05.2004 15:41:14   NT-AUTORITÄT\SYSTEM   512   AAVM - initialization error: Standard Shield provider: cannot start because 'H+BEDV AntiVir' is active!, 00000000.  

[DavidR]

Even though you have disabled them, they may still be opened on windows startup, in readyness for use if you activate them.

When you right click on the Avast icon and select 'Stop on-access protection and Exit,' Avast doesn't exit, but simply disables the on-access providers; the same could be true of this program (although I don't know the program).

You need to disable its startup access, I use a freeware program called Starter http://members.lycos.co.uk/codestuff/, that shows exactly what is running at startup. You can also disable item/programs that you don't need to or want to run at startup.

I had the same thing happen even after I had uninstalled AVG, there were registry entries remaining, I ran a registry cleaner/editor and removed the entries and no more problem.

HTH David

[whocares]

Hi DavidR,

thanks for the Info,  but I DID check that they're not running (see above).

and I DON'T really want to completely remove AVPE, but use it as a 2nd On-Demand-Scanner still.. (including the Updater if possible..)

Maybe someone from ALWIL could elucidate, WHICH component the avast-RS checks for..? prior to disabling itself..?

[Vlk]

What is "AS-Viewers"?

I don't know your level of profiency (so forgive if I'm saying something that is evident to you) but you won't see a driver (such as avgntdd.sys) in the process list; it's a driver, not a process.

What avast is doing is that it's checking the presence of the
"AntiVirService" service. If it is present, it's assuming that H+BEDV is active.


What you could probably do (if you need this service) is rename it -- by changing the key name in HKLM\System\CurrentControlSet\Services.


Thanks
Vlk

[whocares]

Hi Vlk,

thanks for your reply..

- by AsViewer I mean the Autostartviewer  by www.DiamondCS.com.au
And with the right settings, iirc this did show me avgntdd.sys when it was running/active

- I deactivated the avgntdd.sys-driver via DeviceManager-> hiddenDevices -> Non-PnP-drivers
&
- I deactivated the AntiVirService via the Services-Panel..
--> but if I understand you correctly, avast doesn't check whether AntiVirService is actually running/loaded, but simply if the Service is listed in the registry * Is this correct ?

So I'll try the renaming, as I don't run it & don't need it.

(I need just the Updateservice, but I hope avast doesn't stumble over this..?)

[Vlk]

but if I understand you correctly, avast doesn't check whether AntiVirService is actually running/loaded, but simply if the Service is listed in the registry  * Is this correct ?

Well yeah -- that's because the load order of the services is more or less indeterministic, i.e. the fact that the Antivir service is not running at the time the avast service is starting doesn't mean that it won't start e.g. one second later -- causing a hard lockup of the machine...

BTW whocares sorry I somehow missed that you were the poster of the original question... I do know your level of proficiency..


Vlk

Vlk

[whocares]

that's because the load order of the services is more or less indeterministic, i.e. the fact that the Antivir service is not running at the time the avast service is starting doesn't mean that it won't start e.g. one second later -- causing a hard lockup of the machine...

oki, I see the reason..
Thanks for the clarification.. (always eager to learn )

Didn't get around to try anything yesterday at home.. Hopefully today..
I'll let you know if it works..

if not, I'll just Uninstall AVPE and reinstall without the AntiVirService
 

[Lisandro]

The same behavior described by Vlk (the load order of the services is more or less indeterministic, i.e. the fact that the Antivir service is not running at the time the avast service is starting doesn't mean that it won't start e.g. one second later -- causing a hard lockup of the machine...) happens with avast and AVG 7.0.

Unfortunatelly I tried  :'(

[Vlk]

So what, AVG7 and avast play together nicely, don't they??

[Lisandro]

So what, AVG7 and avast play together nicely, don't they??

Are you joking?  
Only in theory both can be run at the same computer...
Mine freezed, I cannot finish the boot because the eternal glasshour...
Insisting in the same condition I receive a blue death screen.
I don't know if it is avast or any other application... AVG 7.0 no more.
I went to the black side and receive the reward... Why should I do this with my avast instalation?  :'(

[Vlk]

Interesting... we've been testing avast4+AVG7 together (on a WinXP machine) quite thoroughly, and we haven't had any problems...

[whocares]

What you could probably do (if you need this service) is rename it -- by changing the key name in HKLM\System\CurrentControlSet\Services.

Hi Vlk,

it worked..!!
I just renamed "AntiVirService" to "AVPEService" (in the above key) and, after a reboot, avast didn't complain any more..

Thanks for your help...

[Lisandro]

Interesting... we've been testing avast4+AVG7 together (on a WinXP machine) quite thoroughly, and we haven't had any problems...

Not so interesting but sad for me...
There should be any incompatibility of 'another' application (maybe ZoneAlarm or proxy filter) and the two antivirus...
Anyway, for me AVG7 is far from what I want from an antivirus  

[zephyrs]

Hi, David!
            Thank you for your hellpful advice!   I printed it out for myself.    I will try to scan again as you say.   I am not sure I know how to do a complete one, so will do individual ones (on all parts of the listed parts of the computer) until they are all scanned and taken care of.
            Bye.
                                       Debby