prevent Avast from auto startup when Windows reboots

[zellist]

Hello,

have you tried to disable ashDisp from msconfig under startup tab?

Also for relevant startup values in registry are stated below. But if you delete something from the System Registry accidentally, it may be corrupted to the extent that Windows may not reboot at all, so be careful.

HKLM refers to HKEY_LOCAL_MACHINE
HKCU refers to HKEY_CURRENT_USER

- Start > Run
- In the Open box type regedit and then click on OK or press Enter

Common keys you're interested in:
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServices
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunServicesOnce
- HKCU\Software\Microsoft\Windows\CurrentVersion\Run
- HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce

Others (used by malware often):
- HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\Run
- HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer\Run
- HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Terminal Server\Install\Software\Microsoft\Windows\CurrentVersion\Run
- HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon


Take note that wrong registry editing will cause your system unable to boot up.


Hope this helps.

zell

[cska133]

what is that 
I thought it will be 1 registry key, not 10 
I have never seen such programm - no auto start prevent option but 10 reg key :-(

Or maybe you didnt specify your answer.
Could someone be more precisious

[norel]

If you're not already an expert with the registry I would leave well enough alone; as zellist said you can do some serious damage. The only time I do anything with the registry is if I want to clean it of invalid entries and then I use TweakNow or Eusing free software. If you plan to keep avast! and just want to troubleshoot, I would simply stop it from running using the methods given above and leave the registry alone.

[zellist]

what is that  
I thought it will be 1 registry key, not 10  
I have never seen such programm - no auto start prevent option but 10 reg key :-(

Or maybe you didnt specify your answer.
Could someone be more precisious

Hello again,

Here to clarify on my previous reply.
What I meant was not all registry will have Avast key to startup in your local machine.

You can ignore the the bottom 4 paths.
Take a look at the top 6 paths that I gave you and find the relevant key values/binaries that will prevent all Avast services to stop running at startup.
I have not look through myself, so I can't give a definite answer.

Also try to do this:
- Go Offline (Make sure you have administrator rights)
- Start > Run
- In the Open box type services.msc and then click on OK or press Enter
- Look for Avast services namely (might be more):

• avast! Antivirus
• avast! iAVS4 Control Service
• avast! Mail Scanner
• avast! Web Scanner

- Set them to Manual or Disable, and stop the services.


All in all, I don't recommend stopping Avast Antivirus.
I'll look through my own registry and give an update on the values.

Updates: I found my avast startup values in the registry namely:

• HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
• value: avast!
• path: C:\PROGRA~1\ALWILS~1\Avast4\ashDisp.exe

You can take a look in HKEY_CURRENT_USER too.


zell

[DavidR]

As I mentioned in another reply to norel, ashDisp.exe isn't the avast services.

<snip> Even then it wouldn't work as the startup entry is for ashDisp.exe, the avast tray icon, which doesn't disable avast from starting up<snip>

There are other entries, avast is designed to be a resident scanner so there is no simple GUI solution to disabling it, you have to stop the other avast services and this too is designed to be difficult (self-defence module) to make it more difficult for malware to disable avast.

[cska133]

well , I m getting more confusing... ashdisp.exe then not 

what is then the solution?
registry dosent help? Than through msservices?

[zellist]

As I mentioned in another reply to norel, ashDisp.exe isn't the avast services.

<snip> Even then it wouldn't work as the startup entry is for ashDisp.exe, the avast tray icon, which doesn't disable avast from starting up<snip>

There are other entries, avast is designed to be a resident scanner so there is no simple GUI solution to disabling it, you have to stop the other avast services and this too is designed to be difficult (self-defence module) to make it more difficult for malware to disable avast.

Sorry my bad,
try to disable in services and set to manual, do a restart and try.


Regards

zell