Thank you for being a valued part of the CNET community. As of December 1, 2020, the forums are in read-only format. In early 2021, CNET Forums will no longer be available. We are grateful for the participation and advice you have provided to one another over the years.

Thanks,

CNET Support

General discussion

2 Anti Virus supposed to be on my machine???

Aug 12, 2008 8:04AM PDT

Had to re-activate win xp (ms told me because I installed new software, AVG 8 over a week ago.)

Windows Online activation would not accept ID off the original Win xp disk.
FINALLY, after 4 phone calls to MS, got the new 42 digit activation code.


In process AVG 8 got messed up.

I uninstalled AVG 8 using CP/add-remove.

After rebooting, with phone line unplugged from modem, when I tried to install avg 8, I got a message that ANOTHER Anti-Virus was running and should not install 2 AV's.

Looking at Sys Config Utility, I see... Windows defender, InteliPoint, Comodo Safe Surg, & Comodo Firewall, checked in the STARTUP items.

I don't knowingly have any other antivirus installed on the computer.

Any ideas what is causing this? Does AVG consider Windows defender or Comodo Safe Surg to be AntiVirus?

Thanks

Ben

Discussion is locked

- Collapse -
A few things to try out:
Aug 12, 2008 8:24AM PDT

Open the Windows Security centre, and it should inform as to what antivirus it thinks is installed. It may be AVG8, improperly removed, or something else. If it does register something, try and remove the vestiges using the appropriate removal tool. (For example) http://www.grisoft.com/ww.download-tools

See how you go with that. If no luck,you may need to reset the security centre repository. (Sometimes Windows gets itself a little bewildered, the poor dear.)

1. Go to control panel and open Administrative tools.
2. Click on services.
3. Go down to Windows Management Instrumentation.
4. Stop this service. Stop Security Center service too.
Set them to Automatically start.
5. Exit out of this area, to your desktop.
6. Right click Start, and choose Explore.
7. Go to c:\windows\system32\wbem\repository.
Delete this subdirectory ONLY.
Leave the others there.
8. Exit back to your desktop and reboot your computer (you might need to boot twice).

This will rebuild the deleted folder, and the database.
Once restarted, Windows Security Center should show the correct info.
Antivirus, and firewall, should now be recognized.

I very much doubt Comodo Safe Surf is registered as an AV, from what I gather it is simply a toolbar, like SiteAdvisor, or Linkscanner. AVG 8 has this. Maybe it conflicts with the Comodo one? (AVG8 is quite an involved piece of kit, and you certainly wouldn't be the first to be posting problems.)

Anyway, if after all this you still have problems, it may be that you will have to manually clean the vestiges off the computer. Post back and let us know how it (the above)works.

- Collapse -
No Joy...
Aug 13, 2008 3:53AM PDT

Thanks, I Appreciate the detailed reply!

Did the removal and rebooting sequence as suggested, everything rebuilt as stated.
BUT, Windows Security Center still shows MORE THAN ONE antivirus running.

Using ' WHATS RUNNING', I find the following shown as running...
The following are some items shown runnin....

Windows Defender
ThreatFire
Windows Security Center
AVG Internet Security ... AVG8 Email scanner
AVG Internet Security ... AVG8 Watchdog
Comodo Firewall Pro...Comodo Firewall Pro Helper Service
Windows Alerter
Security Accounts Manager
Windows Firewall/Internet Connection Sharing [ICS]

LavaSoft Ad-Aware Service shown as running... I did NOT activate it manually. It is not in my START menu.
.
.
.
Checked Control Panel, AVG7.5 NOT showing.
.

Did a REGEDIT search
Found the following entries in REGEDIT. They can NOT be deleted.
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_AVG7ALRT
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_AVG7CORE
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_AVG7RSW
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_AVG7RSXP
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_AVG7UPDSVC
plus quite a few more same as above.


Any other suggestions?

Thanks

Ben

- Collapse -
Just a thought........
Aug 13, 2008 4:57AM PDT

what happens IF you disable Windows Defender ?

to use Windows Defender to disable programs in Windows XP Home Edition, follow these steps:
1. Click Start, click All Programs, and then click Windows Defender.
2. Click Tools, and then click Software Explorer.
3. Click the application name in the Name column that you want to disable, and then click Disable.

http://support.microsoft.com/default.aspx/kb/270035

- Collapse -
You've got no problem:
Aug 13, 2008 8:22AM PDT

And the reason is that Threatfire is registered in the Windows Security centre as an AV. Probably because it includes a regularly updated blacklist as part of its MO. See http://www.threatfire.com/faqs/ 8th bullet point down. If you disable TF, the security centre will report that AVG is running (and up to date.)
I was surprised by this myself when I saw it.
So you're good to continue as you are.
If you have D+ in Comodo Firewall active, you will be getting some overlap in function/protection while using TF also, as D+ is a HIPS.
The service AdAware runs is installed whether the program is active or not. This started with the 2008 version. Other AS that do the same are A2 and AVG AS (now no longer available standalone.)
Antispywares that don't install a running service even when not active include Superantispyware,http://www.superantispyware.com/ and MBAM.
http://www.malwarebytes.org/mbam.php IMO both are better than AdAware.

- Collapse -
Just one thing:
Aug 13, 2008 8:25AM PDT

If, for any reason, the AVG resident scanner was to be disabled (try this) you won't get a warning from the security centre with this configuration. Try it; it will report that Threatfire is active and up to date.
Just something to be aware of.

- Collapse -
Great....
Aug 14, 2008 3:44AM PDT

Thanks Tarq57 & Marianna,

I started not to install AVG8 when I saw the message, but went ahead and did it.

Glad I did.

I really appreciate all the great help!

Ben

- Collapse -
Hi, Ben... Perhaps I'm Mis-reading This But
Aug 14, 2008 3:28PM PDT

you appear to have 2 Firewalls running together?
"Comodo Firewall Pro...Comodo Firewall Pro Helper Service" &
"Windows Firewall/Internet Connection Sharing [ICS]"
or is the second NOT windows native firewall?
Just a thought. Hoping I'm wrong! Sandy Grin

- Collapse -
2 firewall?
Aug 15, 2008 3:33AM PDT

Hi Sandy,

I installed Comodo.... I thought as only one program.

Windows Firewall/Internet Connection Sharing.... I did not install, I thought it was the Windows firewall AND I thought I had read it was OK to have it along with another Firewall (Comodo)


Should I uninstall
Windows Firewall/Internet Connection Sharing?

Thanks

Ben

- Collapse -
Services running
Aug 15, 2008 8:04AM PDT

can cause confusion.
The "Windows Firewall Internet Connection Service defaults to automatic start, and should generally be left as such, although there are opinions indicating it is ok to disable it if you have a 3rd party firewall, like Comodo, it is not necessary to do so.
It does not mean that the Windows Firewall is turned on.
To check Windows Firewall, bring it up from the Control Panel.
The installation of Comodo usually turns it off, just double check it is indeed off, and if not, do so.

- Collapse -
Sorry! I Hadn't Seen Your Post...
Aug 15, 2008 5:17PM PDT

when I made my last reply to Ben. Blush Happy

- Collapse -
Hey, no 'pology
Aug 15, 2008 9:33PM PDT

needed; you replied first. Wink

- Collapse -
Hi, Ben. Not Un-install, Only Disable Needed I Think. :D
Aug 15, 2008 3:50PM PDT

Thanks for posting back. I just wondered because no one else seemed to spot this so I thought I must be misunderstanding....OR does the ICS have to be active to allow Comodo to run? I don't believe so.

We are Talking Comodo Firewall, Yes? Do you have Comodo BOClean or Anti-malware (paid)? I thought ONLY firewall.

Comodo does have to have permission within the Security Center but not ICS's too.
Many 3rd party firewalls automatically disable Windows firewall during install process.

Normally w/ 2 firewalls running, I would expect rather severe connection problems which you don't seem to have. Odd.

Check your Sec Center ICS firewall for a checkmark in a box saying disabled or active. Perhaps ICS firewall is disabled but some background monitor function of ICS still runs? IF ICS Firewall shows enabled try disabling to see if any difference (after being sure Comodo IS working first).

Firewalls are the thing I probably understand least of all. Perhaps others know better? Sandy /Plain Grin

- Collapse -
This forum layout
Aug 15, 2008 9:55PM PDT

confuses me. Sorry. I'm used to replies being linear, not seperated by "reply to"...Anyway:
If the windows firewall is turned off, it doesn't matter if the ICService is running. Probably better to leave it on.

- Collapse -
Thanks , it worked... :)
Nov 10, 2008 8:39AM PST

Just a wee message to say thank you very much to Tarq57 for your advice on my problem of 2 firewalls and 2 antivirus programmes showing, when , infact there was only 1. I followed your instructions and, hey presto !!! as if by magic, it worked!! Once again... THANK YOU... HappyHappyHappy

- Collapse -
Goody.
Nov 10, 2008 11:26AM PST
Happy