memory usage for avgnt.exe

[shek]

Does anyone notice the huge memory usage increase for avgnt.exe after antivir 7 was updated to build 151 yesterday?

[Stefan Kurtzhals]

This looks indeed strange, I will get this investigated.

[shek]

Thank for your quick response.

my system is winxp pro sp2.

I tried to uninstall it, reboot the system, clean the registry and reinstall the build 151 downloaded from free-av.com. But it didn't help.

However, there is no slowdown so far.

[broken]

I have a similar issue as well, plus avnotify.exe uses half of my CPU.

[Alphalutra1]

Using double the memory here it normaly does(from 20 MB to 40 MB :-\ )

Good thing they have a rep here always waiting to help :thumb:

Alphalutra1

[pilotart]

Have uploaded a screenshot of Task Manager, WinXP Pro (SP2) with build 151

http://www.wilderssecurity.com/attachment.php?attachmentid=178243&stc=1&d=1146927014

edited to reflect Task Manager with AntiVir open and just following a Scan of System:

{QUOTE-> "Last edited by ronjor : Today at 10:15 AM. Reason: Resize image" <-QUOTE}
On image size, should they be 800px in width? Now I have removed that image and uploaded a current image and I can not see where or how to 'Resize' it.
(these are Alt/PrintScreen saved to MS Photo

[john_us350]

hey man.i have the same problem......why it takes too much ram.......????

[pilotart]

{QUOTE-> Stefan Kurtzhals
AV Expert
____________________________________________

Default Re: memory usage for avgnt.exe
--------------------------------------------------
This looks indeed strange, I will get this investigated. <-QUOTE}
Friday's Update modified 40+ files in my AntiVir Folder and this was when this change in RAM use was first seen.

Stefan Kurtzhals, our resident AV Expert said he "will get this investigated."8)

This would not happen over Saturday/Sunday and you can hope for an answer to your question during the upcoming week.

Other than AntiVir users confirming this huge increase in RAM use, there does not seem to be any problem due to it,
or are you experiencing a problem? How much RAM do you have on your system?

The {QUOTE-> "plus avnotify.exe uses half of my CPU." <-QUOTE} would be unrelated to this and looks like it has been solved {HERE} (http://forum.antivir-pe.de/thread.php?postid=60206#post60206) by AntiVir's "Gold Moderator, Leo 2005" {this weekend} to be caused by Trojans and Adware.;D
_______________________________________________________________________

If this use of RAM is causing problems for you and is not found to be an AntiVir Program Anomoly,
you may have to deal with it by increase of RAM or change of Antivirus Program.

RAM is very cheap to buy now and if you are running WinXP on less than 768MB,
you will see great benefit from an increase beyond AntiVir. :thumb:
Use caution in shopping to get quality memory that is fully compatable with your system.
___________________________________________________________________

Should you choose to change your Antivirus Program from AntiVir, follow ALL the recommendations for proper removal first, nothing worse than trying to install new AV Program on top of remenants and left-over registry keys from the old AV. For 'Trial' use (highly recommended) of a New AV, first create a System Backup to insure easy removal, should you not like the new AV you are trying. You have no doubt read about how any Particular "Excellent" AV Program will not be good on someone's system.

Link to: Free 12-month software subscription to CA's eTrust EZ Antivirus. (http://home.ca.com/dr/v2/ec_main.entry25?page=PYPCTrialPage&client=ComputerAssociates&sid=35715&CID=)

The above is likely the Antivirus Program that uses the least of your RAM, 21,112K with "RealTime & Email" Protection running.
Its Detection Scores do not come close to AntiVir's but I see no problems running it on 'Her' System
along with WinXP Firewall, SpywareBlaster, SpyBot S&D and Ad-Aware.

Online Scans with EWIDO and Kasperski always show clean. :) Sandboxie would give you additional protection.

EZ-Trust's "Two Year" subscription offer for $19.95 is a good deal, if you shop around, you might find Norton, McAffee
or another, cheaper (by rebate) but will see an increase in "System Drag" compared to AntiVir.

[john_us350]

pilotart......u give a nice speech.....u guys always try to say that 20mb more memory is not matter.but i wanna say that it's a matter if u running sql server 2005 + VS 2005.net in ur system.i have 1 gb RAM, well if this condition of antivir will continue then i have to choose NOD32.coz nod use only 18mb of memory...if antivir company fix the problem then i will go with them.............dont forget that we people choose third party antivirus bcoz they r free and low resource hog......if they bcom take resource like norton/mcafee then why people will use this???

[Unity]

It's obviously a bug , just wait for a fix.

[pilotart]

{QUOTE-> pilotart......u give a nice speech.....u guys always try to say that 20mb more memory is not matter.but i wanna say that it's a matter if u running sql server 2005 + VS 2005.net in ur system.i have 1 gb RAM, well if this condition of antivir will continue then i have to choose NOD32.coz nod use only 18mb of memory...if antivir company fix the problem then i will go with them.............dont forget that we people choose third party antivirus bcoz they r free and low resource hog......if they bcom take resource like norton/mcafee then why people will use this??? <-QUOTE}
'..nice speech..' [too bad you did not read it] ".....u guys always try to say that 20mb more memory is not matter. "
[where did I say that!]>>>...this huge increase in RAM... are you experiencing a problem?


'...r free and low resource hog......if they bcom take resource like norton/mcafee then why people will use this ...

[I used Norton for many years (was better for me than McAfee) and both produce fine software.]
Norton is far less of a resource drag today than in the past. Shop and you can find them very low cost!]
________________________________________________________________

If AntiVir is causing problems for you, you need to tell what the problems are as well as what system you are running it on.

If you are just posting to troll AntiVir and spam NOD32.coz, then you should not.
_________________________________________________________________

{QUOTE-> ...but i wanna say that it's a matter if u running sql server 2005 + VS 2005.net in ur system.i have 1 gb RAM, ... <-QUOTE}
My backup is a 1997 Dell Latitude Portable, with a P1/133MHz system running on an October 1998 load of Win98
maxed out with 71MB of RAM. (plus 1MB for Video System)

When I run software that calls for a minimum of P2+, 98SE+ and 128MB+ of RAM; It can seem a little slow,
but it is MUCH FASTER with AntiVir than it was before.

The current Update to build 151 has not slowed this system one bit, so what is Your Problem????

[broken]

{QUOTE-> would be unrelated to this and looks like it has been solved {HERE} by AntiVir's "Gold Moderator, Leo 2005" {this weekend} to be caused by Trojans and Adware. <-QUOTE}I'm quite positive trojans or adware are not the issue, however he seems suspicous of IE7 so I might uninstall that to see if it resolves the issue. Thanks for the link.

As for the memory, I'll wait patiently until that's fixed.

[john_us350]

{QUOTE-> If you are just posting to troll AntiVir and spam NOD32.coz, then you should not. <-QUOTE}

if i wanna spam here then why should i pick the problem in antivir...?..u can say it if i pick any irrelevent issue but that i dont do.i just say my problem as we all know the current av-comparisons.antivir is in advance+ position as weel as nod .so those product dont need advertising.
{QUOTE-> [I used Norton for many years (was better for me than McAfee) and both produce fine software.]
Norton is far less of a resource drag today than in the past. <-QUOTE}
if i spamming then what u r doing for norton??? plz keep u r mind clear then respect others....we come here to raise our problem but not for spamming....bye

[waters]

Mine is now useing 3,184k.

[waters]

Just updated and its gone up again

[pilotart]

{QUOTE-> "...?..u can say it if i pick any irrelevent issue but that i dont do.i just say my problem as we all know the current av-comparisons.antivir is in advance+ position as weel as nod . ... ...we come here to raise our problem ..." <-QUOTE}
Please accept my apology for thinking you were 'spaming' and respect since you are not.

It was (and still is) impossible to tell if you were having a problem with your AntiVir beyond noting the recent huge increase in avgnt's RAM use.

I trust that AntiVir is not causing any problems with the function of your system.

I hope that AntiVir will continue to do a good job for you and that you soon get an answer to your question about this increase in RAM.
___________________________________________________________________________________________________

My (just Updated) avgnt.exe is holding at 22,484K with a 'peak' of 22,604K, a little less than the screenshot above.

[john_us350]

thanks pilotart for ur reply........as waters said i should update my antivir

[TAP]

Two AntiVir processes take too much memory and swap file on my machine too, these amount close to BitDefender (but BitDefender is so slow with both on-demand/on-access scanner compared to AntiVir, AVG, avast! on my machine), while avast! and AVG take about 12-20 MB.

[Stefan Kurtzhals]

The last update should fix the memory problem of avgnt.exe / avgctrl.exe.

[pilotart]

Yesterday's Update (six files) fixed the more serious problem of:

"...using 99% CPU time and the notifier window not appearing as it normally does."
_______________________________________________________________

I had never seen the above (avnotify denied in my security).

Still showing high RAM on avgnt.

Now the servers are down as Avira is working on a new fix.

[Stefan Kurtzhals]

There was a problem with the update servers this morning, we had to disable them for a while and currently there are only new VDF files and not the fixes available.

[ardvark]

{QUOTE-> There was a problem with the update servers this morning, we had to disable them for a while and currently there are only new VDF files and not the fixes available. <-QUOTE}

While the attention you gave to the problem was appreciated, for myself, it's a case of too little, too late. On top of high RAM usage on my system, it seems you guys have been able to find a way to bypass the hash rules set up to deter the infamous avnotify.exe. Enough is enough.>:(

Free should mean free. I don't need buggy nagware installed on my machine so I've uninstalled it for something different. However, I look forward to seeing your product again when you've managed to improve and refine it.

Best Regards...

[Stefan Kurtzhals]

avnotify.exe was updated - of course! there was a nasty 100% cpu usage bug that got fixed. the hash of it doesn't change that often. ;-)

[shek]

Is there a problem for the antivir's update sever right now? I could not receive the update to fix the avgnt.exe bug. But i saw someone got it, which posted in the avira's forum.

http://forum.antivir-pe.de/thread.php?threadid=7967
http://forum.antivir-pe.de/thread.php?threadid=1681&page=5

[pilotart]

"...{QUOTE-> find a way to bypass the hash rules set up to deter the infamous avnotify.exe. Enough is enough. ..." <-QUOTE}
Just a new avnotify file, needs a new 'hashrule', Firewall will ask about it.

Noticed this time that the "NagScreen" went away on its own befoe I even had a chance to read it. :)

Mine just Updated at 1930 GMT, avrep & 3vdf (177364Bytes), still showing 22,728K on avgnt and all is working fine.

[shek]

It's better to use path rule instead of hash rule to block the avnotify.exe.

The following method applies to win2k/xp.

control panel-> administrative tools-> local security policy->software restriction policies->additional rules->new path rule-> choose the path of avnotify.exe (default is C:\Program Files\AntiVir PersonalEdition Classic\avnotify.exe) and the security level (disallowed).

[ardvark]

Hi all...

Thanks for the information and tips. If I ever have reason to install AntiVir again, setting up rules to disable the rotten nag screen will be unnecessary because Avira will have done away with it outright!

@ Stefan...

Like I said, free should mean just that. If Avira wants to bother people about purchasing premium or pro versions, then introduce a separate 30 or 60 day trial version.::)

Best Regards...

[pilotart]

Thank you shek,

for that method which looks like it may only need to be done once.

ardvark,

sure you know how long this has been going on:

Thema: How to stop AntiVir Notifier (from September 2004) (http://www.free-av.de/cgi-bin/ubb/ultimatebb.cgi?ubb=get_topic&f=1&t=001465)

AntiVir is no doubt the best choice for me, for a 'free' antivirus.

If I were to have to consider a 'paid' Program, I would shop extra hard
to try and find an alternative that had never 'bugged' me. :)

[alfredska]

{QUOTE-> It's better to use path rule instead of hash rule to block the avnotify.exe.

The following method applies to win2k/xp.

control panel-> administrative tools-> local security policy->software restriction policies->additional rules->new path rule-> choose the path of avnotify.exe (default is C:\Program Files\AntiVir PersonalEdition Classic\avnotify.exe) and the security level (disallowed). <-QUOTE}

Actually, that method only works for WinXP and Win2003, when the "software restriction policy" was introduced. Win2000 users will have to follow a slightly different route. Follow the instructions at this microsoft site (http://support.microsoft.com/?kbid=323525) in order to prohibit avnotify.exe

[aigle]

{QUOTE-> It's better to use path rule instead of hash rule to block the avnotify.exe.

The following method applies to win2k/xp.

control panel-> administrative tools-> local security policy->software restriction policies->additional rules->new path rule-> choose the path of avnotify.exe (default is C:\Program Files\AntiVir PersonalEdition Classic\avnotify.exe) and the security level (disallowed). <-QUOTE}
This option not there i think in XP home. I just disallow AV notify to run by SSM. I hate the the nag screen it pops up.

[Alphalutra1]

{QUOTE-> This option not there i think in XP home. I just disallow AV notify to run by SSM. I hate the the nag screen it pops up. <-QUOTE}
You can do this option in xp home if you boot into safe mode, log in as the secret administrator account, and then select the file permissions. It is what I always do ;D

Alphalutra1

[aigle]

Pls can u tell the exact steps how to do it. I know how to go in safe mode but never knew about secret administrator.

[duke1959]

Hello. Also I want to ask if it is okay to do this? I have read that the Notifier was imortant to find out information on any Virus found on your PC, or something of that nature, and so it was needed.

[Stefan Kurtzhals]

When you click on a virus name when malware is found by AntiVir, the notifier is shown with a description (if available).

That information comes from our homepage, so you don't need the notifier to get that info, you can directly browse the virus information database with your normal browser.

[RejZoR]

Stefan, is that notifier crap still present in AntiVir ?

[mercurie]

{QUOTE-> Stefan, is that notifier crap still present in AntiVir ? <-QUOTE}The question was not directed to me, but since I use it I can answer it. Yes. It is not so bad for a free AV that works so well and is not hard on my older machine. ;)

[Stefan Kurtzhals]

Why the people get upset with the notifier? I work on/with AntiVir all day, I don't even notice the window anymore, practically pressing OK on the notifier window automatically. ;-)

Oh and I never use the scheduler to update, what for? When I perform a scan I want the latest signatures so I quickly perform a manual update every time.


BTW, with Heuristic 2.5 released now, how many people here actually enable the heuristic - and on which level?t

[waters]

One mouse click and its gone.In return you get an advanced+ free antivirus ,not bad

[aigle]

Medium before and now maximium.

By the way u don,t feel the notifier as it,s urs.

[q1aqza]

{QUOTE-> Why the people get upset with the notifier? I work on/with AntiVir all day, I don't even notice the window anymore, practically pressing OK on the notifier window automatically. ;-)

Oh and I never use the scheduler to update, what for? When I perform a scan I want the latest signatures so I quickly perform a manual update every time.


BTW, with Heuristic 2.5 released now, how many people here actually enable the heuristic - and on which level?t <-QUOTE}

Stefan, which level would you advise setting the heuristic level? I've tried on high and it does seem to throw up some FPs.

Also, I would like to say, I have no problem with the notifier considering it is such a powerful AV for free.

[Stefan Kurtzhals]

I advise highest level, just don't delete the reported files but send them to heuristik2 (a.t) avira.com so I can adjust the heuristic rules.

[duke1959]

Hello everyone. I too am pleased with Antivir. My PC seems as fast as when I used AVG Free, plus I can have it set to update automatically more than just once a day unlike AVG. I also have to do manual updates from time to time, which is a good thing, because of how frequently Antivir has them. I also tried Avast, which I liked, but again I believe my PC runs faster with the Antivir Guard running than the Avast Shield by letting programs open quicker. My only dislike about Antivir I have to admit, is the Notifier Window that pops up, but as it was said here it's a small price to pay for such a great FREE Antivirus. I do wonder though if the Notifier Window goes away by itself? I never left it up long enough to find out, but it seems to stay there until ok is hit. By having it go away on it's own even after a short period, I believe would be a nice compromise for all of us loyal Antivir Users. Also does anyone else notice how the avguard exe's memory goes up after update? Mine goes up to around 25MB after one, and seems to stay there, unless I log off and back on. I don't think I see any performance difference however, and was just curious about why this is. Thanks.

[RejZoR]

Small price for dropping you out of games when this crap pops up? No thanks.
It did twice and it did with super duper timing to distrupt the most important event. Plus one game just crashed because it cannot handle alt tabbing...
So i rather use some weaker AV than watch this garbage popping all over the place. Well actually i'm already doing that. ::)

[Stefan Kurtzhals]

Rejzor, just don't use the scheduler so you won't get any popups during gaming.

[RejZoR]

Not the update popups, that AV Notify crap... Updater can be set to Hidden...

[duke1959]

Hey what about the compromise with the Notifier? LOLOL. But seriously, I have Antivir set to update twice a day without interfering with me, or my wife. One update is set to perform in the morning after my wife uses the PC, so it doesn't interfere with anything she may be doing. Then later that morning, although it does update while I'm on, it is still before it would interfere with anything I may be doing at the time as I'm only surfing on the Internet. Then by having it set to update again in the late evening when I'm not using my PC, (I use cable so I'm always on) it surely doesn't interfere at all, while still assuring I will have all the latest definitions. Now if only that darn Notifier Window would close by itself after a short time. Speaking of which, as I went to get on my PC just now to read this Forum, I had to reboot after seeing the Notifier Window and a message that read about a new Program Update. I couldn't find anything about a new Program Update in the Antivir support forum at this time yet though.

[Stefan Kurtzhals]

Rejzor, right, but the notifier only shows up when you update. When you update manually you have full control when the notifier will pop up.

[RejZoR]

Well i don't need AV where i have to keep track for updates. Thats why we know auto updaters for almost decade and a half... Maybe i would but my sister certanly wouldn't. So a no go.

[duke1959]

Stefan, my wife was born in Germany is where you're from? The reason I ask is so maybe then you won't ignore my posts. LOLOL. I'm just kidding, (a little bit) but I must say that when I used a weaker AV, if there wasn't an update of definitions yet between the times it was set to download them, it would miss the update when it finally came out, and I would have to manually update anyway. Which brings me to the Program Update notification I received today. is this a new one? Speaking of notifications. What about that compromise with the Antivir Notify Window? Couldn't it be made to close on it's own? I really am interested in all the questions I asked here today Stefan, and as far as the AV Notify crap rejZoR was talking about. Although I agree, I rather have that crap than the crap Heuristics that I have heard some weaker AV's are known to have. Take care, and I am looking forward to hearing from you Stefan, and anyone else that wold like to answer any of my questions.

[Stefan Kurtzhals]

There was no program update today, just VDF updates and those don't require a system reboot. That is quite weird, are you sure it was the AntiVir updater requesting the update?

I can ask the Windows team about the timer for the notifier, but I have very little hope on that. The marketing guys are very very stuborn on this one. :( I already asked if the notifier could be supressed when a game is running but that request was flat out refused.

Anyway, there are plenty of easy tricks to block the notifier, so I don't really understand the fuss about it.

[duke1959]

Hi Stefan. That's okay about the notifier no big deal. As far as the reboot though, yes it said Antivir needs to reboot, and I remember reading something about a Program Update as well. This was while Notifier Window was in full view, with this information about Program Update, and reboot in small rectangular box. Everything working properly, and I did check for the virus definition number which was 6.35.01.75 at the time. After all this I still hit update and downloaded 6.35.01.76 so I don't believe it was definitions. Oh well I'm happy with Antivir, and thanks for the info. Oh, and what about avguard exe going to 25MB after update? Is this common? Just curious as to why it does, but my guess is it may have something to do with scanning in real time. Take care.

[Stefan Kurtzhals]

You can check in the update logs which files exactly were downloaded, can you please post that list?

AVGuard and MailGuard use each about 25 MB currently, the major part of this is the VDF in memory. Of course having 2 copies is not a good idea at all, this will be changed. Also, not needed parts of the VDFs will be skipped and loaded on-demand only which will reduce the memory usage alot.

[duke1959]

Thanks, I'll look for the logs, and see what i can find. Take care.

[mercurie]

All,
All this moaning about the notifier just makes me ;D ;D ;D . I have been using AV since July 5 and have had only one regular auto update fail on always on BroadBand connection according to my logs. I have had worse experiences of updating with some PAID AVs. :'( :'(

I am just amazed at those who would belittle a free product that performs so well. I certainly believe in free thought and freely speaking ones opinion. I just do not understand the moaning. ??? Just me I guess. :-\

However, this is what keeps the world going around and things exciting for me. :) So carry on fellow creatures. :thumb: ;)

[RejZoR]

Well that popup is so god damn annoying that i can't stand it. I could watch 3 super flashing banners inside main AntiVir window but i just can't stand the popup (AVNotify). Not to mention it's interfering with other apps and games...

[Alphalutra1]

{QUOTE-> Well that popup is so god damn annoying that i can't stand it. I could watch 3 super flashing banners inside main AntiVir window but i just can't stand the popup (AVNotify). Not to mention it's interfering with other apps and games... <-QUOTE}
Just set up a software restriction policy to block it from running, or block it with a security app, and you don't have to worry about it.

Cheers,

Alphalutra1

[RejZoR]

Well, i don't use any such program...

[Alphalutra1]

{QUOTE-> Well, i don't use any such program... <-QUOTE}
if you use windows xp (home and pro), then you just use the software restriction policies ;)

Alphalutra1

[aigle]

Hi Alphalutra1! pls u did not reply about the "secret administrator while in safe mode" Q. How to do that?

[Alphalutra1]

{QUOTE-> Hi Alphalutra1! pls u did not reply about the "secret administrator while in safe mode" Q. How to do that? <-QUOTE}
Sorry, i missed that one :blink:

Here is how you do it:

1) Boot into safe mode

2) Log in as "Administrator"

3) Go to C:\Program Files\AntiVir PersonalEdition Classic\avnotify.exe right click on it in explorer go to properties->security->Advanced-> edit then select the option to not let it execute for all users.

Reboot into regular windows and you are good to go.

Cheers,

Alphalutra1

[aigle]

thanks

[RejZoR]

That doesn't work. Thats the first thing i tried. AntiVir will reset the security settings after update. It really surprises me that they've gone so far to restrict users from blocking AVNotify, yet they have done exactly nothing to make it stop interfering with full screen apps and games. ::)

[Alphalutra1]

Well, you can always try denying everysingle thing for avnotify.exe under the security permissions, I can't tell you my setup ATM, because I now have SSM which allows me to block avnotify.exe from executing if the parent is the updater. So I can still view virus information in the program :thumb: .

Heres another way to access security permissions from XP Home http://www.dougknox.com/xp/tips/xp_home_sectab.htm which has worked for me quite well.

Cheers,

Alphalutra1

[Kerodo]

{QUOTE-> That doesn't work. Thats the first thing i tried. AntiVir will reset the security settings after update. It really surprises me that they've gone so far to restrict users from blocking AVNotify, yet they have done exactly nothing to make it stop interfering with full screen apps and games. ::) <-QUOTE}
It worked for me just fine on Win2k. Haven't seen a notifier screen since I installed AntiVir and set the avnotify.exe file security to deny execution. No problems here...

[pilotart]

{QUOTE-> It worked for me just fine on Win2k. Haven't seen a notifier screen since I installed AntiVir and set the avnotify.exe file security to deny execution. No problems here... <-QUOTE}Same here, WinXP-Pro (SP2) and followed the instructions posted by Shek at the top of page 2 of this thread.

The 'hash' method used before had worked until AntiVir put out a new Build, but Shek's method has lasted through AntiVir Build Updates.:thumb:

On each Update log, it does show avnotify running successfully, I just never get to see any of it.8)

I do allow it to load on my rarely connected Win98 backup system and I see enough of it there.;D

[AMRX]

The hash rule recognizes the program by the MD5 hash, file size and the
version. Thats why if its updated, the rule won't work. We just have to
change the rule again. Simple trick and effective. AntiVir is doing its job
pretty well but my avgnt.exe became hungry and scoffed 10MB. I can
live with that.

[aigle]

{QUOTE-> Rejzor, right, but the notifier only shows up when you update. When you update manually you have full control when the notifier will pop up. <-QUOTE}

It is marking Process hunter as malware by heuristics, I sent the file.
BTW, I want to ask why there is no option for the Guard to remove malware in an automatic way( rather than by interactive way)? May be the this option only available in paid version?

[aigle]

Hotmail cauld not process the attachment, may be their AV is stopping it as well. I uploaded it to Jotti.

[duke1959]

Hey guys I posted this in another Forum, but want to post it here too because of all the kind responses I've received in the past. While I was running SuperAntispyware scan the Antivir Guard popped up when SA was going through Windows System 32 and read it found TR/Clicker.CP in pcmgrnet exe. I think it may be just a False Positive as Antivir has no info on it, but not entirely sure what pcmgrnet is for, or if it is even needed. I did google it, but still not sure what this exe is, although it was said it could be spyware of some sort. Thanks and i hope i was clear on this.

[AMRX]

Wrong thread to post. Please start a new thread on this. Which operating
system you are using? It might be fishy as it was detected by signature not
heuristics, please send it to be analysed.

*EDIT* If AntiVir doesn't have more information on it then it doesn't mean its
a false alarm. Don't expect every malware to have a special description page.
Otherwise Kaspersky, AntiVir and Emsisoft will be in trouble ;)

Its not a system file as long as XP is concerned. I think its a malware and
should be treated with caution.

[duke1959]

Sorry about posting here, I was reading this thread and didn't think before posting. I will start new one. Thanks

[DaveD]

{QUOTE-> It's better to use path rule instead of hash rule to block the avnotify.exe.

The following method applies to win2k/xp.

control panel-> administrative tools-> local security policy->software restriction policies->additional rules->new path rule-> choose the path of avnotify.exe (default is C:\Program Files\AntiVir PersonalEdition Classic\avnotify.exe) and the security level (disallowed). <-QUOTE}

I am running Windows 2000 Professional SP4 UR1 and attempting to block the annoying Notifier for AntiVir. I would prefer this method instead of having to install any additional programs to block it.

I cannot find the appropriate section to add and/or edit this rule. I logged in as Administrator as well and it was no different. Here is a screenshot of what is available under Windows 2000. I am hoping that somebody more familiar with Windows 2000 can help me out with this.

http://img150.imagevenue.com/loc333/th_68411_win2k_122_333lo.jpg (http://img150.imagevenue.com/img.php?image=68411_win2k_122_333lo.jpg)

Thanks,
Dave

[Kerodo]

{QUOTE-> I am running Windows 2000 Professional SP4 UR1 and attempting to block the annoying Notifier for AntiVir. I would prefer this method instead of having to install any additional programs to block it.

<-QUOTE}

Dave, if you're running Win2k, try this. This is how I have blocked the notifier successfully.

I opened Explorer and found 'avnotify.exe' (in the AntiVir folder) and right clicked on it. Selected Properties. Next I selected the Security tab at the top. Then at the bottom left of that window, I selected Advanced. Then under the Permissions tab in that window I see permissions for 4 users, one of them is System, another Administrator, another Power User and one general User. For each of these users, I then clicked on View/Edit. In that window the first item was then Traverse Folder / Execute File. I then clicked/checked the Deny box for that item and then Ok. I did this for each user. Then when done with each user, I finally clicked the Apply button on the bottom right of the Permissions window. A warning pops up and asks if you're sure etc. I said Ok or Yes, whatever the case was. And that's it. Closed everything and I was done.

That should do it. No problems here and I never see a nag screen...

[Suggers]

{QUOTE-> It's better to use path rule instead of hash rule to block the avnotify.exe.

The following method applies to win2k/xp.

control panel-> administrative tools-> local security policy->software restriction policies->additional rules->new path rule-> choose the path of avnotify.exe (default is C:\Program Files\AntiVir PersonalEdition Classic\avnotify.exe) and the security level (disallowed). <-QUOTE}

Im running windows XP SP2 but im having trouble disabling the notifier - when I get into the control panel --->Administrative tools, but where is the local security policy, I cant find it?

Thanks
Suggers

[duke1959]

Same here. I would like to use Antivir PE again, but I don't want the Notify Window Popping Up during every update.

[DaveD]

{QUOTE-> Dave, if you're running Win2k, try this. This is how I have blocked the notifier successfully.

I opened Explorer and found 'avnotify.exe' (in the AntiVir folder) and right clicked on it. Selected Properties. Next I selected the Security tab at the top. Then at the bottom left of that window, I selected Advanced. Then under the Permissions tab in that window I see permissions for 4 users, one of them is System, another Administrator, another Power User and one general User. For each of these users, I then clicked on View/Edit. In that window the first item was then Traverse Folder / Execute File. I then clicked/checked the Deny box for that item and then Ok. I did this for each user. Then when done with each user, I finally clicked the Apply button on the bottom right of the Permissions window. A warning pops up and asks if you're sure etc. I said Ok or Yes, whatever the case was. And that's it. Closed everything and I was done.

That should do it. No problems here and I never see a nag screen... <-QUOTE}

Kerodo,

Perfect!!!

That worked perfectly well and was quite simple to do. I appreciate that you went into detail about what to click on and so on, otherwise it probably could have been confusing.

Thank you!

[Kerodo]

Great Dave.. glad I could help... :)

[aigle]

Thanks Karodo.