PDA

View Full Version : Antivir Problem


minacross
May 9th, 2006, 01:33 PM
I downloaded latest Antivir PEC setup file yesterday & installed it I found that it on-access scanner takes about 18 MB RAM, it used to comsume less than 2 MB. what's up guys? ::)

pilotart
May 9th, 2006, 02:00 PM
A search of my WinXP does not show any "Avgtrl.exe" anywhere at all. It has been noticed that there was a large increase in the RAM used by 'Avgnt.exe' since last Friday's AntiVir Update.

It is covered in this thread and is "being investigated". (http://www.wilderssecurity.com/showthread.php?t=130419)

I have also noticed the huge increase in RAM use by avgnt since last Fridays 40+ file Update to build 151.

Can detect no problems in its operation or slowing of my system. My primary is a Dell D800 w/1.5GB of RAM.

My secondary backup system is a 1997 Dell Latitude P133 with only (its maximum) 71MB of RAM, the Upgrade to build 151 has not caused any problem with that system either. It has a 1998 load 0f Win98 and I don't recall anything like WinXP's 'Task Manager' to show exactly what each process is using, but it shows 86% Resources Free, similar to 'prior build 151'.

Stefan Kurtzhals
May 9th, 2006, 04:05 PM
avgctrl.exe is the win9x version of avgnt.exe - both suffer the same bug. Can't tell when a bug fix is ready for release at the moment. :-(

ellison64
May 9th, 2006, 04:23 PM
Thats the trouble with some bugs ,they are not always universal.I have never had any problems ram or resource wise with antivir.I guess there must be a common demoninator somewhere though.

pykko
May 9th, 2006, 04:33 PM
hmm...well, fro me AntiVir seems to detect sometimes a virus and sometimes not (this for on-access scanner). On-demand scanner detects it. I've set the Guard to prompt for action(Interactive) but sometimes it blocks access to file without prompting, sometimes prompts me and sometimes doesn't detect the virus at all even if it's in the database and detected by on-demand scanning. Very weird. ??? :'(

ellison64
May 9th, 2006, 04:43 PM
I dont know about the classic version but have you identical settings for both on demand and on access scanner?.My on access scanner is set to just scan extension list but my on demand scanner is set for all files.Could this be whats happening on your setup?.
ellison

Rivalen
May 10th, 2006, 02:42 AM
I set mine up the same way as ellison did because I believed that the guard wouldnt slow me down as much as "all files" would - but that was just my guess - probably "extensions" would detect less? - full heuristics on both.

avgnt and av guard both use about 19,5 each on mine.

Best Regards

pykko
May 10th, 2006, 05:39 AM
I have set the guard to scan only by extensions.

Stefan Kurtzhals
May 10th, 2006, 06:09 AM
Pykko, does the guard report the *same* file sometimes and sometimes not - or are you testing with different files? Is the extension of the files included in the on-access extension list?

pykko
May 10th, 2006, 11:46 AM
I'm testing some .exe files.
In fact they are in an archive extensionless. I'm extracting them then I change their extension to .exe and nothing happens for some of them even if they are detected on-demand.

Stefan Kurtzhals
May 12th, 2006, 02:52 AM
Minacross, the last update should fix the memory usage problem, can you confirm this please?

minacross
May 12th, 2006, 04:42 AM
actually I'm unable to update. I receive the following message ::)

minacross
May 12th, 2006, 04:44 AM
version info..

pilotart
May 12th, 2006, 08:56 AM
click this link to AntiVir Forum; Thread "delayed updates!?" (http://forum.antivir-pe.de/thread.php?threadid=7967)

"New Post Today, 08:26
Leo 2005
Gold
Registration Date: 31.10.2005
Posts: 3,213
Version: AntiVir PE Clas. & Prem.
Betriebssystem / Operating system: Windows Xp Sp2
Herkunft / Location: Frankfurt am Main

Leo 2005 is online

"no the servers has been blocked for updating. Avira is working on an program update which will be released. when they finished the servers will be open again."
_______________________________________________________________

I am seeing the same "...check later" box, they fixed a problem some were having with Avnotify "using 99% CPU time and the notifier window not appearing as it normally does."

I had avnotify denied in security, so had never had the above happen and still seeng the RAM jump with avgnt.

minacross
May 13th, 2006, 05:44 AM
I was able to update today but the problem is still not fixed ::) :'(

Stefan Kurtzhals
May 13th, 2006, 09:07 AM
The large update was pulled until the QA finishes their tests (after the problem on friday). The fixes will be available on monday most likely.

minacross
May 16th, 2006, 12:16 PM
what's up Stefan? Is the solution available yet?

FastGame
May 16th, 2006, 12:34 PM
My AntiVir is still running @40+mb total.

aigle
May 16th, 2006, 04:22 PM
With me

Avgnt.exe is using 7.6 MB
Sched.exe 3.0 MB
Avguard.exe 9.7 MB


Is it OK?

Alphalutra1
May 16th, 2006, 04:34 PM
avgnt.exe still at 20,000 :ouch: Just wondering about that quick fix coming last week ::)

To be on the bright side, maybe this memory optimization will then make it run lighter than before :D

Alphalutra1

shek
May 16th, 2006, 04:35 PM
The big update finally comes, but it is for vdf and engine only. The memory problem is still there.

aigle
May 16th, 2006, 04:55 PM
{QUOTE-> With me

Avgnt.exe is using 7.6 MB
Sched.exe 3.0 MB
Avguard.exe 9.7 MB


Is it OK? <-QUOTE}

But i felt updates are slower than when I used it few months before.

minacross
May 22nd, 2006, 09:25 AM
will this issue ever get solved? ::) :-\ :( :wacko: :thumbd: :thumbd:

shek
May 22nd, 2006, 10:10 AM
No. I'm also waiting for the fix.

19monty64
May 22nd, 2006, 08:08 PM
I run xp/sp2 and have avnotify running @ 99% cpu & keep coming back every few hrs. hoping someone have solution...tried re-install & now it stopped reporting results of scan....in need of alternate av/scanner, any ideas?

shek
May 22nd, 2006, 11:24 PM
I think avira has fixed this problem already. You could download and install the latest verison from freeav.com

Stefan Kurtzhals
May 23rd, 2006, 03:20 AM
No, the EXE files that fixed the problems were pulled from the update servers because of some problem. The QA has no time to retest because they are doing final tests for the 6.35 release. So I fear you must wait until 6.35 is out (2 weeks). Sorry :-(

ardvark
May 23rd, 2006, 07:21 AM
{QUOTE-> I run xp/sp2 and have avnotify running @ 99% cpu & keep coming back every few hrs. hoping someone have solution...tried re-install & now it stopped reporting results of scan....in need of alternate av/scanner, any ideas? <-QUOTE}

If you're seeking other freeware alternatives, Avast and AVG are the other main two choices out there.

Best regards...

RejZoR
May 23rd, 2006, 07:44 AM
Stefan, so nothing will be done about updater (at all)?

dw2108
May 23rd, 2006, 08:34 AM
{QUOTE-> No, the EXE files that fixed the problems were pulled from the update servers because of some problem. The QA has no time to retest because they are doing final tests for the 6.35 release. So I fear you must wait until 6.35 is out (2 weeks). Sorry :-( <-QUOTE}
I'm using AV 6 with manual updating as a backup. Will there be any further support for the AV 6 scanning engine and Avrep.dll, or are these now things of the past?

Stefan Kurtzhals
May 23rd, 2006, 03:31 PM
Rejzor, it's not a critical bug ("showstopper"), the tray icon program is working normallly (only taking too much memory) and as I said the QA has absolutely no time left to put in an extra test. They don't allow us to put untested files online. ;-) 6.35 will be out very soon.
If this is really bothering you, I might be able to provide a "beta" of that fixed executable on request (heuristik2 (a.t) avira.com). :)

JerryM
May 23rd, 2006, 11:10 PM
Will the new version of Avira in the free version scan incoming POP3?

Thanks,
Jerry

aigle
May 23rd, 2006, 11:32 PM
Few months back I saw a new Heuristics part of Antivir as beta on their site. Now I don,t see it. Anyone knows what happened to this one?

shek
May 23rd, 2006, 11:41 PM
JerryM---

I don't think avira will add this feature into its free version. But users are still pretty safe as long as the on-access scanner could catch viruses when they are written to the disk. If you really want it, you could try the premium version.

aigle---

The new heuristic engine has been integrated into the antivir 7 since February. It's really powerful based on some personal tests. And I am looking forward to the coming av-comparatives' proactive/retrospective test result.

aigle
May 24th, 2006, 12:53 AM
When I downloaded Antivir( free edition) it was still beta and not included. Does it mean it has been added now on my system by auto-update? How to know it?
Aslo id is part of free version as well?
Thanks.

shek
May 24th, 2006, 01:50 AM
The heuristic engine could be updated through auto-update. You could take a look at the version of search engine( start antivir 7-> help->about->version info). The current version is 7.00.00.11

Stefan Kurtzhals
May 24th, 2006, 02:55 AM
The new heuristic engine is included in the official released AntiVir7 Classic version since Februrar 2006 - as you soon can see in IBK's retroactive test. ;D

19monty64
May 24th, 2006, 03:54 AM
Thanks Ardvark, went with AVG(didn't need f/wall)and my security center took to it right away! Like that it scans in the background and has shield-but man is it ugly. Thanx again;)

aigle
May 24th, 2006, 04:03 AM
It shows this info. I think I have the latest one! True?

Ga1tar
May 24th, 2006, 04:52 AM
That is the latest version aigle :thumb:

aigle
May 24th, 2006, 05:55 AM
Thanks.

JerryM
May 24th, 2006, 09:11 AM
{QUOTE-> JerryM---

I don't think avira will add this feature into its free version. But users are still pretty safe as long as the on-access scanner could catch viruses when they are written to the disk. If you really want it, you could try the premium version.

aigle---

The new heuristic engine has been integrated into the antivir 7 since February. It's really powerful based on some personal tests. And I am looking forward to the coming av-comparatives' proactive/retrospective test result. <-QUOTE}


Thanks for the reply. I will be looking forward to the AVC tests.
I will also be interested in seeing how KAV 6 fares if that version is tested.
Right now I am using KAV6 on my desktop, and Avast Home on my laptop. On both I have Ewido which is a valuable layer for Avast I believe.

Regards,
Jerry

ardvark
May 25th, 2006, 04:05 AM
Hi 19monty64...

My pleasure:)

Best regards...

minacross
June 6th, 2006, 01:29 PM
{QUOTE-> No, the EXE files that fixed the problems were pulled from the update servers because of some problem. The QA has no time to retest because they are doing final tests for the 6.35 release. So I fear you must wait until 6.35 is out (2 weeks). Sorry :-( <-QUOTE}
Stefan,
it's almost 2 weeks since your post. when exactly will this problem be solved? ::) ??? :wacko:

Stefan Kurtzhals
June 6th, 2006, 02:13 PM
As I said, with the release of 6.35, scheduled later this week.

pykko
June 6th, 2006, 03:11 PM
what will be new in 6.35? ;D

pilotart
June 6th, 2006, 03:45 PM
Got to look at all the AntiVir threads in here :)

Stefan had posted on another thread that "no longer would the Updater need to Stop and Restart the Guard on a VDF or Engine Update" seems that was taking more time than the Update itself, and was no longer necessary.

Since it has now been some seven weeks since the huge update of 15 March, expect other issues may be dealt with, not that the 'double+ RAM consumption' has caused any slowdown of System or AntiVir on this RAM heavy D800 or the extermely RAM 'light' (71MB) Latitude LM of mine.

Stefan Kurtzhals
June 6th, 2006, 04:19 PM
pilotart, those changes are more likely for 6.36 or 6.37.

As for the 6.35 scan engine, we improved the PE scanning speed, added more detection methods, more heuristics (html related). All the other nice stuff was already released with normal engine updates in the last weeks and nobody noticed. ::)

shek
June 6th, 2006, 04:27 PM
Hi, Stefan,

Does avira have release notes for every major upgrade? What does the 6.35 mean? Based on the version info, almost all of the program components are in v7, except vdf, filter and updater. Even the version number of engine is v7 not 6.35 as you said.

Regards,

shek

RejZoR
June 6th, 2006, 04:32 PM
Oh, i forgot to ask you something Stefan. You were mentioning lack of advaced tech in AntiVir 7 in latest AV-Comparatives test (generic unpacker, emulator and stuff). Is this already included in current version or still planned (or not) for some future release?

SDS909
June 6th, 2006, 09:29 PM
{QUOTE-> All the other nice stuff was already released with normal engine updates in the last weeks and nobody noticed. ::) <-QUOTE}

Oh I noticed, which is why I migrated a few machines to AntiVir, and paid for the premium edition. It just so happened around the same time some serious shortcomings in VBA32 showed up, which made the switch very easy.

Overall, I am absolutely happy with Antivir after about a week or so of running Premium. Also, the fast response from some new threats I submitted is most noteworthy.

The only complaint now, a recentl update now flags almost every piece of shareware I download as ADSPY/SystemDoc.A.1.. Stuff I *KNOW* is safe, but you can see an example of it here:

http://www.battlefront.com/products/dropteam/demo.html

Or for example, patches to many of my favorite games are now being flagged.

http://www.gamershell.com/download_14110.shtml

Just a small "Bump" in an otherwise excellent road so far with AntiVir. Hopefully these FP's will be resolved in an update sooner, rather than later. :thumb:

SDS909
June 7th, 2006, 09:36 AM
Problem fixed already.

That was fast.

shek
June 8th, 2006, 01:14 PM
Finally the big update comes. Hope it will run well.

http://forum.antivir-pe.de/thread.php?threadid=8898

SDS909
June 8th, 2006, 01:53 PM
{QUOTE-> Finally the big update comes. Hope it will run well.

http://forum.antivir-pe.de/thread.php?threadid=8898 <-QUOTE}

My Antivir crashed during the big update.

Whats the currect version number? Mine is: 6.34.01.206 and I cannot force it to manually update to 6.35 due to some error.

Might have to reinstall I guess.. I have to say Antivir's only major weakspot is this updater.

shek
June 8th, 2006, 02:28 PM
The current vdf version is 6.35.00.09.
http://www.avira.com/

ellison64
June 8th, 2006, 02:47 PM
{QUOTE-> My Antivir crashed during the big update.

Whats the currect version number? Mine is: 6.34.01.206 and I cannot force it to manually update to 6.35 due to some error.

Might have to reinstall I guess.. I have to say Antivir's only major weakspot is this updater. <-QUOTE}

My antivir premium crashed during the update too.Restarted and downloading as we speak at an incredible 2kb/sec thats gonna take 88 minutes apparently 0n 1meg bb.Hope the crash isnt anything to go by.
ellison

SDS909
June 8th, 2006, 04:11 PM
I was forced to reinstall, downloaded the update at a whopping 11kb/s on a 10MB connection.

Not too happy about that.

Blackcat
June 8th, 2006, 04:15 PM
{QUOTE-> Dear AntiVir User,

there will be an update of AntiVir on 06/08/06.

Please note that the update servers at this time have a higher load and some updates need several trials to be successful.
To avoid a higher load, we advise you to do your update later in the evening or early in the morning.

The users of the AntiVir PersonalEdition Premium are not affected, because there are exclusive update servers for this version.

Sincerely

Your AntiVir Team <-QUOTE}
Take a look at the exclusive servers, in the evening, on dial-up :-X :(

ellison64
June 8th, 2006, 04:23 PM
WhOOPS....lol.......Well if its any consolation Blackcat ,it wasnt that much better on broadband.Mines installed ok now ,doesnt seem to be any probs at present.Hope yours is ok too.Looking at that dl speed maybe youd better tell me tommorrow..;)
ellison

shek
June 8th, 2006, 04:25 PM
I will upgrade my antivir7 as soon as i get home. But i just try to download the whole installation package through freeav.com. The speed is about 10kb/s. :thumbd: >:( It's 10 times faster than Blackcat's.:P

Blackcat
June 8th, 2006, 04:27 PM
{QUOTE-> WhOOPS....lol.......Well if its any consolation Blackcat ,it wasnt that much better on broadband.Mines installed ok now ,doesnt seem to be any probs at present.Hope yours is ok too.Looking at that dl speed maybe youd better tell me tommorrow..;)
ellison <-QUOTE}
I'd say the week-end :o :P ;D

Spoke too soon. I am up to 2kB/sec now ;D

SDS909
June 8th, 2006, 04:31 PM
Seems the "Premium" servers aren't so premium.. ;D

Anyway, I like the product, just a small roadbump. As long as the road bumps don't continue, I will use it. Its USUALLY when there are a succession of them, or crippling security issues, when I change products.

Like Stormbyte going out of business, KAV stream conflicts, or VBA32 missing 50% +/- files on-access kind of thing.. Update issues as long as they aren't a plague, I can handle.

Blackcat
June 8th, 2006, 04:37 PM
{QUOTE-> Seems the "Premium" servers aren't so premium.. ;D

Anyway, I like the product, just a small roadbump. As long as the road bumps don't continue, I will use it. Its USUALLY when there are a succession of them, or crippling security issues, when I change products. <-QUOTE}
I am a little more concerned as I am restricted to dial-up here. It seems like they always have problems when a LARGE update is needed. At the present time, I am a little disappointed with these exclusive Servers of the Premium edition. They ALWAYS seem to have problems with their Servers during these upgrades. The slowest I have ever used!!!!!!!!!
{QUOTE-> Like Stormbyte going out of business, KAV stream conflicts, or VBA32 missing 50% +/- files on-access kind of thing.. Update issues as long as they aren't a plague, I can handle. <-QUOTE}
Yes, most of my licensed AV's seem to have had problems recently so maybe its time to reload NOD!

Stefan Kurtzhals
June 8th, 2006, 05:03 PM
Blackcat, that is strange, I just checked the Premium server load and the servers are not at 100% load. So that is not the reason why you only got such slow updating speed.

SDS909
June 8th, 2006, 05:28 PM
{QUOTE-> Yes, most of my licensed AV's seem to have had problems recently so maybe its time to reload NOD! <-QUOTE}

I am starting to "Notch" consistency up on my list of most important things with an AV.. Especially as of late, with a plethora of issues from so many AV's.

Maybe Norton is my answer? :blink: :blink:

Blackcat
June 8th, 2006, 05:32 PM
Stefan, as you see I am slowly getting there ;D

BUT it will be a pain if I have to go through this long procedure with every major update. Now it has just crashed near the end of the update >:( :thumbd:

Time for bed!

.....
June 8th, 2006, 05:59 PM
Yup.. updater kept crashing here too... ending up doing a manul update. :-\

shek
June 8th, 2006, 08:34 PM
I tried four times before finished the upgrade. The last attempt took about 20minutes. NO crash happened. Now all is well.

pilotart
June 8th, 2006, 10:40 PM
Just did it on the Hilton's WiFi in just over eight minutes total, at 0155Z or about 3AM German time.

I see that Avgnt.exe's RAM use is back down to 6,320K now.

Stefan Kurtzhals
June 9th, 2006, 02:13 AM
Someone got a screenshot of that crash? Or does the updater just interrupts (because of lost connection)?

RejZoR
June 9th, 2006, 06:31 AM
Wow, your servers are really in completelly stopped state. I just can't update antivir. At all. And thats since 1:00 CET time (yeah 1 in the morning). This sux.

Blackcat
June 9th, 2006, 06:33 AM
RejZoR, is this with the Classic Servers?

RejZoR
June 9th, 2006, 06:36 AM
Yes...
avast! and AVG are also free but they update in the blink of an eye. Always.
Now it's really dissapointing for free program, but it's nothing compared to your problem. They shoul seriously check their entire updating subsystem, because it's a real mess.

minacross
June 9th, 2006, 07:02 AM
Stefan,
regarding the memory usage problem, it's now fixed. Thanks.

pilotart
June 9th, 2006, 08:36 AM
{QUOTE-> Wow, your servers are really in completelly stopped state. I just can't update antivir. At all. And thats since 1:00 CET time (yeah 1 in the morning). This sux. <-QUOTE}Got the 'big' one at about 3AM CET (in eight minutes total, from 'Start... to Stop...) and then waited 12 minutes for a server just past noon CET for a 3vdf, so they are still busy.;D {Classic free version}

Got to remember that it has been nearly three months since the last 'big' Update and the 15 March one was half the size of this one.8)

.....
June 9th, 2006, 10:23 AM
{QUOTE-> Someone got a screenshot of that crash? Or does the updater just interrupts (because of lost connection)? <-QUOTE}
Just closed, with no message. Everything seems to be working fine (although a bit slow) now, got another update when i got in just now.

waters
June 9th, 2006, 10:32 AM
I would sooner have this antivirus,with this large update to improve it,than avg or avast,with crap heuristics.Updateing is normally quick and frequent,at weekends,and often through the day.How many paid antivirus update once or twice a day only.

aigle
June 9th, 2006, 11:18 AM
Mine updated in 50 min about more than 10 MB yerterday, on dial up.

SDS909
June 9th, 2006, 01:37 PM
{QUOTE-> I would sooner have this antivirus,with this large update to improve it,than avg or avast,with crap heuristics.Updateing is normally quick and frequent,at weekends,and often through the day.How many paid antivirus update once or twice a day only. <-QUOTE}

+1.. Maybe Rezjor is using AOL or something, I have recieved several updates today in mere seconds. No complaints since the "Hiccup" yesterday, that was resolved easily.

Blackcat
June 9th, 2006, 01:46 PM
{QUOTE-> +1.. Maybe Rezjor is using AOL or something, I have recieved several updates today in mere seconds. No complaints since the "Hiccup" yesterday, that was resolved easily. <-QUOTE}
But the problem is not with the virus definitions. Even on dial-up here, they are very fast updating and only taking taking seconds.

The main problem is seen with the large PROGRAM updates.

Further RejZoR is using the Classic Servers whereas we are connected to the Premium ones. IME, just connecting to the Classic Servers can be a problem with the Free AntiVir.

iwod
June 20th, 2006, 11:25 AM
Has everyone got their memory issues fixed?
Because i am still getting 20Mb usage for avguard.exe and 16Mb for avgnt.exe
Not to mention avguard.exe Private Bytes is running at 37Mb which seesm unusually high for me.

shek
June 20th, 2006, 11:29 AM
It seems the memory issue has been fixed. Now memory usage for avguard.exe is ~20mb, for avgnt.exe it's is ~5mb.

iwod
June 20th, 2006, 01:06 PM
{QUOTE-> It seems the memory issue has been fixed. Now memory usage for avguard.exe is ~20mb, for avgnt.exe it's is ~5mb. <-QUOTE}

I must have misread or remember wrongly then. I always remember it uses 10Mb only.

nicM
July 5th, 2006, 09:32 AM
Has anyone seen this problem with systray-icon menu before?

The guard can't be controled anymore from here (menu entry is greyed), but only from the start panel. It's the 1st time I see such a bug.

(I guess it is gone after the next reboot though).


nicM

aigle
July 5th, 2006, 10:03 AM
I have seen like this as well though in my case I think status was shown Unknown but guard was working. It solved after 1 or 2 reboots. I thought it to be related to windows update installation/ or some transient conflict with comodo firewall but I am not sure about any of these.

nicM
July 5th, 2006, 10:32 AM
{QUOTE-> I have seen like this as well though in my case I think status was shown Unknown but guard was working. It solved after 1 or 2 reboots. <-QUOTE}

Well, that's obviously a cosmetic bug only in my case, because I had such errors as yours before ("unknown status", "service stopped" too), but the error was displayed within the systray icon (umbrella closed). Here it is just a functional bug, as it prevents you from shuting down the guard; unless you open the start panel.

Btw it didn't disappear with a reboot; would be curious to know if other peoples are experiencing it ??? .

nicM

aigle
July 6th, 2006, 11:43 PM
{QUOTE-> Well, that's obviously a cosmetic bug only in my case, because I had such errors as yours before ("unknown status", "service stopped" too), but the error was displayed within the systray icon (umbrella closed). Here it is just a functional bug, as it prevents you from shuting down the guard; unless you open the start panel.

Btw it didn't disappear with a reboot; would be curious to know if other peoples are experiencing it ??? .

nicM <-QUOTE}

In that case I was unable to shut down the guard as well as the option was greyed out with umbrella closed.