Disable antivir notifier?

[rawwr]

Every time I come home I am greeted with this beautiful window:

http://img125.imageshack.us/img125/7315/untitledbs5.gif

How the hell can I disable it? non of the other free AV softwares are this annoying...

[The_Duality]

By switching to Avast! ;):P

Im not sure you can disable it. I have it installed on my little sister's PC, and i couldnt figure it out.

[Davidpr]

You are getting a top class AV for free so just pressing OK on the notifier window is not much hasstle.

[Eldar]

{QUOTE-> Move the Notifier.exe to another AVPersonal folder. That way it won't reinstall it at each update but because it's not in the main AVPersonal folder it won't be able to run it either.

Just do a cut and paste with Windows Explorer. <-QUOTE}Hope that will solve your annoying problem. ;)

[dave88]

If you stop the process that does that from running the update process doesn't work. If I recall correctly, it's been a while.

[dave88]

{QUOTE-> Move the Notifier.exe to another AVPersonal folder. That way it won't reinstall it at each update but because it's not in the main AVPersonal folder it won't be able to run it either.

Just do a cut and paste with Windows Explorer. <-QUOTE}

Let me know if this works, and the auto update still functions properly.

Thanks

[19monty64]

http://www.wilderssecurity.com/showthread.php?p=673115 This may be what you are looking for.

[RejZoR]

{QUOTE-> You are getting a top class AV for free so just pressing OK on the notifier window is not much hasstle. <-QUOTE}

Erm, yes? This "only" Ok is so friggin annyoing i just can't stand it and i'd rather use some other AV that doesn't do that even if it's detection is total crap.

[duke1959]

This is the instructions I used a long time ago. Reboot into safe mode and log onto Administrator. From there go to Programs and click to go inside. Once there find the Avira folder. Open it and find 'avnotify.exe' and right clicked on it. Select Properties. Next select the Security tab at the top. Then at the bottom left of that window, select Advanced. Then under the Permissions tab in that window you will see permissions for 4 users, one of them is System, another Administrator, another Power User and one general User. For each of these users, one at a time click on View/Edit. In that window the first item is Traverse Folder / Execute File. Check the Deny box for that item and then Ok. Again do this for each user. Then when done with each user, finally click the Apply button on the bottom right of the Permissions window. A warning pops up and asks if you're sure etc. say ok or yes, whatever the case is, and that's it. Close everything and your done. Reboot and if it works like it did a year ago your good. It's easier done than said, but you could just use Avast like another poster recommended.

[Macstorm]

{QUOTE-> You are getting a top class AV for free so just pressing OK on the notifier window is not much hasstle. <-QUOTE}Agreed :thumb:

@rawwr: take a look here (http://forum.antivir.de/thread.php?threadid=22072)

[rdsu]

Just put your scheduler updates in invisible mode or see this Topic:
http://www.wilderssecurity.com/showthread.php?t=158221&highlight=remove+AntiVir ;)

[rawwr]

{QUOTE-> You are getting a top class AV for free so just pressing OK on the notifier window is not much hasstle. <-QUOTE}

Actually, it is a hassle considering there are other FREE solutions offering the same level of service; I just happened to choose this one because one review on the web recommended it (antivir probably paid them off for the #1 spot, wouldn't surprise me after seeing this annoying ad in my face ::) ).

I don't think I'll be renaming files or overriding files or whatever to fix this.

I'll just grab AVG.

[lodore]

i would reccomend you to try avast.
it is basically the same protection as the paid version but free for home use.
http://www.avast.com/eng/download.html
lodore

[EliteKiller]

Windows XP Home and Pro:

1. Boot into Safe Mode (tap F8 repeatedly after you restart the computer)
2. Log in using the Administrator account
3. Go to C:\Program Files\AntiVir PersonalEdition Classic\avnotify.exe
4. Right-click avnotify.exe-> properties-> security-> advanced
5. Under the Permissions folder you will see all of the users. Start with the first user….
6. Edit-> Traverse Folder / Execute File-> deny-> ok
7. Now perform step 6 for all of the other users-> apply-> yes/ok-> close all open windows
8. Reboot the computer into Normal Mode (start-> shutdown-> restart)

Windows XP Pro only:

1. Start-> Control Panel
2. Administrative tools-> Local security policy
3. Click on Software Restriction Policy-> Action (at the top)-> create new restriction policies
4. Right-click additional rules (on the right side)-> new path rule
5. Click Browse and navigate to c:\program files\Antivir\ and double-click avnotify.exe-> set the security level to Disallowed-> apply-> ok

Windows 2000:

1. Click Start, and then click Run.
2. In the Open box, type gpedit.msc, and then click OK.
3. Expand User Configuration, expand Administrative Templates, and then expand System.
4. In the right pane, double-click Don't run specified Windows applications.
5. Click Enabled, and then click Show.
6. Click Add, and then type the executable file name of the program that you want to restrict users from running. (For example, type avnotify.exe)
7. Click OK, click OK, and then click OK (NOTE: If domain-level policy settings are defined, they may override this local policy setting.)
8. Quit Group Policy Object Editor.
9. Restart the computer.

[ccsito]

The splash screen is to induce you to switch to the paid version. ;)

I wonder if the Windows OS system flooded your desktop with splash screens on boot up, how many would dump it and use something else? ::)

[RejZoR]

I'm aware of Premium version after 1 update popup. I decided for a Free version with a reason and i don't want another 5000 popups to remind me about Premium version.::)

[trjam]

Personally, I wouldnt ever want to disable anything about Antivir. If anything, I wish I could enable more.:)

[ccsito]

{QUOTE-> I'm aware of Premium version after 1 update popup. I decided for a Free version with a reason and i don't want another 5000 popups to remind me about Premium version.::) <-QUOTE}

Well they are probably following the same strategy like those car ads on TV. You keep seeing the same ad OVER and OVER again for the same vehicle. (hey didn't they just show the same ad just a few minutes ago?) If they bombard you a million times, maybe you will finally surrender your $$$$. ;)

[Mele20]

Just put the updater into invisible mode. I didn't much mind the ads but then I got a six month trial of the Premium version. No more ad, but I got really tired of seeing the updater popup once every hour (I have it set to update every hour). So, I put the display into invisible mode and now I don't see anything. If I forget to periodically check the GUI to make sure updates were successful, I will be notified after the time I have specified for unsuccessful updating attempts. So, seems to me this is a non issue unless the free version can't be put in invisible mode and while I didn't do it with the free version I don't know why you couldn't. You may need to make a new job to put it in invisible mode but you probably already have a new job as few want the standard only once every 24 hours update.

[rdsu]

We already saw that they will not disable the ads on the free version, so if you want to use it, just disable them or use it like it is.

If you don't like it, even if you can disable them, just use another AV.

Easy, is not?

[Kerodo]

Yep, easy... I liked AntiVir best, but I refuse to use it for 2 reasons, one, the nag screen on the free version on updates, and two, the problems with the update servers when major updates come out. No thanks... I'd rather use Avast, or even AVG instead...

[dave88]

It wouldn't be so bad if it was maybe once a week, but having it pop up on every update gets old real quick.

[rdsu]

{QUOTE-> .. the problems with the update servers when major updates come out. <-QUOTE}
I don't have problems with that... :)

[bellgamin]

Just run the freebie HIPS DSA (http://www.privacyware.com/dynamic_security_agent.html) then use Process Detection module to quarantine avnotify.exe (as shown) & POOF! -- it's done with. Plus you get doggone good HIPS protection as well.

(NOTE- As shown by the screenshot, I have also quarantined Antivir's avguard because I normally use AntiVir on-demand only.)

[RejZoR]

Is there any tool to just block programs from excuting and which is compatible with Vista?

[plantextract]

{QUOTE-> Is there any tool to just block programs from excuting and which is compatible with Vista? <-QUOTE}
don't ntfs security permissions allow you to deny execution of a file for a specific group?

[dave88]

{QUOTE-> Just run the freebie HIPS DSA (http://www.privacyware.com/dynamic_security_agent.html) then use Process Detection module to quarantine avnotify.exe (as shown) & POOF! -- it's done with. Plus you get doggone good HIPS protection as well.

(NOTE- As shown by the screenshot, I have also quarantined Antivir's avguard because I normally use AntiVir on-demand only.) <-QUOTE}

A while back I did essentially the same thing using processguard (I did not disable avguard).

If I recall correctly disabling avnotify.exe stopped the advertisment, but also broke some aspect of the autoupdate function.

[RejZoR]

{QUOTE-> don't ntfs security permissions allow you to deny execution of a file for a specific group? <-QUOTE}

I've tried that but it just borks up the updating process (it's constantly re-downloading that avnotify.exe crap).

[plantextract]

{QUOTE-> I've tried that but it just borks up the updating process (it's constantly re-downloading that avnotify.exe crap). <-QUOTE}
there should be an advanced permission which reads "traverse folder/execute file". doesn't it work (and the rest to allow)?

[Kerodo]

{QUOTE-> I don't have problems with that... :) <-QUOTE}
Oh man, I sure did.. Every time there was a program update, or an update of any size, the update servers were useless to me for 2-3 days. In other words, I couldn't even get anything out of them for days. This was a regular occurrence too, as I have used AntiVir off and on for years.. No other product, even free ones, has this problem. To me it's just unacceptable..

Anyway, YMMV.. :)

[Kerodo]

{QUOTE-> I've tried that but it just borks up the updating process (it's constantly re-downloading that avnotify.exe crap). <-QUOTE}
I blocked it here with security policy successfully in XP Pro, it still updated fine and no further downloading of avnotify.exe, but I'm not sure how that would translate in Vista.. just followed someone's directions and set up a new path rule to block execution of avnotify.exe, worked ok.

[RejZoR]

WinXP has different permissions editor than Vista Home Premium...

[bellgamin]

{QUOTE-> A while back I did essentially the same thing using processguard (I did not disable avguard).

If I recall correctly disabling avnotify.exe stopped the advertisment, but also broke some aspect of the autoupdate function. <-QUOTE}I have experienced no problem with updating AntiVir with the notifier blocked. Perhaps PG blocked avnotify.exe in a manner detectable by AntiVir. DSA does not.

By the way, the first time that DSA blocks any quarantined process (including avnotify.exe, of course) it pops-up a ONE-TIME notice to make sure you REALLY want it blocked. When that happens, just confirm the block & click the "quit bugging me" item (I forget the exact wording) & that'll do it.

I update AntiVir manually. Why? Because AntiVir's busy servers make it more efficient to update between midnight and 5AM, Germany time.

[Kerodo]

{QUOTE-> WinXP has different permissions editor than Vista Home Premium... <-QUOTE}
Ok... stands to reason that it might... but even though I could stop the nag screen, I still had update server probs regularly, which is enough to put me off it altogether..

[bellgamin]

{QUOTE-> Ok... stands to reason that it might... but even though I could stop the nag screen, I still had update server probs regularly, which is enough to put me off it altogether.. <-QUOTE}I agree that the busy server can be a PITA. I myself have always been able to readily update AntiVir, even when it had 6MB or larger updates due to a new version or a major re-shuffle of its sig database.

I update AntiVir when it is just after midnight in Germany (their time is UTC+1). For instance, if you update from LA (UTC-8) at 8PM, it will be 11PM on USA east coast & 5AM in Germany (& much of Europe, as well). So there shouldn't be as much traffic hitting AntiVir's servers as at other times.

It works for me (I'm in Hawaii UTC-10). Maybe it will work for you.

[Kerodo]

Thanks Bellgamin, good suggestion.. Perhaps I will give it a try again soon... AntiVir IS my 1st choice if I can just overcome those problems...

[dave88]

Ah, maybe my update probs were due to the server issues you guys are referring to and not me disabling avnotify.

[Kerodo]

Yes, probably so. I just installed AntiVir latest right now, half hour ago, disabled avnotify via security policy in XP Pro, ran the update, and it all went fine.

Also, it was 3:30pm here, so 12:30 just after midnight in Germany, and no trouble with updating at all. The initial download was 9mb after install, that I got in about 2 minutes, looked like around 85KB/sec which is good enough I guess.

So as long as it stays good, I'm using it, as it's the best of the free AVs IMO. So far so good.. :)

[Mele20]

Just set it to update every hour and make the update box invisible. Then you don't have to worry about figuring out the time difference. If the updater doesn't get it one hour, it will get the next hour, or the hour after that. If it gets an update that is big and takes a long time, so what? Unless you are a user who turns off their computer and happen to turn it off in the middle of an invisible update. If you never shut down your computer and have a broadband connection, why would it matter if an update took a long time because the updater connected during congested hours?

Also set Avira to notify you if you don't get updates for more than one day. This way you can just completely forget about it and let the updater get the updates when it can and, if by chance, it can't get any after trying 24 times in 24 hours then Avira will notify you and you can then look into the matter further. With the free version, you need to make a new job if you want the updater to connect every hour to see if there are updates.

[Kerodo]

Hi Mele, and thanks for the suggestions.. The problem I had was that every time there was a program update or a major defs update, I couldn't get thru to the servers at all, meaning no download whatsoever. So it wasn't a matter of slow downloads, it was a matter of NO downloads. This would go on for several days too, which resulted in me saying "this is ridiculous" and dumping it. This is obviously the free version I'm talking about.. Fact is though, I have tried probably 6-8 AVs and the ONLY one with server probs is Antivir.

I really have no desire to edit my schedule and create 24 hourly time slots, I don't think that's necessary. I will give the midnight Germany time slot a try and see how it goes. I think it will be fine. If not, then there are other AVs right? And I don't think that the promise of better (normal) servers is going to convince me to buy the Premium version... if they wanted to persuade me to buy, they should impress me with how well the free version and servers work first. ;)

[Mele20]

I agree the argument that if you buy it you will get much better servers is not a good argument. I got a free SIX MONTH trial of Avira Premium from a thread here and the premium servers are far better. The only time I had a problem was recently and Avira was caught surprised and puzzled as to why the premium servers had a problem with the last big update. Even so, the updater tried three hours in a row then got it.

I don't know if I'd want Avira if I could not update every hour. I had Kaspersky and I guess I got spoiled on hourly updates. It puzzles me why you wouldn't want hourly updates. Out of the 24 update tries every day, I get updates about 15 to 20 of those connections. Why would I want to wait to get the update if it is there on the server? If you are on dial up, or only use your computer infrequently, and have it turned off a lot then I could understand but otherwise to me a main reason I use Avira is for updates every hour.

[bellgamin]

AntiVir-PE normally updates only once daily, & (sometimes) twice. Other than that, hourly checks will repetitively produce the message "Your program is up-to-date. At this time your protection is optimal."

In other words, hourly checks can be made, but that won't produce hourly updates.

[Mele20]

{QUOTE-> AntiVir-PE normally updates only once daily, & (sometimes) twice. Other than that, hourly checks will repetitively produce the message "Your program is up-to-date. At this time your protection is optimal."

In other words, hourly checks can be made, but that won't produce hourly updates. <-QUOTE}

I just went back through my log for four months and Avira updated an AVERAGE OF 5 TIMES DAILY. The lowest was FOUR times daily (with two exceptions of THREE TIMES) and the highest was SIX times. I've only had Avira since early January but I have NEVER seen it update less than 3 times in a day and I haven't seen that few in a while so maybe you are thinking of Avira from 2006?

I'd much rather get 5-6 updates daily than only 1 but each to their own.

[rdsu]

{QUOTE-> Just set it to update every hour and make the update box invisible. <-QUOTE}
Same as I! ;)

[Kerodo]

{QUOTE-> I just went back through my log for four months and Avira updated an AVERAGE OF 5 TIMES DAILY. The lowest was FOUR times daily (with two exceptions of THREE TIMES) and the highest was SIX times. I've only had Avira since early January but I have NEVER seen it update less than 3 times in a day and I haven't seen that few in a while so maybe you are thinking of Avira from 2006?

I'd much rather get 5-6 updates daily than only 1 but each to their own. <-QUOTE}
Well, on that I guess I just don't feel the need for it. I am not, for example, surfing in "high-risk" territory every hour of the day where I might want to make sure I always have the very latest threat update in my defs at all times, etc. I feel that once a day is adequate for my needs. I think one can get a little too caught up in all this security stuff sometimes, and hourly AV update checks strike me a little that way. But as you say, to each his/her own.. :)

[Mele20]

{QUOTE-> I think one can get a little too caught up in all this security stuff sometimes, and hourly AV update checks strike me a little that way. But as you say, to each his/her own.. :) <-QUOTE}

For your information, I do not have Avira Guard installed nor do I have the mail scanner installed. I use Avira as right click command scanner only. So, I don't believe I fall in your category of being 'too caught up" in security stuff. I also use ProcessGuard but not anything else that runs in real time (unless one counts the Proxomitron which is a local proxy but I use it mostly to kill ads). :D Just the opposite. But if I am going to have an AV at all, I wish it to be as updated as possible at all times. Anything else is utter foolishness as what is most likely to get a careful user is a new threat that there not yet protection for. Why bother with having an AV unless it is, at all times, as up to date as possible? Even then the AV will miss some nasties so why have it missing more nasites because you have an adversion to a silent, hidden update?

I can't understand how you, or anyone, would balk at keeping your AV up to date...but if you like it that way ok. I could understand if updating was a difficult chore, but when it can be done in the background silently...well your reasoning totally escapes me.

edit: Wow, this is my 2,000th post here! :) :)

[ccsito]

{QUOTE->
I can't understand how you, or anyone, would balk at keeping your AV up to date...but if you like it that way ok. I could understand if updating was a difficult chore, but when it can be done in the background silently...well your reasoning totally escapes me.

edit: Wow, this is my 2,000th post here! :) :) <-QUOTE}

As for dialup, having the update process proceed while surfing does take a noticible effect on your web page loading. Your surfing speed is sometimes slowed by 1/2 of what it would be without that other download occuring. Remember that you have only one pipeline for sending data in and out of your modem so if you have multiple browsers open and loading, the slowdown is very apparent. But of course, the majority of you all have blistering speed. But you also pay the price for it too. ;)

[Kerodo]

{QUOTE-> But if I am going to have an AV at all, I wish it to be as updated as possible at all times. Anything else is utter foolishness as what is most likely to get a careful user is a new threat that there not yet protection for. Why bother with having an AV unless it is, at all times, as up to date as possible? Even then the AV will miss some nasties so why have it missing more nasites because you have an adversion to a silent, hidden update?

I can't understand how you, or anyone, would balk at keeping your AV up to date...but if you like it that way ok. I could understand if updating was a difficult chore, but when it can be done in the background silently...well your reasoning totally escapes me. <-QUOTE}

Well, to be quite honest with you, I have been online now for over 12 years (actually many years before that if you count the DOS days), and in all this time, most of it with a cable connection etc, I have only seen a virus here about 2 times, and malware once. Both times the virus was caught by my AV and it was from downloading .exe's in p2p apps, and the malware was an obvious keylogger from another p2p app, so I was asking for it.

So I ask you, 2 or 3 instances in 12 years.... where's the threat Mele? Or are we just a little paranoid? :)

At any rate, I still think an update once a day is fine. If you prefer hourly then go for it, no harm done except the update server suffers a lot more traffic that way. But that's the AV server's problem right?

To be honest with you, I think I could probably do without an AV altogether most of the time. But since I'm a reasonable guy, and there's no harm in running one, I install AntiVir, which I believe is the best free one. But hourly updates you can have, I just don't care about all that.. once a day is good for me..

{QUOTE->
edit: Wow, this is my 2,000th post here! :) :) <-QUOTE}

Congratulations! I'm not far behind you... ;)

[Arup]

When it comes to a free AV with best update and fast servers, nothing comes close to Avast, paid or free, the servers remain the same, in fact among free offers, Avast is the least crippled, I do use Anti Vir and am a big fan of it specially now that they have anti rootkit feature but the update servers are a PITA, for weeks they would be fine and then they would go down for few days, really and truly annoying.

[duke1959]

I'm at my 2,000th install of security software. LOL. I agree about Avast. It's the only thing my wife and son use, and they have never had any troubles. As far as Avira, when I go back to it again, I won't mind doing the safe mode Administrator procedure to disable the Notifier or the occasional update problems in order to use this ever improving AV.

[Mele20]

{QUOTE-> Well, to be quite honest with you, I have been online now for over 12 years (actually many years before that if you count the DOS days), and in all this time, most of it with a cable connection etc, I have only seen a virus here about 2 times, and malware once.

At any rate, I still think an update once a day is fine.
<-QUOTE}

I'd say that in your case you are right that you could probably do without an AV or just use as right click scan as I do for files I download. I see your point in your case as to not needing to update more than once a day. I guess that it is just that I see no reason to not use something that is there ....why be skimpy? It is not paranoia. If it is offered every hour and there are 5-6 actual updates every 24 hours, why not take them? If I had to pay extra to get more than one update a day, I would be saying "no thank you, I am not at high risk and don't want to spend the extra money". But when it is offered freely why turn your nose up at it...UNLESS you are on dialup. Then I fully understand why someone would only do it once a day. I have been sooooo grateful for over six years now that I have broadband.

It is also Kaspersky's influence. Kaspersky updated every hour but the actual number of updates per 24 hours was 15-18. I really loved that about KAV and I guess I am influenced by that with Avira even though Avira has better heuristics so the frequent updates are not as important for Avira as they are for KAV.

You are close behind me! Neat! I had not been paying attention so I was so surprised when I just happened to notice it was at 2000...I guess the number of zeroes caught my subliminal perception as I thought to myself what did I just see about my post number? and looked back at it.

[Kerodo]

{QUOTE-> I'd say that in your case you are right that you could probably do without an AV or just use as right click scan as I do for files I download. <-QUOTE}
Yep, actually I used to do just that on my 2k setup, I ran F-Prot just as on-demand right click scanner for downloads, and that was it. Worked out pretty nicely for a long time too. Then eventually I figured why not just run a resident scanner anyway, it tends to make life easier. Perhaps one day I will return to the on-demand setup only, I do change things often here.

[gerardwil]

{QUOTE-> Yep, actually I used to do just that on my 2k setup, I ran F-Prot just as on-demand right click scanner for downloads, and that was it. Worked out pretty nicely for a long time too. Then eventually I figured why not just run a resident scanner anyway, it tends to make life easier. Perhaps one day I will return to the on-demand setup only, I do change things often here. <-QUOTE}

Does this disable AntiVir notifier?

Gerard

[bellgamin]

{QUOTE-> Does this disable AntiVir notifier?

Gerard <-QUOTE}Using AV-PE as on-demand-only will NOT disable notifier. Notifier is activated by updating, not by the real-time-monitor (AVguard).

To disable notifier, either block it using SystemSafetyMonitor or DynamicSecurityAgent or (perhaps) one of the techniques discussed above.

[RejZoR]

Well, if you perform on-demand only scans with it you can just as well update manually. Getting that popup in such case is not as annoying as auto updater poping it up whenever it updates.

[Espresso]

{QUOTE-> Just run the freebie HIPS DSA (http://www.privacyware.com/dynamic_security_agent.html) then use Process Detection module to quarantine avnotify.exe (as shown) & POOF! -- it's done with. Plus you get doggone good HIPS protection as well.

(NOTE- As shown by the screenshot, I have also quarantined Antivir's avguard because I normally use AntiVir on-demand only.) <-QUOTE}

You don't have to install the guard service to begin with, and you can turn off the service/startup item. No need to quarantine it with DSA.

To get updates w/o the notifier, run the updater (preupd.exe) with the Windows task Scheduler as often as you wish. Works great here. I run it under a different account so I don't see anything.

[duke1959]

When I used the free version of Sunbelt Kerio Firewall I used it's Application Behavior Blocking feature to block the notify exe. that's responsible for the Nag screen. Just food for thought.

[Kerodo]

The Free version of ProSecurity can block it also, actually there are probably quite a few free apps that will get the job done.

[maddawgz]

can i disable driver and service and use it as only on demand?? the classic

[Espresso]

{QUOTE-> can i disable driver and service and use it as only on demand?? the classic <-QUOTE}

Yes. You can disable the service in Services and the drivers in Device Manager (AVGIO and AVIPBB) . There's another driver that isn't listed in Device manger (AVGNTFLT). You can use pserv2 (http://www.p-nand-q.com/e/pserv.html)to disable that one.

Might be easier to reinstall and de-select the AV Guard.

[maddawgz]

Windows XP Home and Pro
1. Boot into Safe Mode (tap F8 repeatedly after you restart the computer)
2. Log in using the Administrator account
3. Go to C:\Program Files\AntiVir PersonalEdition Classic\avnotify.exe
4. Right-click avnotify.exe-> properties-> security-> advanced
5. Under the Permissions folder you will see all of the users. Start with the first user….
6. Edit-> Traverse Folder / Execute File-> deny-> ok
7. Now perform step 6 for all of the other users-> apply-> yes/ok-> close all open windows
8. Reboot the computer into Normal Mode (start-> shutdown-> restart)
-------------------------------
Windows XP Pro only:
1. Start-> Control Panel
2. Administrative tools-> Local security policy
3. Click on Software Restriction Policy-> Action (at the top)-> create new restriction policies
4. Right-click additional rules (on the right side)-> new path rule
5. Click Browse and navigate to c:\program files\Antivir\ and double-click avnotify.exe-> set the security level to Disallowed-> apply-> ok

Personal Note: It Does Work & has worked Well in 3 pcs over the past 4mos.

[Kerodo]

Just as a note, your first solution above for XP Home also works for Win2k without the need to boot into safe mode, just right click on the file per above and do it..