Antivirus off, but still get "quick scan" alerts

Discussion in 'Returnil releases' started by Phantasm, Oct 15, 2010.

Thread Status:
Not open for further replies.
  1. Phantasm

    Phantasm Registered Member

    Joined:
    Jul 29, 2009
    Posts:
    87
    Hi.. im currently using the latest version of returnil (free)

    I have a problem though... every now and then returnil says Quick Scan started or something like that.. it's a green rectangle on the bottom right of the screen... This is bad... help plz

    Maybe one day Returnil should have "Custom Install" option so the user can remove the antivirus components..
     
  2. Coldmoon

    Coldmoon Returnil Moderator

    Joined:
    Sep 18, 2006
    Posts:
    2,981
    Location:
    USA
    Hello Phantasm,
    The reason for that is due to two things; one you can adjust and one that will be fixed in an upcoming release update:

    1. You can: Deactivate the option to rescan recent system changes with an AV update (Virus Guard > Settings > Advanced section)

    2. We will fix: There is a known issue where the Cloud Protection feature does not turn off when the Real-Time protection setting is turned off. This results in new Cloud based updates to be requested (by RSS) and delivered (by the update server), showing the popup alert (the box in green) when a new update has been received.

    Putting the two together results in what you are seeing. Try my suggestion of deactivating the rescan and let me know if this clears the issue. You will still get the Cloud Updates due to #2, but the automatic scan will stop.

    Mike
     
  3. Phantasm

    Phantasm Registered Member

    Joined:
    Jul 29, 2009
    Posts:
    87
    Thanks for the reply, all done :)
     
  4. Phantasm

    Phantasm Registered Member

    Joined:
    Jul 29, 2009
    Posts:
    87
    New Error: http://i54.tinypic.com/10pppnq.png

    Even though the AV is off... The AV seems to be extremely severely unstable too, this notification popped up 3 times. Any advice? or just continue waiting for the new version as you say.
     
  5. Coldmoon

    Coldmoon Returnil Moderator

    Joined:
    Sep 18, 2006
    Posts:
    2,981
    Location:
    USA
    Hi,
    The program is not unstable and what you saw is an alert from the AE component detailing that the listed program or object was blocked from executing or being loaded. It will also be listed in the Virus Guard > Log section. If you need to adjust the settings for the AE when in Virtual Mode, you can do so in Virtual Mode > Settings > Additional Protection Options section.

    Mike
     
  6. Phantasm

    Phantasm Registered Member

    Joined:
    Jul 29, 2009
    Posts:
    87
    The program isn't, but the AV Engine is. Because even with the latest version there still is no option to completely kill the AV. I am having problems now with it saying "Status: Denied execution for program that is absent from real disk.

    Location: ...e2\windows\System32\drivers\TAP0901.sys

    It's a FP. I like this software, it's just the AV engine that is bugging me.
     
  7. Coldmoon

    Coldmoon Returnil Moderator

    Joined:
    Sep 18, 2006
    Posts:
    2,981
    Location:
    USA
    That is an Anti-Execute feature block/warning. As posted previously, it is not the Virus Guard, but the block is detailed in the VG log. Change the setting for Virtual Mode > Settings > Additional Protection Options section to the default setting "Trust System Services from real disk only" and that should alleviate the frequent popups.

    Mike
     
  8. Phantasm

    Phantasm Registered Member

    Joined:
    Jul 29, 2009
    Posts:
    87
    Well this is strange... that setting is already the default.
     
  9. Coldmoon

    Coldmoon Returnil Moderator

    Joined:
    Sep 18, 2006
    Posts:
    2,981
    Location:
    USA
    Shoot over a copy of your Virus Guard log (Virus Guard > Log > Export). Attach the XML document output to an e-mail to support (dash) tech (at) returnil (dot) com.

    Thanks
    Mike
     
  10. Phantasm

    Phantasm Registered Member

    Joined:
    Jul 29, 2009
    Posts:
    87
  11. Coldmoon

    Coldmoon Returnil Moderator

    Joined:
    Sep 18, 2006
    Posts:
    2,981
    Location:
    USA
    Virtual Mode > Settings > Advanced section > "Do not warn when exit from Virtual Mode"

    Mike
     
  12. Phantasm

    Phantasm Registered Member

    Joined:
    Jul 29, 2009
    Posts:
    87
    Everything is truly running smoothly now, thank you.
     
Thread Status:
Not open for further replies.