Avira Premium guard errors are driving me batty

Discussion in 'other anti-virus software' started by AshG, Jul 18, 2008.

Thread Status:
Not open for further replies.
  1. AshG

    AshG Registered Member

    Joined:
    May 7, 2005
    Posts:
    206
    Location:
    East TN
    I am trying (again) Avira Premium on my main system. I did some major scrubbing and hand-removed every possible remnant, file and registry, of any antivirus or antimalware software that has ever been installed. I am still running headfirst into some problems that others are experiencing, but that Avira's forums have not been able to tackle for anyone.

    The other two computers I have trialed Avira on have been so problem-free that I am about to put down some coin for three licenses, but If it doesn't work on my desktop then it's back to the drawing board for all three systems.

    Anyway, on to the show:

    Webguard and Mailguard refuse to start under any circumstance. Windows Defender was disabled before, during, and after installation. No other antivirus or antimalware program was installed. In Services.msc, the error prompt tells me that Webguard started, then stopped unexpectedly. It says Mailguard won't even begin to start.

    http://i345.photobucket.com/albums/p397/StudioBrass/screenshot.jpg

    http://i345.photobucket.com/albums/p397/StudioBrass/processlist.jpg

    http://i345.photobucket.com/albums/p397/StudioBrass/errormessage.jpg

    Here is the AVG Guard log, for those of you who know how to interpret it:
    Code:
    7/18/2008,12:41:48 ---------------------------------------------------------
    7/18/2008,12:41:53 Keyfile contains a valid license. The Avira AntiVir Premium will run as a fully functional version!
    7/18/2008,12:41:53 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.6,VDF version: 7.0.5.23
    7/18/2008,12:41:54 AntiVir Guard was enabled.
    7/18/2008,12:41:54 Avira AntiVir Premium has been started successfully!
    7/18/2008,12:41:54 [CONFIG] On-Access configuration used:
          - Files to scan:  scan files from local drives
          - Device mode:  scan files on open, scan files on close
          - Only scan files with one of the following extensions:  . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
          - Unpack runtime compressed files
          - Actions: ask the user
          - Heuristic: MACRO , WIN32 MEDIUM
          - Logfile report level 1
    7/18/2008,12:43:02 Update process started!
    7/18/2008,12:43:04 Current Engine Version: 8.1.1.11
    7/18/2008,12:43:04 Current Pattern File: 7.0.5.138
    7/18/2008,12:43:05 [CONFIG] On-Access configuration used:
          - Files to scan:  scan files from local drives
          - Device mode:  scan files on open, scan files on close
          - Only scan files with one of the following extensions:  . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
          - Unpack runtime compressed files
          - Actions: ask the user
          - Heuristic: MACRO , WIN32 MEDIUM
          - Logfile report level 1
    7/18/2008,12:49:06 Avira AntiVir Premium service has been stopped!
    7/18/2008,12:50:09 ---------------------------------------------------------
    7/18/2008,12:50:11 Keyfile contains a valid license. The Avira AntiVir Premium will run as a fully functional version!
    7/18/2008,12:50:11 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.11,VDF version: 7.0.5.138
    7/18/2008,12:50:12 AntiVir Guard was enabled.
    7/18/2008,12:50:12 Avira AntiVir Premium has been started successfully!
    7/18/2008,12:50:12 [CONFIG] On-Access configuration used:
          - Files to scan:  scan files from local drives
          - Device mode:  scan files on open, scan files on close
          - Only scan files with one of the following extensions:  . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
          - Unpack runtime compressed files
          - Actions: ask the user
          - Heuristic: MACRO , WIN32 MEDIUM
          - Logfile report level 1
    The Mailguard log...
    Code:
    7/18/2008,12:41:18  [INFO] Begin init.
    7/18/2008,12:41:58  [ERROR] Avira AntiVir Premium  engine service is not running.
    7/18/2008,12:41:58  [ERROR] Unable to initialize Avira AntiVir Premium  Engine.
    7/18/2008,12:42:04  [INFO] The Avira AntiVir Premium Mail Service has been stopped.
    7/18/2008,12:50:10  [INFO] Begin init.
    7/18/2008,12:50:50  [ERROR] Avira AntiVir Premium  engine service is not running.
    7/18/2008,12:50:50  [ERROR] Unable to initialize Avira AntiVir Premium  Engine.
    7/18/2008,12:50:56  [INFO] The Avira AntiVir Premium Mail Service has been stopped.
    And the Webguard log:
    Code:
    7/18/2008,12:40:48 [ERROR] Attaching Guard failed. Error code 2
    7/18/2008,12:40:48 [ERROR] Initialization failed, step 2
    7/18/2008,12:40:48 [INFO] The service was stopped.
    7/18/2008,12:42:25 [ERROR] Initialization failed, step 2
    7/18/2008,12:42:25 [INFO] The service was stopped.
    7/18/2008,12:50:10 [ERROR] Initialization failed, step 2
    7/18/2008,12:50:10 [INFO] The service was stopped.
    I'm hoping I can get some help here; as I said, the other poor sots facing this problem got nowhere. We're all using Vista 64 Ultimate too, according to the threads. Something is up.
     
  2. Stefan Kurtzhals

    Stefan Kurtzhals AV Expert

    Joined:
    Sep 30, 2003
    Posts:
    701
    I will forward this info so we can hopefully reproduce the problem and fix it.
     
  3. AshG

    AshG Registered Member

    Joined:
    May 7, 2005
    Posts:
    206
    Location:
    East TN
    Stefan,

    Thanks for your reply. One of the mods at the Avira forum dropped in to help and we may have found another piece of the puzzle. There is a log file that is supposed to exist, but doesn't. I cannot find the avesvc.log file anywhere in my computer. I have a folder full of other log files, just not this one.

    Thanks for your help!
     
  4. Macstorm

    Macstorm Registered Member

    Joined:
    Mar 7, 2005
    Posts:
    2,531
    Location:
    Sneffels volcano
    AshG,

    Just in case, may I suggest you to try the jv16PT's RegistryCleaner feature? (30day trial without limitations, works with vista x64 systems). Please uninstall avira, run the RegCleaner and fix all errors found, then restart and reinstall avira.

    As for the 'avesvc.log', on x32 it is located inside the 'C:\ProgramData\Avira\AntiVir PersonalEdition Premium\LOGFILES' directory by default.
     
  5. AshG

    AshG Registered Member

    Joined:
    May 7, 2005
    Posts:
    206
    Location:
    East TN
    Thanks for the suggestions, Macstorm. I prepped the system with jv16 before installing Avira; I even used its Finder service to locate any trace of Eset, F-Prot, and Vipre. For all intents and purposes, she was antivirus pure by the time I finished.

    As for the log directory, that file doesn't exist in there. Lots of others do, just not that one. I have:
    Of the logs present in the folder, there are:
    avguard
    AVSCAN -whole bunch of letters and numbers
    mailgrd
    setup
    setup00
    setup01
    setup02
    UPD-2008-07-18-12-42-02
    webguard
    but no avesvc

    In case my install log may give some idea of what is going on...
    Code:
    Logfile of Avira AntiVir Premium - Setup
    instant of time:  7/18/2008   16:13
    Used locale: English (United States)
    7/18/2008,16:13 [INFO]  Build 362   7/11/2008
    7/18/2008,16:13 [INFO]  Windows Vista x64 Edition   -   Windows Vista x64 Edition (Service Pack 1)  [6.0.6001]
    7/18/2008,16:13 [INFO]  UNICODE
    7/18/2008,16:13 [INFO]  Setup is running in update mode.
    7/18/2008,16:13 [INFO]  Path of application data: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Premium\
    7/18/2008,16:13 [INFO]  Source path: C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\
    7/18/2008,16:13 [INFO]  Destination path: C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\
    7/18/2008,16:13 [INFO]  Temp path: C:\Users\Ashley\AppData\Local\Temp\AVSETUP_4880f981\
    7/18/2008,16:13 [INFO]  Desktop path: C:\Users\Public\Desktop\
    7/18/2008,16:13 [INFO]  Path of program group: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
    7/18/2008,16:13 [INFO]  Version information:
    7/18/2008,16:13 [INFO]  C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\SETUP.EXE:   8.0.0.31
    7/18/2008,16:13 [INFO]  C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\SETUP.EXE:   8.0.0.31
    7/18/2008,16:13 [INFO]  C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\antivir0.vdf:   6.40.0.0
    7/18/2008,16:13 [INFO]  C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\antivir1.vdf:   7.0.5.1
    7/18/2008,16:13 [INFO]  C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\antivir2.vdf:   7.0.5.119
    7/18/2008,16:13 [INFO]  C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\antivir3.vdf:   7.0.5.138
    7/18/2008,16:13 [INFO]  C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\:   0.0.0.0
    7/18/2008,16:13 [INFO]  Initialize AVWSC.EXE
    7/18/2008,16:13 [INFO]  Status of service AntiVirScheduler: running
    7/18/2008,16:13 [INFO]  Initialize avscan.exe
    7/18/2008,16:13 [INFO]  Minifilter is installed
    7/18/2008,16:13 [INFO]  Minifilter is possible
    7/18/2008,16:13 [INFO]  Status of service AntiVirService: running
    7/18/2008,16:13 [INFO]  Status of service AVEService: running
    7/18/2008,16:13 [INFO]  Status of service AntiVirMailService: stopped
    7/18/2008,16:13 [INFO]  Initialize avconfig.cpl
    7/18/2008,16:13 [INFO]  Initialize avgnt.exe
    7/18/2008,16:13 [INFO]  Status of service antivirwebservice: stopped
    7/18/2008,16:13 [INFO]  Initialize avcenter.exe
    7/18/2008,16:13 [INFO]  Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Premium |UpdateStarted
    7/18/2008,16:13 [INFO]  Shell Extension is installed
    7/18/2008,16:13 [INFO]  Initialize licmgr.exe
    7/18/2008,16:13 [INFO]  Initialize licmgr.exe
    7/18/2008,16:13 [INFO]  Initialize preupd.exe
    7/18/2008,16:13 [INFO]  User GUID: 74d9552c12fd55e10f244d770ae54df4076e4576
    7/18/2008,16:13 [INFO]  Commandline: "C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\SETUP.EXE" 
    7/18/2008,16:13 [INFO]  selftest successful: C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\SETUP.EXE
    7/18/2008,16:13 [INFO]  selftest successful: C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\SETUP.dll
    7/18/2008,16:13 [INFO]  Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Premium |UpdateInProgress
    7/18/2008,16:13 [INFO]  avscan.exe closed.
    7/18/2008,16:13 [INFO]  Status of service AntiVirScheduler: running
    7/18/2008,16:13 [INFO]  Service AntiVirScheduler successfully stopped
    7/18/2008,16:13 [INFO]  Status of service AntiVirService: running
    7/18/2008,16:13 [INFO]  Service AntiVirService successfully stopped
    7/18/2008,16:13 [INFO]  Status of service antivirwebservice: stopped
    7/18/2008,16:13 [INFO]  Service antivirwebservice successfully stopped
    7/18/2008,16:13 [INFO]  Status of service AntiVirMailService: stopped
    7/18/2008,16:13 [INFO]  Service AntiVirMailService successfully stopped
    7/18/2008,16:13 [INFO]  Status of service AVEService: running
    7/18/2008,16:13 [INFO]  Service AVEService successfully stopped
    7/18/2008,16:13 [INFO]  Minifilter is possible
    7/18/2008,16:14 [INFO]  Due to a change of the module 'Driver' a restart is necessary.
    7/18/2008,16:14 [INFO]  avconfig.cpl closed.
    7/18/2008,16:14 [INFO]  Initialize regsvr32.exe
    7/18/2008,16:14 [INFO]  Removing Shell Extension successful
    7/18/2008,16:14 [INFO]  Initialize AVWSC.EXE
    7/18/2008,16:14 [INFO]  Status of service AntiVirScheduler: stopped
    7/18/2008,16:14 [INFO]  Initialize avscan.exe
    7/18/2008,16:14 [INFO]  Minifilter is installed
    7/18/2008,16:14 [INFO]  Minifilter is possible
    7/18/2008,16:14 [INFO]  Reading registry value successful: Software\Avira\AntiVir PersonalEdition Premium | FilterType
    7/18/2008,16:14 [INFO]  Status of service AntiVirService: stopped
    7/18/2008,16:14 [INFO]  Status of service AVEService: stopped
    7/18/2008,16:14 [INFO]  Status of service AntiVirMailService: stopped
    7/18/2008,16:14 [INFO]  Initialize avconfig.cpl
    7/18/2008,16:14 [INFO]  Initialize avgnt.exe
    7/18/2008,16:14 [INFO]  Status of service antivirwebservice: stopped
    7/18/2008,16:14 [INFO]  Initialize avcenter.exe
    7/18/2008,16:14 [INFO]  Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Premium |UpdateStarted
    7/18/2008,16:14 [INFO]  Shell Extension is not installed
    7/18/2008,16:14 [INFO]  Initialize licmgr.exe
    7/18/2008,16:14 [INFO]  Initialize licmgr.exe
    7/18/2008,16:14 [INFO]  Initialize preupd.exe
    7/18/2008,16:14 [INFO]  User GUID: 74d9552c12fd55e10f244d770ae54df4076e4576
    7/18/2008,16:14 [INFO]  Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Premium |FilterType
    7/18/2008,16:14 [INFO]  Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Premium |WebGuardInstalled
    7/18/2008,16:14 [INFO]  Initialize regedit.exe
    7/18/2008,16:14 [INFO]  Starting regedit.exe successful
    7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |Comments
    7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |DisplayIcon
    7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |DisplayName
    7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |HelpLink
    7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |Publisher
    7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |UninstallString
    7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |URLInfoAbout
    7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |URLUpdateInfo
    7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |ModifyPath
    7/18/2008,16:14 [INFO]  Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Premium |WSC_Registered
    7/18/2008,16:14 [INFO]  Starting AVWSC.EXE successful
    7/18/2008,16:14 [INFO]  Initialize regsvr32.exe
    7/18/2008,16:14 [INFO]  Installation of Shell Extension successful
    7/18/2008,16:14 [INFO]  Starting licmgr.exe successful
    7/18/2008,16:14 [INFO]  Service AntiVirScheduler successfully started
    7/18/2008,16:14 [INFO]  Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Premium |WebGuardInstalled
    7/18/2008,16:14 [INFO]  Starting avgnt.exe successful
    7/18/2008,16:14 [INFO]  Setup has successfully changed and updated your configuration. Before you can use the program, you should restart your computer.
    
    Do you want to restart your computer now?  -  Yes button was selected.
    7/18/2008,16:14 [INFO]  Setup was finished successfully
    7/18/2008,16:14 [INFO]  Setup ends with error code 0
     
  6. Niels

    Niels Registered Member

    Joined:
    Jul 29, 2005
    Posts:
    466
    Location:
    Belgium
    Hello AshG,

    I don't use Avira. But you can try this press the windows button together with r now type devmgmt.msc press enter. Go to the view menu select show hidden devices. Expand the section non plug and play compatible drivers. Now let somebody elso who also uses Avira check the entries and let them double click on them to see the status which you can find once you press on the driver tab. If the settings are different change them on your computer.
    You may not find an yellow exclamation mark or a red cross. That is how you can verify if the all components are there to run the modules were you have issues with.

    Niels
     
  7. Macstorm

    Macstorm Registered Member

    Joined:
    Mar 7, 2005
    Posts:
    2,531
    Location:
    Sneffels volcano
    Sorry to hear it didn't work for you.

    Have you tried a clean install of avira premium with its latest installer? From your setup logfile i see your installation was 'running in update mode'?

    Also, your setup logfile entries are way shorter than mine o_O

    Please consider Niels's advice above.
     
  8. AshG

    AshG Registered Member

    Joined:
    May 7, 2005
    Posts:
    206
    Location:
    East TN
    Yeah, from what I've heard there's some major stuff missing from my log file. I'll try to find a newer copy to download from somewhere; it seems as if the major updates have hit the autoupdate, but I can't find a similarly updated .exe to download.

    I've attached the non-PnP driver list, as requested.
     

    Attached Files:

  9. AshG

    AshG Registered Member

    Joined:
    May 7, 2005
    Posts:
    206
    Location:
    East TN
    Stephan, I think I may have vexed your team. I am extremely appreciative of Avira's forum helpers but I think we've hit a wall with this problem.

    As soon as I am done with my thesis work, I will back up my desktop, do a format/reinstall (I can't image with my Intel RAID for some reason... :mad: ), and make sure Avira is the first thing I put on the system. if that works, then I'll try to see what kept it from working the first time.
     
  10. De Hollander

    De Hollander Registered Member

    Joined:
    Sep 10, 2005
    Posts:
    718
    Location:
    Windmills and cows
    If Avira is installed on your system now, I think you are missing a couple of drivers:
    This is what's installed on a vista home premium 32 box

    avgio
    avipbb 1.00.2.31
    ssmdrv 7.01.1




     
    Last edited: Jul 22, 2008
Loading...
Thread Status:
Not open for further replies.