Avira Premium guard errors are driving me batty

I am trying (again) Avira Premium on my main system. I did some major scrubbing and hand-removed every possible remnant, file and registry, of any antivirus or antimalware software that has ever been installed. I am still running headfirst into some problems that others are experiencing, but that Avira's forums have not been able to tackle for anyone.

The other two computers I have trialed Avira on have been so problem-free that I am about to put down some coin for three licenses, but If it doesn't work on my desktop then it's back to the drawing board for all three systems.

Anyway, on to the show:

Webguard and Mailguard refuse to start under any circumstance. Windows Defender was disabled before, during, and after installation. No other antivirus or antimalware program was installed. In Services.msc, the error prompt tells me that Webguard started, then stopped unexpectedly. It says Mailguard won't even begin to start.

http://i345.photobucket.com/albums/p397/StudioBrass/screenshot.jpg

http://i345.photobucket.com/albums/p397/StudioBrass/processlist.jpg

http://i345.photobucket.com/albums/p397/StudioBrass/errormessage.jpg

Here is the AVG Guard log, for those of you who know how to interpret it:

Code:

7/18/2008,12:41:48 ---------------------------------------------------------
7/18/2008,12:41:53 Keyfile contains a valid license. The Avira AntiVir Premium will run as a fully functional version!
7/18/2008,12:41:53 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.6,VDF version: 7.0.5.23
7/18/2008,12:41:54 AntiVir Guard was enabled.
7/18/2008,12:41:54 Avira AntiVir Premium has been started successfully!
7/18/2008,12:41:54 [CONFIG] On-Access configuration used:
      - Files to scan:  scan files from local drives
      - Device mode:  scan files on open, scan files on close
      - Only scan files with one of the following extensions:  . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
      - Unpack runtime compressed files
      - Actions: ask the user
      - Heuristic: MACRO , WIN32 MEDIUM
      - Logfile report level 1
7/18/2008,12:43:02 Update process started!
7/18/2008,12:43:04 Current Engine Version: 8.1.1.11
7/18/2008,12:43:04 Current Pattern File: 7.0.5.138
7/18/2008,12:43:05 [CONFIG] On-Access configuration used:
      - Files to scan:  scan files from local drives
      - Device mode:  scan files on open, scan files on close
      - Only scan files with one of the following extensions:  . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
      - Unpack runtime compressed files
      - Actions: ask the user
      - Heuristic: MACRO , WIN32 MEDIUM
      - Logfile report level 1
7/18/2008,12:49:06 Avira AntiVir Premium service has been stopped!
7/18/2008,12:50:09 ---------------------------------------------------------
7/18/2008,12:50:11 Keyfile contains a valid license. The Avira AntiVir Premium will run as a fully functional version!
7/18/2008,12:50:11 AntiVir Guard version: 8.00.01.26,engine version 8.1.1.11,VDF version: 7.0.5.138
7/18/2008,12:50:12 AntiVir Guard was enabled.
7/18/2008,12:50:12 Avira AntiVir Premium has been started successfully!
7/18/2008,12:50:12 [CONFIG] On-Access configuration used:
      - Files to scan:  scan files from local drives
      - Device mode:  scan files on open, scan files on close
      - Only scan files with one of the following extensions:  . .386 .?HT* .ACM .ADE .ADP .ANI .APP .ASD .ASF .ASP .ASX .AWX .AX .BAS .BAT .BIN .BOO .CDF .CHM .CLASS .CMD .CNV .COM .CPL .CRT .CSH .DLL .DLO .DO? .DRV .EMF .EML .EXE* .FLT .FOT .HLP .HT* .INF .INI .INS .ISP .J2K .JAR .JFF .JFI .JFIF .JIF .JMH .JNG .JP2 .JPE .JPEG .JPG .JS* .JSE .LNK .LSP .MD? .MDB .MOD .MS? .NWS .OBJ .OCX .OLB .OSD .OV? .PCD .PDF .PDR .PGM .PHP .PIF .PKG .PL* .PNG .POT .PPS .PPT .PRG .RAR .REG .RPL .RTF .SBF .SCR .SCRIPT .SCT .SH .SHA .SHB .SHS .SHTM* .SIS .SPL .SWF .SYS .TLB .TMP .TSP .TTF .URL .VB? .VCS .VLM .VXD .VXO .WIZ .WLL .WMD .WMF .WMS .WMZ .WPC .WSC .WSF .WSH .WWK .XL? .XML .ZIP
      - Unpack runtime compressed files
      - Actions: ask the user
      - Heuristic: MACRO , WIN32 MEDIUM
      - Logfile report level 1

The Mailguard log...

Code:

7/18/2008,12:41:18  [INFO] Begin init.
7/18/2008,12:41:58  [ERROR] Avira AntiVir Premium  engine service is not running.
7/18/2008,12:41:58  [ERROR] Unable to initialize Avira AntiVir Premium  Engine.
7/18/2008,12:42:04  [INFO] The Avira AntiVir Premium Mail Service has been stopped.
7/18/2008,12:50:10  [INFO] Begin init.
7/18/2008,12:50:50  [ERROR] Avira AntiVir Premium  engine service is not running.
7/18/2008,12:50:50  [ERROR] Unable to initialize Avira AntiVir Premium  Engine.
7/18/2008,12:50:56  [INFO] The Avira AntiVir Premium Mail Service has been stopped.

And the Webguard log:

Code:

7/18/2008,12:40:48 [ERROR] Attaching Guard failed. Error code 2
7/18/2008,12:40:48 [ERROR] Initialization failed, step 2
7/18/2008,12:40:48 [INFO] The service was stopped.
7/18/2008,12:42:25 [ERROR] Initialization failed, step 2
7/18/2008,12:42:25 [INFO] The service was stopped.
7/18/2008,12:50:10 [ERROR] Initialization failed, step 2
7/18/2008,12:50:10 [INFO] The service was stopped.

I'm hoping I can get some help here; as I said, the other poor sots facing this problem got nowhere. We're all using Vista 64 Ultimate too, according to the threads. Something is up.

 

I will forward this info so we can hopefully reproduce the problem and fix it.

 

Stefan,

Thanks for your reply. One of the mods at the Avira forum dropped in to help and we may have found another piece of the puzzle. There is a log file that is supposed to exist, but doesn't. I cannot find the avesvc.log file anywhere in my computer. I have a folder full of other log files, just not this one.

Thanks for your help!

 

AshG,

Just in case, may I suggest you to try the jv16PT's RegistryCleaner feature? (30day trial without limitations, works with vista x64 systems). Please uninstall avira, run the RegCleaner and fix all errors found, then restart and reinstall avira.

As for the 'avesvc.log', on x32 it is located inside the 'C:\ProgramData\Avira\AntiVir PersonalEdition Premium\LOGFILES' directory by default.

 

Thanks for the suggestions, Macstorm. I prepped the system with jv16 before installing Avira; I even used its Finder service to locate any trace of Eset, F-Prot, and Vipre. For all intents and purposes, she was antivirus pure by the time I finished.

As for the log directory, that file doesn't exist in there. Lots of others do, just not that one. I have:
Of the logs present in the folder, there are:
avguard
AVSCAN -whole bunch of letters and numbers
mailgrd
setup
setup00
setup01
setup02
UPD-2008-07-18-12-42-02
webguard
but no avesvc

In case my install log may give some idea of what is going on...

Code:

Logfile of Avira AntiVir Premium - Setup
instant of time:  7/18/2008   16:13
Used locale: English (United States)
7/18/2008,16:13 [INFO]  Build 362   7/11/2008
7/18/2008,16:13 [INFO]  Windows Vista x64 Edition   -   Windows Vista x64 Edition (Service Pack 1)  [6.0.6001]
7/18/2008,16:13 [INFO]  UNICODE
7/18/2008,16:13 [INFO]  Setup is running in update mode.
7/18/2008,16:13 [INFO]  Path of application data: C:\Documents and Settings\All Users\Application Data\Avira\AntiVir PersonalEdition Premium\
7/18/2008,16:13 [INFO]  Source path: C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\
7/18/2008,16:13 [INFO]  Destination path: C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\
7/18/2008,16:13 [INFO]  Temp path: C:\Users\Ashley\AppData\Local\Temp\AVSETUP_4880f981\
7/18/2008,16:13 [INFO]  Desktop path: C:\Users\Public\Desktop\
7/18/2008,16:13 [INFO]  Path of program group: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\
7/18/2008,16:13 [INFO]  Version information:
7/18/2008,16:13 [INFO]  C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\SETUP.EXE:   8.0.0.31
7/18/2008,16:13 [INFO]  C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\SETUP.EXE:   8.0.0.31
7/18/2008,16:13 [INFO]  C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\antivir0.vdf:   6.40.0.0
7/18/2008,16:13 [INFO]  C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\antivir1.vdf:   7.0.5.1
7/18/2008,16:13 [INFO]  C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\antivir2.vdf:   7.0.5.119
7/18/2008,16:13 [INFO]  C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\antivir3.vdf:   7.0.5.138
7/18/2008,16:13 [INFO]  C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\:   0.0.0.0
7/18/2008,16:13 [INFO]  Initialize AVWSC.EXE
7/18/2008,16:13 [INFO]  Status of service AntiVirScheduler: running
7/18/2008,16:13 [INFO]  Initialize avscan.exe
7/18/2008,16:13 [INFO]  Minifilter is installed
7/18/2008,16:13 [INFO]  Minifilter is possible
7/18/2008,16:13 [INFO]  Status of service AntiVirService: running
7/18/2008,16:13 [INFO]  Status of service AVEService: running
7/18/2008,16:13 [INFO]  Status of service AntiVirMailService: stopped
7/18/2008,16:13 [INFO]  Initialize avconfig.cpl
7/18/2008,16:13 [INFO]  Initialize avgnt.exe
7/18/2008,16:13 [INFO]  Status of service antivirwebservice: stopped
7/18/2008,16:13 [INFO]  Initialize avcenter.exe
7/18/2008,16:13 [INFO]  Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Premium |UpdateStarted
7/18/2008,16:13 [INFO]  Shell Extension is installed
7/18/2008,16:13 [INFO]  Initialize licmgr.exe
7/18/2008,16:13 [INFO]  Initialize licmgr.exe
7/18/2008,16:13 [INFO]  Initialize preupd.exe
7/18/2008,16:13 [INFO]  User GUID: 74d9552c12fd55e10f244d770ae54df4076e4576
7/18/2008,16:13 [INFO]  Commandline: "C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\SETUP.EXE" 
7/18/2008,16:13 [INFO]  selftest successful: C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\SETUP.EXE
7/18/2008,16:13 [INFO]  selftest successful: C:\Program Files (x86)\Avira\AntiVir PersonalEdition Premium\SETUP.dll
7/18/2008,16:13 [INFO]  Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Premium |UpdateInProgress
7/18/2008,16:13 [INFO]  avscan.exe closed.
7/18/2008,16:13 [INFO]  Status of service AntiVirScheduler: running
7/18/2008,16:13 [INFO]  Service AntiVirScheduler successfully stopped
7/18/2008,16:13 [INFO]  Status of service AntiVirService: running
7/18/2008,16:13 [INFO]  Service AntiVirService successfully stopped
7/18/2008,16:13 [INFO]  Status of service antivirwebservice: stopped
7/18/2008,16:13 [INFO]  Service antivirwebservice successfully stopped
7/18/2008,16:13 [INFO]  Status of service AntiVirMailService: stopped
7/18/2008,16:13 [INFO]  Service AntiVirMailService successfully stopped
7/18/2008,16:13 [INFO]  Status of service AVEService: running
7/18/2008,16:13 [INFO]  Service AVEService successfully stopped
7/18/2008,16:13 [INFO]  Minifilter is possible
7/18/2008,16:14 [INFO]  Due to a change of the module 'Driver' a restart is necessary.
7/18/2008,16:14 [INFO]  avconfig.cpl closed.
7/18/2008,16:14 [INFO]  Initialize regsvr32.exe
7/18/2008,16:14 [INFO]  Removing Shell Extension successful
7/18/2008,16:14 [INFO]  Initialize AVWSC.EXE
7/18/2008,16:14 [INFO]  Status of service AntiVirScheduler: stopped
7/18/2008,16:14 [INFO]  Initialize avscan.exe
7/18/2008,16:14 [INFO]  Minifilter is installed
7/18/2008,16:14 [INFO]  Minifilter is possible
7/18/2008,16:14 [INFO]  Reading registry value successful: Software\Avira\AntiVir PersonalEdition Premium | FilterType
7/18/2008,16:14 [INFO]  Status of service AntiVirService: stopped
7/18/2008,16:14 [INFO]  Status of service AVEService: stopped
7/18/2008,16:14 [INFO]  Status of service AntiVirMailService: stopped
7/18/2008,16:14 [INFO]  Initialize avconfig.cpl
7/18/2008,16:14 [INFO]  Initialize avgnt.exe
7/18/2008,16:14 [INFO]  Status of service antivirwebservice: stopped
7/18/2008,16:14 [INFO]  Initialize avcenter.exe
7/18/2008,16:14 [INFO]  Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Premium |UpdateStarted
7/18/2008,16:14 [INFO]  Shell Extension is not installed
7/18/2008,16:14 [INFO]  Initialize licmgr.exe
7/18/2008,16:14 [INFO]  Initialize licmgr.exe
7/18/2008,16:14 [INFO]  Initialize preupd.exe
7/18/2008,16:14 [INFO]  User GUID: 74d9552c12fd55e10f244d770ae54df4076e4576
7/18/2008,16:14 [INFO]  Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Premium |FilterType
7/18/2008,16:14 [INFO]  Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Premium |WebGuardInstalled
7/18/2008,16:14 [INFO]  Initialize regedit.exe
7/18/2008,16:14 [INFO]  Starting regedit.exe successful
7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |Comments
7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |DisplayIcon
7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |DisplayName
7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |HelpLink
7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |Publisher
7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |UninstallString
7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |URLInfoAbout
7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |URLUpdateInfo
7/18/2008,16:14 [INFO]  Registry entry created successfully: SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\AntiVir PersonalEdition Premium |ModifyPath
7/18/2008,16:14 [INFO]  Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Premium |WSC_Registered
7/18/2008,16:14 [INFO]  Starting AVWSC.EXE successful
7/18/2008,16:14 [INFO]  Initialize regsvr32.exe
7/18/2008,16:14 [INFO]  Installation of Shell Extension successful
7/18/2008,16:14 [INFO]  Starting licmgr.exe successful
7/18/2008,16:14 [INFO]  Service AntiVirScheduler successfully started
7/18/2008,16:14 [INFO]  Registry entry created successfully: Software\Avira\AntiVir PersonalEdition Premium |WebGuardInstalled
7/18/2008,16:14 [INFO]  Starting avgnt.exe successful
7/18/2008,16:14 [INFO]  Setup has successfully changed and updated your configuration. Before you can use the program, you should restart your computer.

Do you want to restart your computer now?  -  Yes button was selected.
7/18/2008,16:14 [INFO]  Setup was finished successfully
7/18/2008,16:14 [INFO]  Setup ends with error code 0

 

Hello AshG,

I don't use Avira. But you can try this press the windows button together with r now type devmgmt.msc press enter. Go to the view menu select show hidden devices. Expand the section non plug and play compatible drivers. Now let somebody elso who also uses Avira check the entries and let them double click on them to see the status which you can find once you press on the driver tab. If the settings are different change them on your computer.
You may not find an yellow exclamation mark or a red cross. That is how you can verify if the all components are there to run the modules were you have issues with.

Niels

 

Sorry to hear it didn't work for you.

Have you tried a clean install of avira premium with its latest installer? From your setup logfile i see your installation was 'running in update mode'?

Also, your setup logfile entries are way shorter than mine

Please consider Niels's advice above.

 

Yeah, from what I've heard there's some major stuff missing from my log file. I'll try to find a newer copy to download from somewhere; it seems as if the major updates have hit the autoupdate, but I can't find a similarly updated .exe to download.

I've attached the non-PnP driver list, as requested.

 

Stephan, I think I may have vexed your team. I am extremely appreciative of Avira's forum helpers but I think we've hit a wall with this problem.

As soon as I am done with my thesis work, I will back up my desktop, do a format/reinstall (I can't image with my Intel RAID for some reason... ), and make sure Avira is the first thing I put on the system. if that works, then I'll try to see what kept it from working the first time.

 

If Avira is installed on your system now, I think you are missing a couple of drivers:
This is what's installed on a vista home premium 32 box

avgio
avipbb 1.00.2.31
ssmdrv 7.01.1