New AV program is not shown in Security center.

Big Al J · External Since: Mar 15, 2007 Posts: 1

I just got a new machine with ultimate installed. I deleted the Mcaffee AV
program (included with machine) and installed AVAST!

Mcaffeei s no longer on the HD or running any processes, but Security center
still thinks that it is "ON." Security Center does acknowledge that AVAST is
installed and running. I have done several reboots but this is still
happening.

I'm wondering why Security Center won't update the virus program it is
using...Or how to show it what to do?

By the way, didn't have this problem in XP SP2 when I switched from Norton
to AntiVir...

Malke · External Since: Feb 23, 2006 Posts: 1218

Big Al J wrote:
> I just got a new machine with ultimate installed. I deleted the Mcaffee AV
> program (included with machine) and installed AVAST!
>
> Mcaffeei s no longer on the HD or running any processes, but Security center
> still thinks that it is "ON." Security Center does acknowledge that AVAST is
> installed and running. I have done several reboots but this is still
> happening.
>
> I'm wondering why Security Center won't update the virus program it is
> using...Or how to show it what to do?
>
> By the way, didn't have this problem in XP SP2 when I switched from Norton
> to AntiVir...

This trick for fixing that issue in XP apparently works in Vista, too.
In Vista you probably need to run elevated. There are two ways of doing
the same thing - the first way is using the gui and the second way is
from the command line. Your choice. Set a System Restore point first.

Method A

Start>Run>services.msc [enter]

Scroll down to Windows Management Instrumentation and double-click it.
Now click on the "Pause" button. Leave that window open and double-click
My Computer. Navigate to %systemroot%\Windows\System32\wbem (where
%systemroot% is the drive where XP is installed). Delete the Repository
folder and *only* the Repository folder. Now go back to the WMI service
window you left open and restart the service.

This will rebuild the Repository and hopefully straighten out the
incorrect entries for all your duplicates.

In order to see the Windows files, you may need to unhide them:

Make sure you are able to see all hidden files and extensions (View tab
in Folder Options).

a. Check "Display the contents of system folders".
b. Check "Show hidden files and folders".
c. Uncheck "Hide protected operating system files" and click "OK" to the
dialog box.

Method B from MVP Torgeir Bakken (more elegant)

Open a command window (Start/Run --> cmd.exe) and run the following
commands:

net stop winmgmt
cd /d %windir%\system32\wbem
ren repository repository.old
net start winmgmt

(or alternatively delete it using the command "rd /s repository" instead
of the ren command)

It may take a minute or so to complete while WMI rebuilds the database.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Rich · External Since: Mar 16, 2007 Posts: 4

Same issue here (took McAfee off once I realised this was the culprit for my
SLOOOOW internet browsing)

Big Al J · External Since: Mar 16, 2007 Posts: 1

Malke:

SWEET FIX!!!!!

It got a little scary typing in the command line, but I survived.

To finish the fix, I had to restart security center (maybe I didn't wait
long enough) then turn restart my AV prog (AVAST!)

Noe things look just as they should!

Al

"Malke" wrote:

> Big Al J wrote:
> > I just got a new machine with ultimate installed. I deleted the Mcaffee AV
> > program (included with machine) and installed AVAST!
> >
> > Mcaffeei s no longer on the HD or running any processes, but Security center
> > still thinks that it is "ON." Security Center does acknowledge that AVAST is
> > installed and running. I have done several reboots but this is still
> > happening.
> >
> > I'm wondering why Security Center won't update the virus program it is
> > using...Or how to show it what to do?
> >
> > By the way, didn't have this problem in XP SP2 when I switched from Norton
> > to AntiVir...
>
> This trick for fixing that issue in XP apparently works in Vista, too.
> In Vista you probably need to run elevated. There are two ways of doing
> the same thing - the first way is using the gui and the second way is
> from the command line. Your choice. Set a System Restore point first.
>
> Method A
>
> Start>Run>services.msc [enter]
>
> Scroll down to Windows Management Instrumentation and double-click it.
> Now click on the "Pause" button. Leave that window open and double-click
> My Computer. Navigate to %systemroot%\Windows\System32\wbem (where
> %systemroot% is the drive where XP is installed). Delete the Repository
> folder and *only* the Repository folder. Now go back to the WMI service
> window you left open and restart the service.
>
> This will rebuild the Repository and hopefully straighten out the
> incorrect entries for all your duplicates.
>
> In order to see the Windows files, you may need to unhide them:
>
> Make sure you are able to see all hidden files and extensions (View tab
> in Folder Options).
>
> a. Check "Display the contents of system folders".
> b. Check "Show hidden files and folders".
> c. Uncheck "Hide protected operating system files" and click "OK" to the
> dialog box.
>
> Method B from MVP Torgeir Bakken (more elegant)
>
> Open a command window (Start/Run --> cmd.exe) and run the following
> commands:
>
> net stop winmgmt
> cd /d %windir%\system32\wbem
> ren repository repository.old
> net start winmgmt
>
> (or alternatively delete it using the command "rd /s repository" instead
> of the ren command)
>
> It may take a minute or so to complete while WMI rebuilds the database.
>
>
> Malke
> --
> Elephant Boy Computers
> www.elephantboycomputers.com
> "Don't Panic!"
> MS-MVP Windows - Shell/User
>

Malke · External Since: Feb 23, 2006 Posts: 1218

Big Al J wrote:
> Malke:
>
> SWEET FIX!!!!!
>
> It got a little scary typing in the command line, but I survived.
>
> To finish the fix, I had to restart security center (maybe I didn't wait
> long enough) then turn restart my AV prog (AVAST!)
>
> Noe things look just as they should!

Excellent! Thanks for confirming that this works in Vista. I'm glad it
sorted things for you and thanks also for taking the time to let me know.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Rich · External Since: Mar 16, 2007 Posts: 4

I appear to have no "repository" folder (even after displaying all files)
and when I try the DOS command to stop the service I get a system error 5
(no authority)

Ah well... just a niggle that it says McAfee is running ( I know it's not as
my internet works now) Wink

Malke · External Since: Feb 23, 2006 Posts: 1218

Rich wrote:
> I appear to have no "repository" folder (even after displaying all
> files) and when I try the DOS command to stop the service I get a system
> error 5 (no authority)
>
> Ah well... just a niggle that it says McAfee is running ( I know it's
> not as my internet works now) Wink

>

You do have a repository folder. Make sure you enable viewing all hidden
files from the Folder Options applet in Control Panel. Also, you will
need to run elevated which is why you are getting that error message.

To run cmd elevated:

1. Click Start
2. Type: cmd
3. Right-click cmd when it appears under Programs
4. Click Run As Administrator

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User