Vista - Vista *thinks* multiple antivirus programs are installed. Why?

Hello,

In my Windows Security Center I see the following messages:

"Multiple antivirus programs report that they are turned on and up to date"
"Windows Defender and Kaspersky Anti-Virus both report that they are turned
on"

However, I only have one installed now (AVG). I did have Kaspersky
installed, but I uninstalled it. Windows Security still thinks it is
installed. I even went through the registry and got rid of all Kaspersky
entries, and deleted all directories.

How do I "refresh" Windows Security Center to make it know only AVG is
installed?

Thanks.

Did you reboot after you deleted Kapersky?

--
Jerry

One thing money can't buy,
The Wagging Tail of a Dog.

"Refresher" <Refresher@discussions.microsoft.com> wrote in message
news:566B1B25-DA4D-4016-84DC-5A661E472D0A@microsoft.com...
> Hello,
>
> In my Windows Security Center I see the following messages:
>
> "Multiple antivirus programs report that they are turned on and up to
> date"
> "Windows Defender and Kaspersky Anti-Virus both report that they are
> turned
> on"
>
> However, I only have one installed now (AVG). I did have Kaspersky
> installed, but I uninstalled it. Windows Security still thinks it is
> installed. I even went through the registry and got rid of all Kaspersky
> entries, and deleted all directories.
>
> How do I "refresh" Windows Security Center to make it know only AVG is
> installed?
>
> Thanks.

JerryM wrote:
> Did you reboot after you deleted Kapersky?
>
That's not the issue. There is a known issue with Vista's Security
Center keeping any antivirus or spyware programs hanging around long
after they are removed from the system. Cleaning out the registry with
a fine toothed comb has no effect. I hope to see this issue address
with an update to Vista in the near future.

Although I no longer have AVG or Spybot on my Vista machine, Security
Center refuses to believe they have been zapped off the system. sigh.

Dave

You could try this:

Right-click Command Prompt (in Start Menu\Programs\Accessories) and choose
Run as
Administrator. Type (or Copy and Paste) the following command:

winmgmt /verifyrepository

If the system returns "WMI repository is not consistent", type this command:

winmgmt /salvagerepository

The first time you run this it will fail. (It will issue stop commands to
the services causing it to fail, saying, "A stop control has been sent to a
service that other running services are dependent on"). It might take a
couple minutes for the services to shut down. Run the last command again.
You actually may have to run it 3 times before it finally runs and completes
on its own.

"David" <david@invalid.com> wrote in message
news:_vGdnZfNA87CbjLbnZ2dnUVZ_h2pnZ2d@comcast.com...
> JerryM wrote:
>> Did you reboot after you deleted Kapersky?
>>
> That's not the issue. There is a known issue with Vista's Security Center
> keeping any antivirus or spyware programs hanging around long after they
> are removed from the system. Cleaning out the registry with a fine
> toothed comb has no effect. I hope to see this issue address with an
> update to Vista in the near future.
>
> Although I no longer have AVG or Spybot on my Vista machine, Security
> Center refuses to believe they have been zapped off the system. sigh.
>
> Dave

Thanks for the reply.

When I ran winmgmt/verifyrepository, I got

WMI repository is consistent

"dean-dean" wrote:

> You could try this:
>
> Right-click Command Prompt (in Start Menu\Programs\Accessories) and choose
> Run as
> Administrator. Type (or Copy and Paste) the following command:
>
> winmgmt /verifyrepository
>
> If the system returns "WMI repository is not consistent", type this command:
>
> winmgmt /salvagerepository
>
> The first time you run this it will fail. (It will issue stop commands to
> the services causing it to fail, saying, "A stop control has been sent to a
> service that other running services are dependent on"). It might take a
> couple minutes for the services to shut down. Run the last command again.
> You actually may have to run it 3 times before it finally runs and completes
> on its own.
>
> "David" <david@invalid.com> wrote in message
> news:_vGdnZfNA87CbjLbnZ2dnUVZ_h2pnZ2d@comcast.com...
> > JerryM wrote:
> >> Did you reboot after you deleted Kapersky?
> >>
> > That's not the issue. There is a known issue with Vista's Security Center
> > keeping any antivirus or spyware programs hanging around long after they
> > are removed from the system. Cleaning out the registry with a fine
> > toothed comb has no effect. I hope to see this issue address with an
> > update to Vista in the near future.
> >
> > Although I no longer have AVG or Spybot on my Vista machine, Security
> > Center refuses to believe they have been zapped off the system. sigh.
> >
> > Dave
>
>

See
http://forums.microsoft.com/WindowsO...25272&SiteID=2
for several methods of repairing this problem. I prefer this one -

Open an elevated command prompt and run the following commands:

net stop winmgmt
cd /d %windir%\system32\wbem
ren repository repository.old
(or delete it using the command "rd /s repository" instead of the
ren command)
net start winmgmt

It may take a minute or so to complete while WMI rebuilds the database.

--

"Refresher" <Refresher@discussions.microsoft.com> wrote in message
news:566B1B25-DA4D-4016-84DC-5A661E472D0A@microsoft.com...
> Hello,
>
> In my Windows Security Center I see the following messages:
>
> "Multiple antivirus programs report that they are turned on and up to
> date"
> "Windows Defender and Kaspersky Anti-Virus both report that they are
> turned
> on"
>
> However, I only have one installed now (AVG). I did have Kaspersky
> installed, but I uninstalled it. Windows Security still thinks it is
> installed. I even went through the registry and got rid of all Kaspersky
> entries, and deleted all directories.
>
> How do I "refresh" Windows Security Center to make it know only AVG is
> installed?
>
> Thanks.

Well, you could try the sledgehammer approach:

Right-click Command Prompt and Run as Administrator. Type (or Copy and
Paste) the following commands, pressing Enter after each one:

net stop winmgmt
cd %windir%\system32\wbem
ren repository repository.old
net start winmgmt

This will rebuild the Repository.

Make sure the following Services are set to Automatic (the default), in
Computer Management:

Base Filtering Engine
Windows Firewall
Remote Procedure Call (RPC)
DCOM Server Process Launcher

In Windows Update, make sure KB935807 is installed.

"Refresher" <Refresher@discussions.microsoft.com> wrote in message
news:6F84DAB6-8B3D-4B46-8EBD-A1C8F13EB6F5@microsoft.com...
> Thanks for the reply.
>
> When I ran winmgmt/verifyrepository, I got
>
> WMI repository is consistent
>
> "dean-dean" wrote:
>
>> You could try this:
>>
>> Right-click Command Prompt (in Start Menu\Programs\Accessories) and
>> choose
>> Run as
>> Administrator. Type (or Copy and Paste) the following command:
>>
>> winmgmt /verifyrepository
>>
>> If the system returns "WMI repository is not consistent", type this
>> command:
>>
>> winmgmt /salvagerepository
>>
>> The first time you run this it will fail. (It will issue stop commands
>> to
>> the services causing it to fail, saying, "A stop control has been sent to
>> a
>> service that other running services are dependent on"). It might take a
>> couple minutes for the services to shut down. Run the last command
>> again.
>> You actually may have to run it 3 times before it finally runs and
>> completes
>> on its own.
>>
>> "David" <david@invalid.com> wrote in message
>> news:_vGdnZfNA87CbjLbnZ2dnUVZ_h2pnZ2d@comcast.com...
>> > JerryM wrote:
>> >> Did you reboot after you deleted Kapersky?
>> >>
>> > That's not the issue. There is a known issue with Vista's Security
>> > Center
>> > keeping any antivirus or spyware programs hanging around long after
>> > they
>> > are removed from the system. Cleaning out the registry with a fine
>> > toothed comb has no effect. I hope to see this issue address with an
>> > update to Vista in the near future.
>> >
>> > Although I no longer have AVG or Spybot on my Vista machine, Security
>> > Center refuses to believe they have been zapped off the system. sigh.
>> >
>> > Dave
>>
>>

dean-dean wrote:
> Well, you could try the sledgehammer approach:
>
> Right-click Command Prompt and Run as Administrator. Type (or Copy and
> Paste) the following commands, pressing Enter after each one:
>
> net stop winmgmt
> cd %windir%\system32\wbem
> ren repository repository.old
> net start winmgmt
>
> This will rebuild the Repository.
>
> Make sure the following Services are set to Automatic (the default), in
> Computer Management:
>
> Base Filtering Engine
> Windows Firewall
> Remote Procedure Call (RPC)
> DCOM Server Process Launcher
>
> In Windows Update, make sure KB935807 is installed.
>
> "Refresher" <Refresher@discussions.microsoft.com> wrote in message
> news:6F84DAB6-8B3D-4B46-8EBD-A1C8F13EB6F5@microsoft.com...
>> Thanks for the reply.
>>
>> When I ran winmgmt/verifyrepository, I got
>>
>> WMI repository is consistent
>>
>> "dean-dean" wrote:
>>
>>> You could try this:
>>>
>>> Right-click Command Prompt (in Start Menu\Programs\Accessories) and
>>> choose
>>> Run as
>>> Administrator. Type (or Copy and Paste) the following command:
>>>
>>> winmgmt /verifyrepository
>>>
>>> If the system returns "WMI repository is not consistent", type this
>>> command:
>>>
>>> winmgmt /salvagerepository
>>>
>>> The first time you run this it will fail. (It will issue stop commands
>>> to
>>> the services causing it to fail, saying, "A stop control has been
>>> sent to
>>> a
>>> service that other running services are dependent on"). It might
>>> take a
>>> couple minutes for the services to shut down. Run the last command
>>> again.
>>> You actually may have to run it 3 times before it finally runs and
>>> completes
>>> on its own.
>>>
>>> "David" <david@invalid.com> wrote in message
>>> news:_vGdnZfNA87CbjLbnZ2dnUVZ_h2pnZ2d@comcast.com...
>>> > JerryM wrote:
>>> >> Did you reboot after you deleted Kapersky?
>>> >>
>>> > That's not the issue. There is a known issue with Vista's Security
>>> > Center
>>> > keeping any antivirus or spyware programs hanging around long after
>>> > they
>>> > are removed from the system. Cleaning out the registry with a fine
>>> > toothed comb has no effect. I hope to see this issue address with an
>>> > update to Vista in the near future.
>>> >
>>> > Although I no longer have AVG or Spybot on my Vista machine, Security
>>> > Center refuses to believe they have been zapped off the system.
>>> sigh.
>>> >
>>> > Dave
>>>
>>>
>
as far as i can see, doing that will leave the security center with the
idea that no antivirus/anti spyware software is installed. seems that's
throwing out the baby with the bathwater. I certainly wouldnt want to
spend the 45 minutes it takes to reinstall NIS2007. I've installed
NIS on 2 diff pc's with times running right around 45-50 min for the
entire process including it pulling all the updates off the 'net, using
a high speed connection. That's pain I don't want to repeat.

Dave

Hi David. Just to clarify, deleting the Repository folder will not affect
your installed Anti-Virus programs in any way. The Repository folder is
where Security Center finds the data it shows in its Control Panel, and it
may be finding stored data that is false or out of date. If Windows
Management sees the data as "consistent", then it will continue to show the
wrong information in Security Center. Forcing Windows to rebuild its
Repository folder may be a way to correct the information shown in Security
Center. If your Anti-Virus program has registered itself, in the registry,
that it is a program that Security Center should reckon, then hopefully the
new Repository data will reflect that, when it rescans your computer for its
(rebuilt) Repository data .


"David" <david@invalid.com> wrote in message
news:g9GdnUoFhqOQJy3bnZ2dnUVZ_o2vnZ2d@comcast.com...
> dean-dean wrote:
>> Well, you could try the sledgehammer approach:
>>
>> Right-click Command Prompt and Run as Administrator. Type (or Copy and
>> Paste) the following commands, pressing Enter after each one:
>>
>> net stop winmgmt
>> cd %windir%\system32\wbem
>> ren repository repository.old
>> net start winmgmt
>>
>> This will rebuild the Repository.
>>
>> Make sure the following Services are set to Automatic (the default), in
>> Computer Management:
>>
>> Base Filtering Engine
>> Windows Firewall
>> Remote Procedure Call (RPC)
>> DCOM Server Process Launcher
>>
>> In Windows Update, make sure KB935807 is installed.
>>
>> "Refresher" <Refresher@discussions.microsoft.com> wrote in message
>> news:6F84DAB6-8B3D-4B46-8EBD-A1C8F13EB6F5@microsoft.com...
>>> Thanks for the reply.
>>>
>>> When I ran winmgmt/verifyrepository, I got
>>>
>>> WMI repository is consistent
>>>
>>> "dean-dean" wrote:
>>>
>>>> You could try this:
>>>>
>>>> Right-click Command Prompt (in Start Menu\Programs\Accessories) and
>>>> choose
>>>> Run as
>>>> Administrator. Type (or Copy and Paste) the following command:
>>>>
>>>> winmgmt /verifyrepository
>>>>
>>>> If the system returns "WMI repository is not consistent", type this
>>>> command:
>>>>
>>>> winmgmt /salvagerepository
>>>>
>>>> The first time you run this it will fail. (It will issue stop commands
>>>> to
>>>> the services causing it to fail, saying, "A stop control has been sent
>>>> to
>>>> a
>>>> service that other running services are dependent on"). It might take
>>>> a
>>>> couple minutes for the services to shut down. Run the last command
>>>> again.
>>>> You actually may have to run it 3 times before it finally runs and
>>>> completes
>>>> on its own.
>>>>
>>>> "David" <david@invalid.com> wrote in message
>>>> news:_vGdnZfNA87CbjLbnZ2dnUVZ_h2pnZ2d@comcast.com...
>>>> > JerryM wrote:
>>>> >> Did you reboot after you deleted Kapersky?
>>>> >>
>>>> > That's not the issue. There is a known issue with Vista's Security
>>>> > Center
>>>> > keeping any antivirus or spyware programs hanging around long after
>>>> > they
>>>> > are removed from the system. Cleaning out the registry with a fine
>>>> > toothed comb has no effect. I hope to see this issue address with an
>>>> > update to Vista in the near future.
>>>> >
>>>> > Although I no longer have AVG or Spybot on my Vista machine, Security
>>>> > Center refuses to believe they have been zapped off the system.
>>>> sigh.
>>>> >
>>>> > Dave
>>>>
>>>>
>>
> as far as i can see, doing that will leave the security center with the
> idea that no antivirus/anti spyware software is installed. seems that's
> throwing out the baby with the bathwater. I certainly wouldnt want to
> spend the 45 minutes it takes to reinstall NIS2007. I've installed NIS
> on 2 diff pc's with times running right around 45-50 min for the entire
> process including it pulling all the updates off the 'net, using a high
> speed connection. That's pain I don't want to repeat.
>
> Dave

dean-dean wrote:
> Hi David. Just to clarify, deleting the Repository folder will not
> affect
> your installed Anti-Virus programs in any way. The Repository folder is
> where Security Center finds the data it shows in its Control Panel,
> and it
> may be finding stored data that is false or out of date. If Windows
> Management sees the data as "consistent", then it will continue to
> show the
> wrong information in Security Center. Forcing Windows to rebuild its
> Repository folder may be a way to correct the information shown in
> Security
> Center. If your Anti-Virus program has registered itself, in the
> registry, that it is a program that Security Center should reckon,
> then hopefully the new Repository data will reflect that, when it
> rescans your computer for its (rebuilt) Repository data .
>
>
> "David" <david@invalid.com> wrote in message
> news:g9GdnUoFhqOQJy3bnZ2dnUVZ_o2vnZ2d@comcast.com...
>> dean-dean wrote:
>>> Well, you could try the sledgehammer approach:
>>>
>>> Right-click Command Prompt and Run as Administrator. Type (or Copy and
>>> Paste) the following commands, pressing Enter after each one:
>>>
>>> net stop winmgmt
>>> cd %windir%\system32\wbem
>>> ren repository repository.old
>>> net start winmgmt
>>>
>>> This will rebuild the Repository.
>>>
>>> Make sure the following Services are set to Automatic (the default), in
>>> Computer Management:
>>>
>>> Base Filtering Engine
>>> Windows Firewall
>>> Remote Procedure Call (RPC)
>>> DCOM Server Process Launcher
>>>
>>> In Windows Update, make sure KB935807 is installed.
>>>
>>> "Refresher" <Refresher@discussions.microsoft.com> wrote in message
>>> news:6F84DAB6-8B3D-4B46-8EBD-A1C8F13EB6F5@microsoft.com...
>>>> Thanks for the reply.
>>>>
>>>> When I ran winmgmt/verifyrepository, I got
>>>>
>>>> WMI repository is consistent
>>>>
>>>> "dean-dean" wrote:
>>>>
>>>>> You could try this:
>>>>>
>>>>> Right-click Command Prompt (in Start Menu\Programs\Accessories) and
>>>>> choose
>>>>> Run as
>>>>> Administrator. Type (or Copy and Paste) the following command:
>>>>>
>>>>> winmgmt /verifyrepository
>>>>>
>>>>> If the system returns "WMI repository is not consistent", type this
>>>>> command:
>>>>>
>>>>> winmgmt /salvagerepository
>>>>>
>>>>> The first time you run this it will fail. (It will issue stop
>>>>> commands
>>>>> to
>>>>> the services causing it to fail, saying, "A stop control has been
>>>>> sent
>>>>> to
>>>>> a
>>>>> service that other running services are dependent on"). It might
>>>>> take
>>>>> a
>>>>> couple minutes for the services to shut down. Run the last command
>>>>> again.
>>>>> You actually may have to run it 3 times before it finally runs and
>>>>> completes
>>>>> on its own.
>>>>>
>>>>> "David" <david@invalid.com> wrote in message
>>>>> news:_vGdnZfNA87CbjLbnZ2dnUVZ_h2pnZ2d@comcast.com...
>>>>> > JerryM wrote:
>>>>> >> Did you reboot after you deleted Kapersky?
>>>>> >>
>>>>> > That's not the issue. There is a known issue with Vista's Security
>>>>> > Center
>>>>> > keeping any antivirus or spyware programs hanging around long after
>>>>> > they
>>>>> > are removed from the system. Cleaning out the registry with a fine
>>>>> > toothed comb has no effect. I hope to see this issue address
>>>>> with an
>>>>> > update to Vista in the near future.
>>>>> >
>>>>> > Although I no longer have AVG or Spybot on my Vista machine,
>>>>> Security
>>>>> > Center refuses to believe they have been zapped off the system.
>>>>> sigh.
>>>>> >
>>>>> > Dave
>>>>>
>>>>>
>>>
>> as far as i can see, doing that will leave the security center with the
>> idea that no antivirus/anti spyware software is installed. seems that's
>> throwing out the baby with the bathwater. I certainly wouldnt want to
>> spend the 45 minutes it takes to reinstall NIS2007. I've
>> installed NIS
>> on 2 diff pc's with times running right around 45-50 min for the entire
>> process including it pulling all the updates off the 'net, using a high
>> speed connection. That's pain I don't want to repeat.
>>
>> Dave
>
any idea how long that process should take? I rebooted and left vista
running for about 10 minutes or so and the security center showed
nothing installed. I ended up copying repository.old back to
repository. Now the security center is all in "the green" except for
the UAC.

Dave