No AV installed for Vista (perfmon.exe bug!)

updates.JPG


Hey, Dwarf, I 'm up to 600 posts! I'm gunna catch up with you, LOL
 

My Computer

System One

  • Manufacturer/Model
    Airbot 2.0
    CPU
    Core i7 920 (D0) @ 4Ghz, 26c idle- 65c full load on air
    Motherboard
    Asus P6X58D Premium -Sata 6Gb/s - USB 3.0
    Memory
    12GB Corsair Dominator -CMD12GX3M6A1600C8
    Graphics Card(s)
    EVGA Nvidia GTX 480 -Fermi
    Sound Card
    ASUS Xonar D2X
    Monitor(s) Displays
    LG 24" Flatron W2453V-PF Full HD 1080p 2ms response time
    Screen Resolution
    1920x1080@60hz
    Hard Drives
    1 OCZ Vertex2 180GB SSD
    1 TB Samsung Spinpoint F1 7200RPM 32MB cache
    2 500GB WD Caviar Blacks 7200RPM 32MB cache (WD5001AALS)

    Pioneer DVD Burner DVR-S18M
    PSU
    Corsair HX1000W
    Case
    Cooler Master HAF 932
    Cooling
    Case Fans -3 230mm, 1 140mm/CPU - Tuniq Tower 120 Extreme
    Keyboard
    Logitech Wireless MK700
    Mouse
    Logitech Wireless MK700
    Internet Speed
    100 MBPS DL 30.17Mbps UL 0.98Mbps
    Other Info
    Windows 7
    Processor-7.7 RAM- 7.9 Graphics-7.9 Gaming Graphics- 7.9 HDD- 7.8

    W.E.I final score= 7.7

    Windows Vista=5.9
Hi hexaae,

I have just repeated the command and got exactly the same results as I had previously - no problems found. As regards trying in a virtual machine or trying another AV product to test your theory - No Thankyou. My system is stable, and I'm not going to jeopardise that for anybody.
 

My Computer

System One

  • Manufacturer/Model
    Dwarf Dwf/11/2012 r09/2013
    CPU
    Intel Core-i5-3570K 4-core @ 3.4GHz (Ivy Bridge) (OC 4.2GHz)
    Motherboard
    ASRock Z77 Extreme4-M
    Memory
    4 x 4GB DDR3-1600 Corsair Vengeance CMZ8GX3M2A1600C9B (16GB)
    Graphics Card(s)
    MSI GeForce GTX770 Gaming OC 2GB
    Sound Card
    Realtek High Definition on board solution (ALC 898)
    Monitor(s) Displays
    ViewSonic VA1912w Widescreen
    Screen Resolution
    1440x900
    Hard Drives
    OCZ Agility 3 120GB SATA III x2 (RAID 0)
    Samsung HD501LJ 500GB SATA II x2
    Hitachi HDS721010CLA332 1TB SATA II
    Iomega 1.5TB Ext USB 2.0
    WD 2.0TB Ext USB 3.0
    PSU
    XFX Pro Series 850W Semi-Modular
    Case
    Gigabyte IF233
    Cooling
    1 x 120mm Front Inlet 1 x 120mm Rear Exhaust
    Keyboard
    Microsoft Comfort Curve Keyboard 3000 (USB)
    Mouse
    Microsoft Comfort Mouse 3000 for Business (USB)
    Internet Speed
    NetGear DG834Gv3 ADSL Modem/Router (Ethernet) ~4.0 Mb/s (O2)
    Other Info
    Optical Drive: HL-DT-ST BD-RE BH10LS30 SATA Bluray
    Lexmark S305 Printer/Scanner/Copier (USB)
    WEI Score: 8.1/8.1/8.5/8.5/8.25
    Asus Eee PC 1011PX Netbook (Windows 7 x86 Starter)
Hi hexaae,

I have just repeated the command and got exactly the same results as I had previously - no problems found. As regards trying in a virtual machine or trying another AV product to test your theory - No Thankyou. My system is stable, and I'm not going to jeopardise that for anybody.
Yes I understand...
I wonder if something wrong is left in the registry on OEMs systems with preinstalled AV. I should re-test this at default conditions, after a default HP Recovery.
Do you know special registry keys about this? Where are these settings saved?

PS
Or maybe it's a foreing language bug? I see you all use Vista RTM, English, right?
 

My Computer

System One

  • Manufacturer/Model
    HP Pavilion dv5-1110el
    CPU
    Intel T5800 Core 2 Duo 2GHz
    Motherboard
    Quanta 3603
    Memory
    4GB
    Graphics Card(s)
    GeForce 9600M GT (Forceware 189.06)
    Screen Resolution
    1280x800
    Hard Drives
    Hitachi 2,5" 5400RPM
Just for testing I've installed MS OneCare (!!) and this time Perfmon /report
was correct!

20090107011117_OneCare_Perfmon.jpg


This means that some AVs out there don't get registered/installed correctly yet! :rolleyes:
 

My Computer

System One

  • Manufacturer/Model
    HP Pavilion dv5-1110el
    CPU
    Intel T5800 Core 2 Duo 2GHz
    Motherboard
    Quanta 3603
    Memory
    4GB
    Graphics Card(s)
    GeForce 9600M GT (Forceware 189.06)
    Screen Resolution
    1280x800
    Hard Drives
    Hitachi 2,5" 5400RPM
Thank you for your patience. This actually seems a bug of some AVs that forget to register properly some infos when installing, and not a Perfmon bug as I supposed (what a bad luck! I encountered only buggy AVs for my tests so I got wrong conclusions... :) )...
 

My Computer

System One

  • Manufacturer/Model
    HP Pavilion dv5-1110el
    CPU
    Intel T5800 Core 2 Duo 2GHz
    Motherboard
    Quanta 3603
    Memory
    4GB
    Graphics Card(s)
    GeForce 9600M GT (Forceware 189.06)
    Screen Resolution
    1280x800
    Hard Drives
    Hitachi 2,5" 5400RPM
Guys,

Its the Antivirus company`s neglecting to add their Product details, I would raise the issue with them ;)

I would say they have no idea how to add the information because it only takes a few seconds however...I created two tools that let you safely edit their SecurityCenter information or even add your own fake antivirus ;)


Heres a before Picture of Security Center:
attachment.php


Heres a before picture of Perfmon:
attachment.php



Now after a few tweaks...

Heres an after Picture of Security Center: :p
attachment.php


Heres an after picture of Perfmon: :p
attachment.php

(Its using different names and values from the pictures below because I used these values while I was testing the tool and I was too lazy to create another report :o, but you get the idea that you can set it all yourself ;))


I started out creating these two tools about two hours ago to find that bug you mentioned, but since you know its just their configuration you might find these useful for editing the AntiVirus information used by Security Center to make it appear on the perfmon report ;)

First You take the RED value from the AVInfo Tool:
attachment.php



And inset the RED value into the area I highlighted with yellow
attachment.php


Pasting the Red value into the Yellow box above will allow you to edit the anti-virus Security Center settings in realtime (I had a lot of fun doing that :p)

If the AVInfo tool was unable to find any RED values, the ConfigTool by default will auto generate a new GUID value on startup for you.. or you can paste the Red value from the InfoTool to set an existing Antivirus`s company`s Security Center configuration or randomly create as many of your own as you like ;)

Its completely safe, you can change/modify anything you like without causing your system damage and later if you want to delete the configuration you just copy the RED value from the InfoTool into the yellow box and click delete (You will see a Messagebox informing you when it was successfully deleted) ;)

Can you compare the results from the AvInfo tool from a few others as it should show why some Antivirus Company's are not listed during the Perfmon report and once we can identify what values they are missing, we can let them know about it and then I can make the AVConfigTool add them automatically too ;)

(Edit: Download links two posts down)

If you have any suggestions, comments or bugs then let me know but it should be fairly straightforward ;)

Steven
 

Attachments

  • PerfMonBefore.jpg
    PerfMonBefore.jpg
    57.7 KB · Views: 664
  • PerfMonAfter.jpg
    PerfMonAfter.jpg
    54.8 KB · Views: 603
  • SecurityCenterBefore.PNG
    SecurityCenterBefore.PNG
    110.4 KB · Views: 604
  • SecurityCenterAfter.PNG
    SecurityCenterAfter.PNG
    93.9 KB · Views: 619
  • SetInfoTool.PNG
    SetInfoTool.PNG
    14.1 KB · Views: 614
  • GetInfoTool.jpg
    GetInfoTool.jpg
    26.3 KB · Views: 587
Last edited:

My Computer

:cool: Wow!

Thank you for your precious in-depth examination. I've reported the missing feature on official Avira Antivir forum. I'm sure they'll fix this soon.
 

My Computer

System One

  • Manufacturer/Model
    HP Pavilion dv5-1110el
    CPU
    Intel T5800 Core 2 Duo 2GHz
    Motherboard
    Quanta 3603
    Memory
    4GB
    Graphics Card(s)
    GeForce 9600M GT (Forceware 189.06)
    Screen Resolution
    1280x800
    Hard Drives
    Hitachi 2,5" 5400RPM
:cool: Wow!

Thank you for your precious in-depth examination. I've reported the missing feature on official Avira Antivir forum. I'm sure they'll fix this soon.

If you have a forum link Ill post the source-code over their for them to use too, theres no documentation on these settings or how to set them and it might be why they have been so slow to implement it already ;)

Steven
 

My Computer

:cool: Wow!

Thank you for your precious in-depth examination. I've reported the missing feature on official Avira Antivir forum. I'm sure they'll fix this soon.

If you have a forum link Ill post the source-code over their for them to use too, theres no documentation on these settings or how to set them and it might be why they have been so slow to implement it already ;)

Steven
I reported this thing here: No AV installed for Vista (perfmon.exe) - AntiVir Personal für Windows - Avira Support Forum linking to your last "how-to" post ;)
We should do the same for Norton AV 2009...
 

My Computer

System One

  • Manufacturer/Model
    HP Pavilion dv5-1110el
    CPU
    Intel T5800 Core 2 Duo 2GHz
    Motherboard
    Quanta 3603
    Memory
    4GB
    Graphics Card(s)
    GeForce 9600M GT (Forceware 189.06)
    Screen Resolution
    1280x800
    Hard Drives
    Hitachi 2,5" 5400RPM
Can you take some screenshots of your current Antivir registration so I can see what settings they use?

As you asked via PM, here are the links to download the tools, I suggest using the InfoTool to find what values they are missing or setting incorrectly between the products then using the Config Tool to add the missing info or edit them ;)

All thats required is the GUID to either add/edit or delete the existing entries, everything else is optional.

If you want to Edit or Delete an existing Antivirus Product`s Security Center configuration you can use the InfoTool to find their GUID , just copy it to the Config Tool and click delete (you will see a notification if it was successfully deleted)

This should explain how to edit or delete an Existing Registration ;)
attachment.php


If you want to add a new Antivirus product to SecurityCenter the Configuration tool will generate a new GUID value on every startup (By default) allowing you to register as many new instances of Antivirus Products`s as you like with Security Center ;)
(I was able to add over 20 fake Antivirus products with SecurityCenter but it only tracks the first few)

Heres a Picture of SecurityCenter after editing the values or adding your own ;)
9276d1231316917-no-av-installed-vista-perfmon-exe-bug-securitycenterafter.png


Download Links are below.

If you have any suggestions, comments or bugs then let me know but it should be fairly straightforward changing any of the Values with SecurityCenter ;)

Steven
 

Attachments

  • Tool.jpg
    Tool.jpg
    38.5 KB · Views: 294
  • AVInfoTool.exe
    15 KB · Views: 102
  • SConfigTool.exe
    29 KB · Views: 92

My Computer

My Computer

System One

  • Manufacturer/Model
    HP Pavilion dv5-1110el
    CPU
    Intel T5800 Core 2 Duo 2GHz
    Motherboard
    Quanta 3603
    Memory
    4GB
    Graphics Card(s)
    GeForce 9600M GT (Forceware 189.06)
    Screen Resolution
    1280x800
    Hard Drives
    Hitachi 2,5" 5400RPM
Infotools for me reports: 0 instance(s)...
Then I've used your SConfigTool based on datas shown in this post: No AV installed for Vista (perfmon.exe) - AntiVir Personal für Windows - Avira Support Forum
SConfigTool though generates only 0 (false), -1 (true) values for productHasNotfiedUser... the picture shows 1 value instead.

Funny cheating anyway ;)


I havnt seen any antivirus company use the productHasNotfiedUser value, His screenshots of AntiVir doesnt show it either but it is setting the value correctly :confused:
 

My Computer

I havnt seen any antivirus company use the productHasNotfiedUser value, His screenshots of AntiVir doesnt show it either but it is setting the value correctly :confused:
Oops! You're right... his sshot shows productState=1 (?), not productHasNotfiedUser as I thought.
Very strange anyway. Can you install Antivir from www.free-av.com just for testing? Uninstalling it is quite simple and doesn't leave rubbish in the registry or HD...
 

My Computer

System One

  • Manufacturer/Model
    HP Pavilion dv5-1110el
    CPU
    Intel T5800 Core 2 Duo 2GHz
    Motherboard
    Quanta 3603
    Memory
    4GB
    Graphics Card(s)
    GeForce 9600M GT (Forceware 189.06)
    Screen Resolution
    1280x800
    Hard Drives
    Hitachi 2,5" 5400RPM

My Computer

System One

  • Manufacturer/Model
    HP Pavilion dv5-1110el
    CPU
    Intel T5800 Core 2 Duo 2GHz
    Motherboard
    Quanta 3603
    Memory
    4GB
    Graphics Card(s)
    GeForce 9600M GT (Forceware 189.06)
    Screen Resolution
    1280x800
    Hard Drives
    Hitachi 2,5" 5400RPM
I dunno, mine's all good.
 

My Computer

System One

  • Manufacturer/Model
    Airbot 2.0
    CPU
    Core i7 920 (D0) @ 4Ghz, 26c idle- 65c full load on air
    Motherboard
    Asus P6X58D Premium -Sata 6Gb/s - USB 3.0
    Memory
    12GB Corsair Dominator -CMD12GX3M6A1600C8
    Graphics Card(s)
    EVGA Nvidia GTX 480 -Fermi
    Sound Card
    ASUS Xonar D2X
    Monitor(s) Displays
    LG 24" Flatron W2453V-PF Full HD 1080p 2ms response time
    Screen Resolution
    1920x1080@60hz
    Hard Drives
    1 OCZ Vertex2 180GB SSD
    1 TB Samsung Spinpoint F1 7200RPM 32MB cache
    2 500GB WD Caviar Blacks 7200RPM 32MB cache (WD5001AALS)

    Pioneer DVD Burner DVR-S18M
    PSU
    Corsair HX1000W
    Case
    Cooler Master HAF 932
    Cooling
    Case Fans -3 230mm, 1 140mm/CPU - Tuniq Tower 120 Extreme
    Keyboard
    Logitech Wireless MK700
    Mouse
    Logitech Wireless MK700
    Internet Speed
    100 MBPS DL 30.17Mbps UL 0.98Mbps
    Other Info
    Windows 7
    Processor-7.7 RAM- 7.9 Graphics-7.9 Gaming Graphics- 7.9 HDD- 7.8

    W.E.I final score= 7.7

    Windows Vista=5.9
I've just installed Avast and Perfmon doesn't report an AV installed... :sarc:
OneCare did instead.


What did the AvInfo Tool report when perfmon didnt report Avast?


WSC AV Info Tool created by dmex
Version 1.0.0.0

Got 0 instance(s)

Do you want to Scan again? (y for Yes or press any key to exit)
 

My Computer

System One

  • Manufacturer/Model
    HP Pavilion dv5-1110el
    CPU
    Intel T5800 Core 2 Duo 2GHz
    Motherboard
    Quanta 3603
    Memory
    4GB
    Graphics Card(s)
    GeForce 9600M GT (Forceware 189.06)
    Screen Resolution
    1280x800
    Hard Drives
    Hitachi 2,5" 5400RPM
I've just installed Avast and Perfmon doesn't report an AV installed... :sarc:
OneCare did instead.


What did the AvInfo Tool report when perfmon didnt report Avast?


WSC AV Info Tool created by dmex
Version 1.0.0.0

Got 0 instance(s)

Do you want to Scan again? (y for Yes or press any key to exit)

Since it was unable to find any Instances it would explain why Perfmon was unable to find any Antivirus :confused:

Did Security Center report it as being installed?
 

My Computer

Yes of course. That's the problem...

20090108124925_Immagine.jpg


I now have installed my registered Antivir Premium as you can see...
 

My Computer

System One

  • Manufacturer/Model
    HP Pavilion dv5-1110el
    CPU
    Intel T5800 Core 2 Duo 2GHz
    Motherboard
    Quanta 3603
    Memory
    4GB
    Graphics Card(s)
    GeForce 9600M GT (Forceware 189.06)
    Screen Resolution
    1280x800
    Hard Drives
    Hitachi 2,5" 5400RPM
Back
Top