Event viewer - diagnostics - performance

Using Windows 7 RC. Event viewer shows warning on both shutdown and boot of delays. Traced to Avast (4.8 home). When all Avast services are disabled errors stop. I realize that starting to work on changes to full W7 compatibility could not be started until RC out.
Posting this FYI/

Not that we don’t trust your word, but without any information no one can even attempt to check it out.

Please post the relevant event viewer entries.

I don’t use W7 so I can’t be of any practical help as I couldn’t check for event viewer entries, but there are many avast users with W7 RC and this is the first such topic relating to this.

Any other security program being used side-by-side with avast? Firewall?

The errors are in Event Viewer, Operations and Service Logs, Microsoft, Windows, Diagonistics - Performance, Operational.
Error 100 (Boot Performance Monitor), and error 200 (Shutdown Performance Monitor) occur after every boot and either reboot or shutdown.
The Windows firewall is running along with Avast version 4.8 home edition. No other security programs are running.
Apparently Avast is slowing both boot and shutdown enough to trigger the log.
As stated earlier, the errors stop when avast services are disabled, and begin again when they ae enabled.
I do not expect help with this, but posted for your information as you make tweaks for W7 compatibility.

I can confirm cdo5’s findings.
On the Windows 7 system that now is testing Microsoft Security Essentials,
the delay is no longer evident since I totally uninstalled avast!

So is your Event viewer tracking MSE activities, Bob. Just out of interest.

I don’t have Windows 7, so I don’t know what is the equivalent log viewer to Event viewer → Antivirus that I have in my XP Admin Tools. Is their an Event viewer for MSE activities in Windows 7.

If it’s there, I haven’t found it yet. Sorry :slight_smile:

I found this in System event logs for Event 19 and 2000:

Installation Successful: Windows successfully installed the following update: 
Definition Update for Microsoft Security Essentials - KB972696 (Definition 1.61.601.0)

Microsoft Antimalware signature version has been updated.
	Current Signature Version: 1.61.601.0
	Previous Signature Version: 1.61.580.0
	Signature Type: AntiSpyware
	Update Type: Delta
	User: NT AUTHORITY\SYSTEM
	Current Engine Version: 1.1.4803.0
	Previous Engine Version: 1.1.4803.0

This is with Event Log Explorer™:
http://www.eventlogxp.com

I’m still running MSE alongside avast in my XP pro dedicated-Microsoft laptop.

In Windows Event Viewer, I am only getting events for one antivirus logged and that is avast.
MSE monitor is doing its job though in providing okay info but I thought my system might also have an off-MSE viewer that is logging antivirus activities other than avast. I’ll keep looking. I’ve also got WinPatrol on board so I will look for possibilities there.

Because Event Viewer is only logging avast, I thought perhaps MSE more of a web shield that your standard resident antivirus but it detected ad-ware and removed from the hard drive rather than alerting at gateway. Thats standard antivirus mode.

file:
C:\Documents and Settings\mkis\Local Settings\Temporary Internet Files\Content.IE5\NT0LJ4N0\mcpsetup[1].exe
file:C:\IBM\message center.exe
webfile:C:\IBM\message center.exe|http://download.lenovo.com/ibmdl/pub/pc/pccbbs/mobiles/mcpsetup.exe

Perhaps MSE has already picked up that avast is there, so doesn’t need to go there. just a thought. avast has already picked up a trojan that slipped through when I okayed the IBM Access (underlying vulnerability now fixed) to go through when it signaled an attempt to link up with the old network. Never to again after that attempt. As I said now fixed.

I keep tracking MSE but project limited to XP systems.

Sorry I should have posted a full readout of the MSE detection and removal that I mentioned the post above.

Here is the screenshot. I have edited the image so the whole message reads in the dialog box.

Get more information online links through to this page –
http://www.microsoft.com/security/portal/Entry.aspx?name=Adware%3AWin32%2FLenovoMCP&threatid=142655