Can't figure out what AntiVirus Software is running

[rasETL]

I am trying to install SP3 of XP, but get an "Access Denied" box. I believe it is due to Antvirus software because Windows Security Center tells me Antivirus Protection is ON, but I cannot find it.
I had Avira on the PC, but uninstalled/removed it. I checked System Information and Program files, and searched for the word antivirus, but nothing came up that indicates software is on my machine.

Any ideas?

 

[G0AOZ]

Carefully check out and identify all running Processes in Task Manager.

Also go look in Computer Management, Services, and check through everything there.

Look in MSCONFIG Startup tab, and again identify everything that's ticked as Enabled.

ROGER - G0AOZ.

 

[linney]

In your Windows folders will be the Service Pack logs which may contain information that might be helpful.
Locate the Windows XP SP3 Setup log files. The Setup program logs information about the Windows XP SP3 installation to the following log files: • Setupapi.log • Svcpack.log.

Microsoft Support is free for ServicePack issues.

Microsoft Windows XP Service Pack 3 (All Languages)

http://support.microsoft.com/oas/default.aspx?ln=en-us&prid=11273&gprid=522131

Remember the basics like disabling (temporarily) security programs like Anti Virus and Defender, running as Administrator, (Elevated via right-click) if you have a setup file to click on, turning off (temporarily) UAC, disabling startup programs (temporarily) via msconfig, etc.

Installing Service Packs have always required a clean system to guarantee success, it is at this time that old forgotten tweaks and installed security programs come back to haunt you. Slipstreaming the ServicePack is often a solution. A Format of the partition, a clean install, is one sure way of achieving a successful update when every other means fails.

Perhaps even a Bios update should be checked for, plus setting the Bios to Safe Defaults might help?

 

[tlcscousin]

http://www.avira.com/en/support/faq/details.html?id=135

A how to manually unistall avira which seems like it did not totally uninstall when you used add remove programs.

 

[linney]

My reference to UAC was Vista related, you can ignore that part.

 

[LilBob]

As tlcscousin mentioned, it sounds as if avira did not completely uninstall. You may want to use Revo Uninstaller in the future. It works much better than M$ Add/Remove & is a free download at:

http://www.revouninstaller.com/revo_uninstaller_free_download.html

Bob

 

[BadBigBen]

You could also post a HiJackThis Log for us to peruse, that way we could tell you where the problem may lie...

side benefit is that we also are then able to tell you what type of spyware may be installed on your system...



Ben

"If it works don't fix it! If it doesn't use a sledgehammer..."

 

[rasETL]

All

I am the Administrator on the PC, and have never had problems loading anything before.

I looked at the running tasks and ended all that I knew did not need to be running.

The logs linney brought up show the install failed when trying to update registry information...

1147.829: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
1147.829: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
1147.829: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x2
1147.829: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
1147.829: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
1147.829: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
1147.829: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
1147.829: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
1147.829: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
1147.829: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
1147.829: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
1147.829: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x0
1147.829: PruneCatalogsFromHotfixes:RegQueryValueEx Failed: 0x2
1147.829: Num Ticks for Copying files : 562532
1149.782: DoRegistryUpdates:UpdSpInstallFromInfSection Failed for ProductInstall.GlobalRegistryChanges.Install error: 0x5
1149.782: INF_REGISTRY Failed
1149.782: DoInstallationoRegistryUpdates failed
1167.719: Unregistration of sprecovr successful
1168.110: Access is denied.
1212.094: Message displayed to the user: Access is denied.
1212.094: User Input: OK
1212.094: Service Pack 3 installation did not complete.

Select 'OK' to undo the changes that have been made.
1212.875: Message displayed to the user: Service Pack 3 installation did not complete.

Select 'OK' to undo the changes that have been made.
1212.875: User Input: OK
1212.891: Starting process: C:\WINDOWS\$NtServicePackUninstall$\spuninst\spuninst.exe /~ -u -z
1901.938: Software Update Rollback has completed with return code 0xbc2. This rollback requires a reboot.
1901.938: Service Pack 3 installation did not complete.

I also checked and removed all Avira software, so nothing could have been running.

I also used Microsofts reg clean to fix any registry issues.

A search of the Registry via regedit found nothing with the word Avira.

Again, spybot was shutdown, but even so it asks me if a registry setting change should be allowed when running.

I know of no other security software on the machine that would try to manage the registry.

 

[tlcscousin]

http://support.microsoft.com/default.aspx?scid=kb;en-us;873148&Product=windowsxpsp2

Although this says SP2 the fixes should work for SP3. It points to registry key permissions causing the issue.

 

[linney]

Sounds like you are running Tea Timer from Spybot, I always disable that option and just leave the SD Helper running.

Uninstall Spybot and re-install after SP3, minus TeaTimer.