XP Security Center can't detect AntiVirus (WMI Problem?)

[BigAlUK]

I've had a problem with XP Security Center not detecting CA EzAntiVirus 7. It used to do so on this machine, and still does on my other XP MCE machine. Interestingly, the events log contains the event:

Source: Security Center. Type: Error. EventID: 1802.
"The Windows Security Center Service was unable to establish event queries with WMI to monitor third party AntiVirus and Firewall."

This error is recorded upon every restart cycle. It is the only error recorded in the log.

WMI query errors by security center? Has anyone else seen this one?

 

[BigAlUK]

Ooops - I got the version of EzAntiVirus wrong - I upgraded it ages back to 8.4, not that that will make any difference.

 

[linney]

Microsoft Windows Security Center Antivirus Partners include eTrust EZ Antivirus from Computer Associates, so you shouldn't see any problems in this regards.

Right-click, my computer, property, advanced, environment variables. Check that the path %SystemRoot%\System32;%SystemRoot%;%SystemRoot%\System32\WBEM and any anti virus software listed there, is correct.

http://www.google.com/search?q=The+...rty+AntiVirus+and+Firewall&rls=com.microsoft:

http://groups.google.com/groups?um=...to monitor third party AntiVirus and Firewall

Have you tried the usuall steps of uninstalling and re-installing your software in case it's just plain old corruption at work?

 

[BigAlUK]

Yes - of course, reinstalling CA's software was the first thing I tried (I should've mentioned that).

But well done Linney - you've done it again! Something had nobbled my path, replacing it with a single entry (to Borland's vBroker). I copied the windows-related paths from my MCE PC to the XP PC and it all works perfectly now. In fact this is the first time I've had a completely error-free event log in a year! Time to do a backup!

By the way - I noticed something peculiar on my MCE machine: The Security Center antivirus heading doesn't have the "Recommendations" button quoted by Microsoft's help, whereas my XP SP2 machine does. Is this normal? All the same, the MCE machine appears to be fine w.r.t. antivirus detection. Just curious as to why there is a difference in the GUI between MCE and XP.

Thanks very much again for spot-on help!

 

[linney]

I think the Recommendations only show if there is no anti virus detected. I don't see the word "Recommendations" in the SP2 Security Center I am looking at.

Have you thrown a few reboots into the equation?

One way to check your anti virus software is to give it a bit of a test. You could check yourself by using the Eicar test virus

The Anti-Virus or Anti-Malware test file

http://www.eicar.org/anti_virus_test_file.htm