AVG Protection Help

[clsickle1 1]

Can someone help me with configuration for the AVG Protection set up

 

I have put something in the Program location but i don't believe this is correct.

I have the Definition location ok but can not get this to detect that this is installed.

Can you help please

[ShawnSack 0]

Pretty sure you're missing a bracket in there.

[clsickle1 1]

Thanks for your help but this made no difference.

Has anyone had any luck with finding this configuration

[jgouverneur 0]

Probably the AP Process. I'm mostly sure it needs the name of the process, not the name of the executable itself. If you see it running on the computer check what the process is called in Task Manager and use that under AP Process.

[tlphipps 18]

Another tip. The process name is case sensitive. Make sure you look in task manager on the agent machine to match the name AND case of the process.

 

Sent from my SAMSUNG-SM-G850A using Tapatalk

[iam5000 0]

Not sure if this has been resolved for you, I just had successful detection for 32bit using this:

[Ross 0]

Got both AVG Protection for 32bit and 64bit working with these settings, much prefer the registry method myself.

 

AVG Protection 32bit

PL: {%-HKLM\SOFTWARE\AVG\AV:AvgDir-%}\avgrsx.exe

DL: {%-HKLM\SOFTWARE\AVG\AV:AvgAllUsersDir-%}\avi\incavi.avm

UC: "{%-HKLM\SOFTWARE\AVG\AV:AvgDir-%}\avgmfapx.exe"

ST: /Clean /Trash %p

AP: avgrsx*

DM: (.*)

OS: 32bit Windows

 

AVG Protection 64bit

PL: {%-HKLM\SOFTWARE\AVG\AV:AvgDir-%}\avgrsa.exe

DL: {%-HKLM\SOFTWARE\AVG\AV:AvgAllUsersDir-%}\avi\incavi.avm

UC: "{%-HKLM\SOFTWARE\AVG\AV:AvgDir-%}\avgmfapx.exe"

ST: /Clean /Trash %p

AP: avgrsa*

DM: (.*)

OS: 64bit Windows

[bcrowthers 0]

Is this still the fix for AVG Free? I have the latest version for 2017.

[jspittle 0]

I have 3 machines running AVG (Internet 2016 and 2017) and for the love nor money I cannot get CW to detect it using the standard templates already installed, or by using the examples above.

 

Both of the machine are 64bit but have 32bit installed, I can find the location of the Program but just not the Definition!

 

Any help would be appreciated!

[cgomar 0]

I have a customer that wants to let their AVG Business Security run out before changing to a better solution. But I can't seem to get the right settings in Virus Scan. My current attempt for setting is this:

AVG Business Security 32bit

PL: {%-HKLM\Software\AVG\Antivirus:AvgDir-%}AVGSvc.exe

DL: {%-HKLM\Software\AVG\Antivirus:AvgAllUsersDir-%}\avi\incavi.avm

UC: "{%-HKLM\Software\AVG\Antivirus:AvgDir-%}\avgupd.exe"

ST: /Clean /Trash %p

AP: AVGSvc*

DM: (.*)

OS: 32bit Windows

 

AVG Business Security 64bit

PL: {%-HKLM\Software\AVG\Antivirus:AvgDir-%}AVGSvc.exe

DL: {%-HKLM\Software\AVG\Antivirus:AvgAllUsersDir-%}\avi\incavi.avm

UC: "{%-HKLM\Software\AVG\Antivirus:AvgDir-%}\avgupd.exe"

ST: /Clean /Trash %p

AP: AVGSvc*

DM: (.*)

OS: 64bit Windows

Any help would be greatly appreciated. Automate support and Avast Support have been kind of useless. 

 

[gio.stefani 0]

Has anyone gotten this to work?  We have a customer that was on AVG 2013 File Server Edition and was working fine until I upgraded them to AVG Business Edition 2018.  Now all is broken (No AV detected).  Also, I'm not clear on the variables "AVGDir-% and AVGAllUsersDir-%" and what location they refer to.  Any help would be appreciated.  I did notice in the above example by cgomar that after the path "Software", you need "Wow6432node".  Example:

PL: {% -HKLM\Software\Wow6432Node\AVG\Antivirus:AvgDir-%}AVGSvc.exe

Edited October 9, 2018 by gio.stefani

[IHT_Michael 0]

1 hour ago, gio.stefani said:

Has anyone gotten this to work?  We have a customer that was on AVG 2013 File Server Edition and was working fine until I upgraded them to AVG Business Edition 2018.  Now all is broken (No AV detected).  Also, I'm not clear on the variables "AVGDir-% and AVGAllUsersDir-%" and what location they refer to.  Any help would be appreciated.  I did notice in the above example by cgomar that after the path "Software", you need "Wow6432node".  Example:

PL: {% -HKLM\Software\Wow6432Node\AVG\Antivirus:AvgDir-%}AVGSvc.exe

I actually did get the detection to work.  I don't know about pushing updates and stuff, but the detection was all I cared about.  See screenshots.

 

[cgomar 0]

On 10/9/2018 at 11:50 AM, IHT_Michael said:

I actually did get the detection to work.  I don't know about pushing updates and stuff, but the detection was all I cared about.  See screenshots.

 

Yep tired versions of this as well. still can't get it to detect.. I've almost given up 2 more months and I switch them to Webroot..  

[cgomar 0]

On 10/9/2018 at 10:36 AM, gio.stefani said:

Has anyone gotten this to work?  We have a customer that was on AVG 2013 File Server Edition and was working fine until I upgraded them to AVG Business Edition 2018.  Now all is broken (No AV detected).  Also, I'm not clear on the variables "AVGDir-% and AVGAllUsersDir-%" and what location they refer to.  Any help would be appreciated.  I did notice in the above example by cgomar that after the path "Software", you need "Wow6432node".  Example:

PL: {% -HKLM\Software\Wow6432Node\AVG\Antivirus:AvgDir-%}AVGSvc.exe

Good catch not sure how I missed that. Still not detecting.  

[cgomar 0]

On 10/23/2018 at 8:18 PM, cgomar said:

Yep tired versions of this as well. still can't get it to detect.. I've almost given up 2 more months and I switch them to Webroot..  

Never mind it's working now. 

[cgomar 0]

On 10/23/2018 at 8:19 PM, cgomar said:

Good catch not sure how I missed that. Still not detecting.  

Never mind it's working now. 

[timwiser 9]

I'm really struggling with getting a detection template for AVG Business Security.

This is my template so far:

 

Name:    AVG Business Security

Program:    %ProgramFiles%\AVG\Antivirus\AVGUI.exe

Definitions:    %ProgramFiles%\AVG\Antivirus\defs\aswdefs.ini

Update:    %ProgramFiles%\AVG\Antivirus\ashUpd.exe

AP process:    AVGSvc*

Date mask:    (.*)

OS Type:    Windows

 

I've tried the Registry approach, I've tried hardcoded paths, I've tried EVERYTHING.

The def is being sent to the local agent as I've checked the Registry.

 

Anyone know what else I can try??