Avira Knowledge Base - Problem Details

If one of the Avira modules remains inactive after installation on Windows XP or on Windows Vista, we recommend that you deactivate Windows Defender. You can check the Windows System Eventlog, to see if Windows Defender is blocking Avira modules. The Eventlog issues the following message, or a similar one:

Windows Defender Real-Time Protection agent has detected changes. Microsoft recommends you analyze the software that made these changes for potential risks. You can use information about how these programs operate to choose whether to allow them to run or remove them from your computer. Allow changes only if you trust the program or the software publisher. Windows Defender can't undo changes that you allow. Path found:
lsp:avsda.dll;file:C:\Windows\system32\avsda.dll

In Windows XP:
To see the Eventlog, go to Start - Run, type the command Eventvwr, select System in the Event Viewer and look for the lines with WindDefend in the Source column.

In Windows Vista:
To see the Eventlog, go to Start - Run, type the command Eventvwr, select Windows logs - System in the Event Viewer and look for the lines with Windows Defend in the Source column.

To deactivate Windows Defender:

1. Start - Programs (or All Programs) - Windows Defender.
2. Go to Extras - Options
3. Remove the check-marks for the options Activate on-access protection and Use Windows Defender.
4. Press Save to apply the changes.
5. Restart the computer

Then check AntiVir's status. If there still are inactive modules in the Overview, you have to repair your Avira program: Go to Start - Settings- Control Panel - Add or Remove Programs, click the Avira AntiVir icon, press Change and when the wizard starts, select Modify. Restart the computer after rapairing Avira AntiVir.

If there remain any inactive Avira Modules, please contact Avira Support.