How can I set or change the start mode of the Real-Time Protection?

Once the Avira product is installed the startup of the Real-Time Protection cannot be changed anymore via the product settings.

Anyway, there are two other possibilities to change the start of Real-Time Protection after a successful installation of the product. You can either restart the Avira Configuration Wizard and reconfigure the start option of the Real-Time Protection or create a particular registry key.

Edit the registry at your own risk.

1. Setting the start mode of the Real-Time Protection during the product installation

During the installation of the Avira product the Configuration wizard offers the possibility to configure the startup mode of the Real-Time Protection.

  • Normal start
    Using the “Normal start“, the Real-Time Protection gets started in the normal, automatic mode (Recommended)

  • Secure start
    Selecting the „Secure start“, the Real-Time Protection is started first. The start of the other components will not be continued until the Real-Time Protection is loaded completely and functions. This increases the security level, but delays the system start of the PC

2. Change the start mode of the Real-Time Protection by restarting the Configuration wizard

To restart the Configuration wizard you need to first open the Command Prompt as an administrator. Therefore, go to Start → Command Prompt or type CMD in Start → Search programs and files and hit Enter. If you are not signed in as an administrator, you need to right-click on Command Prompt and select "Run as administrator" from the context menu.


To open the Avira Configuration wizard type the following command line in the box and hit Enter:
"C:\Program Files (x86)\Avira\AntiVir Desktop\avconfig.exe" /WIZARD
or in a 32-bit system:
"C:\Program Files\Avira\AntiVir Desktop\avconfig.exe" /WIZARD


The Avira Configuration wizard opens the Welcome dialog box. Click on Next throughout the configuration (4x) until you reach to the dialog box “Real-Time Protection start mode”. Change the start mode configuration of the Real-Time Protection.


Thereafter, continue with the Configuration wizard by clicking Next until the product configuration has been finished.

3. Change the start mode of the Real-Time Protection by changing the registry key

To change the start of the Real-Time Protection from “Normal Start” to “Secure Start”, you need to create manually a registry key.

Avira protects its own registry entries by default. To be able to configure entries in the registry you need to disable first the corresponding option in your Avira product.
Therefore, go to the option “Protect files and registry entries from manipulation” in your Avira product: Double click Avira Control Center → Extras → Configuration → enable Expert mode → General → Security and remove the check mark. Confirm the change by clicking Apply.


To open the Registry Editor type regedit.exe into Start/Search programs and files and hit Enter.

After the dialog box of the Registry Editor opens, go to the following path:
Click with the right mouse button into the right window of the dialog box and add a new string value with the name “Group”.


Name: Group
Type: Charstring (REG_SZ)
Value: System Reserved

To set the “Value data” double click the created string “Group” and type: System Reserved.


Once the key “Group” is available, the Real-Time Protection starts in "Secure start", else the "Normal start" is used (default and recommended).


Close the Registry Editor and restart your system.

Affected products

  • Avira Professional Security [Windows]
  • Avira Free Antivirus [Windows]
  • Avira Antivirus Premium 2013 [Windows]
  • Avira Internet Security [Windows]
  • Created : Tuesday, January 22, 2013
  • Last updated: Monday, April 14, 2014
  • Rate this article
Was this helpful?