auto protect fails to load -Symantec Coroprate AV 9.x

[Migration User]

I have a windows xp SP3 machine that on bootup before login displays auto protect failed to load. so far I hagve tried the following which google lead me to on the symantec support

 

"Symantec File System Auto Protect failed to load’  - Solution

Version :-     Symantec Antivirus corporate edition V9.0.0.338 Installed

Computers Affected:-     2 of the 6 WIN-Xp SP3 computers in the company were affected.

Problem appeared following week 1, November 2010 online virus definitions Live-update.

Non of the solutions in the Symantec tech forums worked.
After a bit of hacking, this is the solution that worked for us.

1. Uninstal the Symantec Antivirus product (SAV)
2. Re-boot.
3. Reinstal SAV, but chose to NOT go online to LIVE-UDATE the antivirus defintion files at this time.
4. Re-boot.
5. Open SAV and do menu choice  [FILE]-->[UNLOAD THE SERVICE]
6. Carry out a LIVE-UPDATE of the SAV to get the most up to date virus defintions, etc.
7. Re-boot
8. Open SAV from the Windows [START]-->[PROGRAMS] menu
9. Do SAV menu choice  [FILE]-->[LOAD THE SERVICE]
10. Reboot

SAV should now work fine, with File System Autoprotec enabled."

This solution fails since at step 5 I can't unload service since it is grayed out

"

Problem

When you start Symantec AntiVirus Corporate Edition 9.x, you see the message "Symantec AntiVirus Auto-Protect failed to load."
 

Solution

This problem has been reported to Symantec Technical Support. At this time, we do not know the exact cause or contributing factors to this problem. We will update this document when new information or a solution is available.

To fix this problem, try each of the steps in the sections below.

Remove components of retail Symantec antivirus programs
If Norton Internet Security, Norton SystemWorks, or a retail version of Norton AntiVirus was installed on the computer, read the document How to solve problems when installing Symantec AntiVirus Corporate Edition over a retail or consumer version.

Update Symevent
Install the latest Symevent drivers from the Symantec Web site, then restart the computer.
To install the latest Symevent drivers, read the document Updating the Symevent files.

Verify that SAVRT and SAVRTPEL function correctly
If updating Symevent does not fix the problem, there may be a problem with the Symantec device drivers. Check to ensure that the driver files are called correctly from the registry, that they are in the correct location on the hard drive, and that they are enabled.

To verify the SAVRT and SAVRTPEL registry and file locations

1. In the Windows registry, check HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\ to make sure that the following keys exist:
   
   SAVRT
   SAVRTPEL
   
   If the keys do not exist, reinstall Symantec AntiVirus.
2. In the SAVRT and SAVRTPEL keys, make sure that the ImagePath value has the correct data:
   
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SAVRT:
   "\??\C:\Program Files\Symantec Client Security\Symantec AntiVirus\savrt.sys"
   
   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SAVRTPEL:
   "\??\C:\Program Files\Symantec Client Security\Symantec AntiVirus\Savrtpel.sys"
   
   If the \??\ does not appear at the beginning of the ImagePath value, add it.
3. Check the paths listed in the ImagePath values to make sure that SAVRT.sys and SAVRTPEL.sys exist. If they are in a different location than the ImagePath values indicate, change the ImagePath values to match the actual location.

To verify that SAVRT and SAVRTPEL are enabled

1. In Windows 2000 /XP/2003, in the Control Panel, double-click System.
2. On the Hardware tab, click Device Manager.
3. On the View menu, click Show hidden devices.
4. Expand Non-Plug and Play Drivers.
5. Right-click SAVRT and click Properties.
6. Make sure that Device Usage is set to Use this device (enable).
7. Click OK.
8. Repeat steps 5-7 for SAVRTPEL.

"

There are no retail versions previously installed.

This fails as both SAVRT & SAVRTPEL are not listed as hidden devices under device manager

I decided to check in safe mode w/ networking

Under device manager hidden devices it lists SAVRTPEL but not SAVRT

any other ideas? I'm a bit lost as what else to try. Already unistalled and reinstalled several times.

Thx!

[Thomas K]

Symantec Antivirus 9.x is no longer supported. SAV 9.x reaced its End of Standard Support as of March 31, 2009. Virus definition updates for version 9.x were discontinued on April 1, 2009.

 

You need to upgrade to SEP 11/12 ASAP.

http://www.symantec.com/business/security_response/definitions/download/detail.jsp?gid=savce

 

SEP 11 - http://www.symantec.com/business/products/sysreq.jsp?pcid=pcat_security&pvid=endpt_prot_1

SEP 12 - http://www.symantec.com/business/endpoint-protection-small-business-edition