WebShield is hosting inside itself a bunch of other protection modules, namely script shield - a script blocking code that is loaded into the browser.
That is a really interesting error, not sure why it does not turn off for you. Its underlining driver is aswstm.sys, it is shared with SecureDNS/Real-site components, but if these two are off/disabled (or with Avast Free where Real-site is not offered) the driver normally stops and the test: 'sc query aswstm' shows it as stopped.
Indeed, WebShield can be easily disabled/stopped and based on the original screenshot you have done it correctly.
