NOD + WinXP = system freeze

[Scytale]

I've got a brand spanking new install of XP (installed yestarday - version with the 1a service pack included) and when I install NOD, it causes a hard freeze before it's finished loading. Everything is unresponsive (including mouse, ctrl-alt-del). I had to boot to safe mode to uninstall it. Once NOD is unistalled, my OS operates normally. I get the following message in the log for NOD (when I use safe mode):

Error while scanning operating memory. Operating memory cannot be scanned. An Error occured while loading nod32m1.vxd file or during communications with the testing service.


The only errors I see in my System/APP logs that may correlate with this are:

1. The COM+ Event System detected a bad return code during its internal processing. HRESULT was 8007043C from line 44 of d:\nt\com\com1x\src\events\tier1\eventsystemobj.cpp. Please contact Microsoft Product Support Services to report this error.

2. Volume Shadow Copy Service error: Unexpected error calling routine CoCreateInstance. hr = 0x80040206.


Like I said, it's a new install. I'm running Outpost Firewall and an NForce utility at start. That's it.

WinXP (+1a)
Athalon 2400++
1 gb ram
NForce motherboard (Asus)

[Scytale]

I tried not loading Outpost Firewall or the NForce Mobo utility. It had no effect. I still get a hard freeze when windows starts.

I tried accessing the control panel in NOD in safe mode, but got the error (nod32kui: Error occurred during comminication with NOD32 kernel service.)

[Phant0m]

{QUOTE-> quoting: Scytale link=board=39;threadid=12850;start=0#msg82468 date=1061763095]
I tried not loading Outpost Firewall or the NForce Mobo utility. It had no effect. I still get a hard freeze when windows starts.

I tried accessing the control panel in NOD in safe mode, but got the error (nod32kui: Error occurred during comminication with NOD32 kernel service.)
<-QUOTE}

Hey Scytale

Even though Outpost Firewall been disabled from Windows Start-up Groups, it’s drivers still gets loaded at boot-up which could possibly be the culprit of your issues…

I’d suggest uninstalling Outpost and NOD32 and re-boot. Install NOD32 re-boot and see if that resolves anything…

[Scytale]

I found out what's causing it. I've got a little utility for my video card called MyIRC. It's a remote control driver for the MyHD HDTV tuner card (Macro Image - MDP 100). For some reason, as soon as I start this driver, the entire system freezes. It was originally in my startup folder...

http://www.mitinc.co.kr/mitinc/e_site/index.jsp

I didn't have any problem using this driver with NortonAV. Maybe it needs a special exclusion or something? At any rate, I'd appreciate ideas on how to make these work together. Not having anti virus software or not being able to use my tuner card is not a viable option for me. I need both!

[Phant0m]

Hey Scytale

Yea there should be an exclude Feature available in NOD32, I don’t use the Software so I can’t pen point the exact location…

[tosbsas]

That would be in the Control Center - klick on Icon in taskbar

Under Amon you can exclude the directory of the utility. To make sure check if there is any file in the drivers oder system32 folder and exclude it too

Ruben

[Scytale]

I tried the exclusion. It didn't work. Kinda makes sense because I didn't tell it to scan anything. As soon as I launch MyIRC, the system hard freezes. I don't have time to do anyting. I get the feeling that it's probably not fixable on my end. Hard freezes are pretty hard to come by on NT.

[Phant0m]

{QUOTE-> quoting: Scytale link=board=39;threadid=12850;start=0#msg82532 date=1061778577]
I tried the exclusion. It didn't work. Kinda makes sense because I didn't tell it to scan anything. As soon as I launch MyIRC, the system hard freezes. I don't have time to do anyting. I get the feeling that it's probably not fixable on my end. Hard freezes are pretty hard to come by on NT.
<-QUOTE}

Depends if on Installation you choose "I want to start resident protection automatically" ;)
http://www.wilderssecurity.info/images/Alternative/NOD32-v8.PNG

[tosbsas]

Did you exclude all the involved files?? And there si no Antitrojan like boclean running??

Ruben

[Scytale]

{QUOTE-> quoting: Phant0m`` link=board=39;threadid=12850;start=0#msg82541 date=1061783895]


Depends if on Installation you choose "I want to start resident protection automatically" ;)
http://www.wilderssecurity.info/images/Alternative/NOD32-v8.PNG

<-QUOTE}

Unfortunately, this has no effect. :(

[Scytale]

{QUOTE-> quoting: tosbsas link=board=39;threadid=12850;start=0#msg82607 date=1061814728]
Did you exclude all the involved files?? And there si no Antitrojan like boclean running??

Ruben
<-QUOTE}

Yep. All the files for the program are in one directory. But I think it doesn't rely on any others anyway. MYIRC is a small utility program which turns the COM port into an IR receiver for a remote control. It probably works at a pretty low level.

And I've got no antitrojans running.

[tosbsas]

could you try to disable imon and restart the utility again - my last idea (:--))

Thanks for your patience

Ruben

[Scytale]

{QUOTE-> quoting: tosbsas link=board=39;threadid=12850;start=0#msg82761 date=1061858889]
could you try to disable imon and restart the utility again - my last idea (:--))

Thanks for your patience

Ruben
<-QUOTE}

It worked!

Not only that, but I can restart IMON after I start the utility and both seem to work fine.

Thanks,
Scytale

[tosbsas]

Hey great - I am glad for you. There is people that are saying with amon set the right way you don't even need imon, cause amon would get any infected file.

Hey thats good - one more problem solved.

I don't know if you want to, but there is a feature to repair winsock within imon - you could try if it works with imon set after using that one, but I actually believe the problem is in the com port use.

Ruben

[Scytale]

Well, I tried the winsock repair thingy and it didn't seem to have any effect. I still have to stop IMON, start MyIRC and restart IMON to prevent freezing. But, it's not exactly a hassle to do - so it's all good for me. 8) AMON does seem to do a pretty damn good job on its own, but I like the extra security. I feel all warm and fuzzy inside when I see "This message was checked by NOD32 Antivirus System."

[tosbsas]

;D