PDA

View Full Version : Still Problems with AV-Services getting killed by apt method #5


Storm
December 2nd, 2003, 02:42 PM
Hi there!
(Hi Pilli, this time the correct forum ;) )

Okay... I'm still having trouble with PG not protecting my AV-Services
(AVKService.exe and AVKWCtl.exe/GDATA Antivirenkit 2004)

I tried the things Pilli mentioned here:
After adding AVK-Stuff, I closed and restarted PG...
And I rebooted... and tried in different combinations...

But no chance... Method #5 (Debug Active Process) still kills the AV Services... PG logs the access but seems to do nothing to stop it!
:-\
Logfile:

[20:30:44] [P] - d:\dcs\apt\apt.exe [432] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on d:\antivirenkit 2004\avkwctl.exe [676]
[20:30:54] [P] - d:\dcs\apt\apt.exe [1608] tried to gain WRITE,TERMINATE,SET INFO,SUSPEND access on d:\antivirenkit 2004\avkservice.exe [660]


Hope you have some more ideas ???
Storm

Pilli
December 2nd, 2003, 03:39 PM
Storm, At one time when we were beta testing we had a similar problem but after doing the fixes you tried and leaving pg alone for quite few minutes then trying again it worked, not sure if it is a timing thing or not. Having said that I know Jason will look very carefully before replying as he does like to nail the nits :)
Just one more thing, I assume you do have both General Protection option enabled?

Storm
December 2nd, 2003, 03:58 PM
Yes... both general options are enabled
(see attached Screenshot)

Storm

Pilli
December 2nd, 2003, 04:04 PM
Anyway one of the things that Jason and DCS are very aware of is the amount of undocumented call within MS, so there still may be some calls that are misiing, also the way that different apps use thes calls.
I am sure Jason will reply tomorrow.

Storm
December 2nd, 2003, 04:31 PM
Yeah, I'm sure the guys will figure it out! ;D

Thanks anyway, Pilli!

Greets

Storm

Pilli
December 2nd, 2003, 04:38 PM
OK Storm, Sorry I could do no more.

Jason_DiamondCS
December 2nd, 2003, 11:01 PM
This *may* be fixed in the next version. Ask the beta testers in a few hours. :)

-Jason-

Pilli
December 3rd, 2003, 07:33 AM
I disabled all PG protection, closed PG & uninstalled PG prior to installing the beta

The new beta appears to be more stable & so far I have had no problems.

XP Pro, Both General options enabled but no CHM
KAV - Using APT K1 - K7 cannot be killed
SMC.exe - K1 - K7 cannot be killed

Server 2003, Both General options enabled & CHM on Outpost V2 only

NOD32kui.exe - K7 cannot be killed
NOD32krn.exe - K7 cannot be killed
Outpost.exe - K7 cannot be killed

Will continue with more testing ... :)