v4 IDS killing internet connection

[silverfox55]

Or the Register.

I have no idea why this was released out of Beta let alone RC, apart from an exhibition / trade fair which is just an excuse for free beer and food.

I will wait for several weeks of good reports before I install V4

[theseus47]

Well to be fair, 1045 did fix the internet connection problem that I was having while using a wired line, so at least I can connect to the internet for more than a few minutes at a time now. I suppose not getting access to google is better than not getting access at all?

Maybe 1046 will allow access to google but mysteriously deny access to wilders, so we wouldn't even have a forum to complain to! :p

Besides, I'm sure Google is used to having its services blocked now and then, inadvertently or otherwise (http://www.nytimes.com/2008/03/17/business/media/17youtube.html?ei=5088&en=374f53563ab937a4&ex=1363406400&partner=rssnyt&emc=rss&pagewanted=print) :D'

Although I suppose if you aggregate all the complaints and send enough of them to Google (or better yet, release them to the media and phrase it in terms of censorship or singling out Google instead of just a bug), then Google might take notice if you publicize it loudly enough, and Google would certainly be able to put more pressure on eset than random customers on forums :p Google wields a bigger stick!

[Jenee]

-{ Quote: "Well to be fair, 1045 did fix the internet connection problem that I was having while using a wired line, so at least I can connect to the internet for more than a few minutes at a time now. I suppose not getting access to google is better than not getting access at all?

Maybe 1046 will allow access to google but mysteriously deny access to wilders, so we wouldn't even have a forum to complain to! :p

Besides, I'm sure Google is used to having its services blocked now and then, inadvertently or otherwise (http://www.nytimes.com/2008/03/17/business/media/17youtube.html?ei=5088&en=374f53563ab937a4&ex=1363406400&partner=rssnyt&emc=rss&pagewanted=print) :D'

Although I suppose if you aggregate all the complaints and send enough of them to Google (or better yet, release them to the media and phrase it in terms of censorship or singling out Google instead of just a bug), then Google might take notice if you publicize it loudly enough, and Google would certainly be able to put more pressure on eset than random customers on forums :p Google wields a bigger stick!" }-

I have have never had issues with any ESS version and Google. I can't imagine why it would be blocked in your system.

[evilharp]

Wow, I guess I am not alone with problems with ESS 4.0.417.

I opened a thread a few days ago (before the forum became inaccessible). Here are the bugs I've noticed (all web related):

1) Show Network Connections display goes blank. Does not show anything. I found that a full reinstall (while uninstalling based on KB Solutions ID: SOLN2116) clears this up temporarily. After a few hours of browsing, the Network Connections display drops out.

2) The Firewall/AV blocks Google, G-Mail, CNN, BBC and a few others. At first I thought this was due to Confickter causing chaos on the web, but it was limited to my PC. My Netbook (running Komodo IS) had no problem accessing anything. Dropped back to ESS 3.0.672 and everything works...

I checked the logs, and it listed 1000's of attacks (all from Google, CNN, BBC, etc's IP addresses). Is ESS 4 not interpreting traffic correctly?

3) ESS 4.0.417 does not disable Windows Firewall on install. Really? The freebie garbage disables the Windows firewall, why can't ESS do it?

My OS - Vista 64 (Ult) SP1
Internet - Dialup (yes, really... I lived in a rural area)
Network - A loopback adapter (required for some moronic problems with Securom and Starforce equipped games. They use your IP address as a unique identifier instead of a MAC address)

I'm staying with ESS 3 until this is cleared up..

[Riony]

Now ESS is blocking windows live messenger 9. This is insane :o ! I can't login when the Firewall is activated but as soon as I turn it off, everything goes back to normal.

Msn Error code: 80048820

I have checked the firewall register and there are several DNS attacks using UDP from the ISP server to my computer (since right now, I'm using a dial-up connection)

The last build added a lot of bugs, everything was working perfectly before. Where can I download the build that was launched before 4.0.417 :doubt: ?

Edit: Reading this topic http://www.wilderssecurity.com/showthread.php?t=238224, I deactivated that option and WLM is working :what:. Now I will try google and other sites and I will let you know

[drowell]

Guess I'm only chiming in, but having pretty much the same problems, using 4.0.417 under Vista 32 bit; will uninstall, reinstall v. 3 and follow lead of those in this forum;

thanks to the community for the advice . . .

[SBMongoos]

Would love to pull ESS v4 for now and reinstall v3 but v3 caused my previous machine and brand new build to reboot.

I couldn't get help between Eset and a reseller of theirs that I'm a member of to figure out what was going on with v3 so I had to use NOD32. ESS v3 has been great on the laptops here and v4 does not cause my desktop to reboot.

Just lost all ethernet connection again a moment ago (noticed ESS update not too long ago) and I had to reboot PC to get back online.

[xxJackxx]

Ok, this is really starting to get irritating. v4 seems to work ok on my 64 bit desktop machine, but on my 32 bit laptop (both Vista) today I open my browser and cannot connect. Can't access my email either. Turn off the firewall and everything works. I don't think anything has been fixed with the newest build. It worked for me for a short time, and then the problems start again. Currently running on a wireless connection, I don't know if that makes a difference. This seriously needs to be fixed. If I can't find a workaround by the end of the day it's back to v3. Again.

[Marcos]

-{ Quote: "Ok, this is really starting to get irritating. v4 seems to work ok on my 64 bit desktop machine, but on my 32 bit laptop (both Vista) today I open my browser and cannot connect. Can't access my email either. Turn off the firewall and everything works. I don't think anything has been fixed with the newest build. It worked for me for a short time, and then the problems start again. Currently running on a wireless connection, I don't know if that makes a difference. This seriously needs to be fixed. If I can't find a workaround by the end of the day it's back to v3. Again." }-

Please enable logging blocked connections, reproduce the problem and then check the firewall log for details. We'll appreaciate if you post an excerpt from the log with relevant records about blocked connections here.

[SBMongoos]

-{ Quote: "Please enable logging blocked connections, reproduce the problem and then check the firewall log for details. We'll appreaciate if you post an excerpt from the log with relevant records about blocked connections here." }-

I did this just the other day. However, when I go to look at the log it keeps "loading log files" every few seconds so I cannot look at the log and ESS always comes to the top of any windows I have open when it refreshes (which is very frequently - measured in seconds).

[Marcos]

-{ Quote: "I did this just the other day. However, when I go to look at the log it keeps "loading log files" every few seconds so I cannot look at the log and ESS always comes to the top of any windows I have open when it refreshes (which is very frequently - measured in seconds)." }-

After you've replicated the issue, disable logging blocked connections so that you can work with the firewall log.

[SBMongoos]

-{ Quote: "Please enable logging blocked connections, reproduce the problem and then check the firewall log for details. We'll appreaciate if you post an excerpt from the log with relevant records about blocked connections here." }-

Marcos: the log has a lot of info. Not sure what to grab to copy/paste here in the forum. I saved it all to .txt file but every time I try to upload the file I get a message from FF say connection to server was reset and the file never gets uploaded. The file is 8.5mb so I'm guessing the size is the cause of this issue.

[xxJackxx]

-{ Quote: "Please enable logging blocked connections, reproduce the problem and then check the firewall log for details. We'll appreaciate if you post an excerpt from the log with relevant records about blocked connections here." }-

Ok, I enabled the firewall and logging and attempted to access a website. Here is the xml from the log:

<RECORD>
<COLUMN NAME="Time">
<DATE>4/7/2009</DATE>
<TIME>11:22:30 AM</TIME>
</COLUMN>
<COLUMN NAME="Event">No usable rule found</COLUMN>
<COLUMN NAME="Source">192.168.2.22</COLUMN>
<COLUMN NAME="Target">224.0.0.251</COLUMN>
<COLUMN NAME="Protocol">IGMP</COLUMN>
<COLUMN NAME="Rule/worm name"></COLUMN>
<COLUMN NAME="Application">System</COLUMN>
<COLUMN NAME="User"></COLUMN>
</RECORD>

I don't know if this is helpful but for what I did this is all it logged. I can try to use it longer if that is more helpful.

[Marcos]

-{ Quote: "Ok, I enabled the firewall and logging and attempted to access a website. Here is the xml from the log:
" }-

Do you use the firewall in automatic mode? Do you have IGMP protocol enabled in the IDS section of the firewall setup? Does switching the firewall to learning or interactive mode for the time necessary to create the desired rules make a difference?

[SBMongoos]

-{ Quote: "Do you use the firewall in automatic mode? Do you have IGMP protocol enabled in the IDS section of the firewall setup? Does switching the firewall to learning or interactive mode for the time necessary to create the desired rules make a difference?" }-

Marcus: I hope you don't mind my jumping in on this also. I forgot to switch to interactive, which is my preference, when updating to recent releases. This I think will help. I set this to interactive yesterday morning. I am seeing some reports in the log about IGMP. My log file is huge and it hasn't been enabled that long. I'm including some snippets below.

4/7/2009 9:03:28 AM Communication denied by rule 0.0.0.0:1031 192.168.0.1:53 UDP Deny communication for mDNSResponder.exe C:\Program Files\Bonjour\mDNSResponder.exe NT AUTHORITY\SYSTEM
4/7/2009 9:03:23 AM Communication denied by rule 0.0.0.0:1031 192.168.0.1:53 UDP Deny communication for mDNSResponder.exe C:\Program Files\Bonjour\mDNSResponder.exe NT AUTHORITY\SYSTEM
4/7/2009 9:03:18 AM Communication denied by rule 0.0.0.0:1031 192.168.0.1:53 UDP Deny communication for mDNSResponder.exe C:\Program Files\Bonjour\mDNSResponder.exe NT AUTHORITY\SYSTEM
4/7/2009 9:03:14 AM No usable rule found 192.168.0.100 239.255.255.250 IGMP
4/7/2009 9:03:13 AM Communication denied by rule 0.0.0.0:1031 192.168.0.1:53 UDP Deny communication for mDNSResponder.exe C:\Program Files\Bonjour\mDNSResponder.exe NT AUTHORITY\SYSTEM
4/7/2009 9:03:12 AM No usable rule found 192.168.0.100 224.0.0.251 IGMP
4/7/2009 9:03:03 AM Communication denied by rule 0.0.0.0:1031 192.168.0.1:53 UDP Deny communication for mDNSResponder.exe C:\Program Files\Bonjour\mDNSResponder.exe NT AUTHORITY\SYSTEM
4/7/2009 9:02:58 AM Communication denied by rule 0.0.0.0:1031 192.168.0.1:53 UDP Deny communication for mDNSResponder.exe C:\Program Files\Bonjour\mDNSResponder.exe NT AUTHORITY\SYSTEM
4/7/2009 9:02:56 AM Communication denied by rule 192.168.0.105:1025 239.255.255.250:1900 UDP Block incoming SSDP (UPNP) requests
4/7/2009 9:02:56 AM Communication denied by rule 192.168.0.105:1025 239.255.255.250:1900 UDP Block incoming SSDP (UPNP) requests
***
4/7/2009 9:01:51 AM Packet blocked by active defense (IDS) 192.168.0.100:2890 65.212.121.29:80 TCP
***
4/7/2009 9:01:11 AM No usable rule found 192.168.0.100 239.255.255.250 IGMP
4/7/2009 9:01:11 AM Packet blocked by active defense (IDS) 192.168.0.100:2890 65.212.121.29:80 TCP
4/7/2009 9:01:11 AM Communication denied by rule 0.0.0.0:1031 192.168.0.1:53 UDP Deny communication for mDNSResponder.exe C:\Program Files\Bonjour\mDNSResponder.exe NT AUTHORITY\SYSTEM
4/7/2009 9:01:07 AM No usable rule found 192.168.0.100 224.0.0.251 IGMP
***
4/7/2009 9:00:20 AM Communication denied by rule 5.158.51.183:138 5.255.255.255:138 UDP Block outgoing NETBIOS requests System NT AUTHORITY\SYSTEM
***
4/7/2009 8:59:08 AM No usable rule found 192.168.0.100 224.0.0.251 IGMP
4/7/2009 8:59:08 AM No usable rule found 192.168.0.100 239.255.255.250 IGMP
***
4/7/2009 8:58:29 AM Communication denied by rule 0.0.0.0:1031 192.168.0.1:53 UDP Deny communication for mDNSResponder.exe C:\Program Files\Bonjour\mDNSResponder.exe NT AUTHORITY\SYSTEM
***
4/7/2009 8:58:29 AM Communication denied by rule 192.168.0.105:1025 239.255.255.250:1900 UDP Block incoming SSDP (UPNP) requests
4/7/2009 8:58:29 AM Communication denied by rule 192.168.0.105:1025 239.255.255.250:1900 UDP Block incoming SSDP (UPNP) requests
***
4/6/2009 2:04:53 PM Communication denied by rule 0.0.0.0:1031 192.168.0.1:53 UDP Deny communication for mDNSResponder.exe C:\Program Files\Bonjour\mDNSResponder.exe NT AUTHORITY\SYSTEM
4/6/2009 2:04:48 PM Communication denied by rule 0.0.0.0:1031 192.168.0.1:53 UDP Deny communication for mDNSResponder.exe C:\Program Files\Bonjour\mDNSResponder.exe NT AUTHORITY\SYSTEM
***
4/6/2009 2:04:24 PM Packet blocked by active defense (IDS) 192.168.0.100:4902 65.212.118.29:80 TCP
***

192.168.0.105 is my Epson multi function printer. (lots of messages in the log)

I'm seeing several IGMP messages. My desktop is the 192.168.0.100.

192.168.0.1 is my D-Link WiFi router.

I've blocked the Bonjour service. Must have installed with Safari. Don't see an uninstall option in add/remove.

I may have easily missed some things but the above are repeated a lot.

[xxJackxx]

-{ Quote: "Do you use the firewall in automatic mode? Do you have IGMP protocol enabled in the IDS section of the firewall setup? Does switching the firewall to learning or interactive mode for the time necessary to create the desired rules make a difference?" }-

I don't use automatic mode, causes more problems than I already have. I use interactive mode, and rules (allow) have already been created for the applications that are refusing to connect. All setting in the IDS section are defaults (all are checked by default).

[xxJackxx]

-{ Quote: "I've blocked the Bonjour service. Must have installed with Safari. Don't see an uninstall option in add/remove." }-

It could have come with many things, including iTunes or one of Adobe's CS suites. If you want to get rid of it and don't have an uninstall option you can download the full version from Apple's site (or one of many other download sites) and install that, then uninstall it. Unfortunately that is their recommended way to get rid of it. Don't try to remove it manually, you could lose all networking ability on your machine. Especially do not try to remove its entries from the LSP stack yourself. Found that one out the hard way. ;D

[SBMongoos]

-{ Quote: "It could have come with many things, including iTunes or one of Adobe's CS suites. If you want to get rid of it and don't have an uninstall option you can download the full version from Apple's site (or one of many other download sites) and install that, then uninstall it. Unfortunately that is their recommended way to get rid of it. Don't try to remove it manually, you could lose all networking ability on your machine. Especially do not try to remove its entries from the LSP stack yourself. Found that one out the hard way. ;D" }-

This is off the beaten path but I thought I'd respond.

I'm going to try http://www.raymond.cc/blog/archives/2008/02/10/how-to-uninstall-or-remove-bonjour-mdnsresponderexe/ to remove Bonjour. Or look for another way. Otherwise I'd have to install some other application to get Bonjour on my PC to add/remove. Like iTunes or Quicktime (I'm using QT Alternative).

[Temp Member]

TurnOffBonjour.rar ;)


http://files.filefront.com/TurnOffBonjourrar/;9829324;/fileinfo.html

[SBMongoos]

Apparently I need a rule setup for IGMP as I'm seeing these a frequently in the log:

4/7/2009 11:52:22 AM No usable rule found 5.158.51.183 224.0.0.22 IGMP
4/7/2009 11:52:22 AM No usable rule found 5.158.51.183 224.0.0.22 IGMP
4/7/2009 11:52:22 AM No usable rule found 192.168.0.100 224.0.0.2 IGMP

The IP starting with 5. is LogMeIn Hamachi. I'm the 192.x.x.100.

*****

Is this killing my Network Nieghborhood from working from the .100 PC:

4/7/2009 12:00:20 PM Communication denied by rule 5.158.51.183:138 5.255.255.255:138 UDP Block outgoing NETBIOS requests System NT AUTHORITY\SYSTEM (I see this is for Hamachi but not sure if this might be an indicator the local network issue mentioned above.)

I've allowed UPNP for trusted zones and the errors have really dropped.

[funkydude]

I personally don't use any of that bloated crap from apple(quicktime/itunes/safari all bundles it). VideoLAN/VLC is my "play apple files" alternative.

[xxJackxx]

-{ Quote: "Apparently I need a rule setup for IGMP as I'm seeing these a frequently in the log:

4/7/2009 11:52:22 AM No usable rule found 5.158.51.183 224.0.0.22 IGMP
4/7/2009 11:52:22 AM No usable rule found 5.158.51.183 224.0.0.22 IGMP
4/7/2009 11:52:22 AM No usable rule found 192.168.0.100 224.0.0.2 IGMP

The IP starting with 5. is LogMeIn Hamachi. I'm the 192.x.x.100.

*****

Is this killing my Network Nieghborhood from working from the .100 PC:

4/7/2009 12:00:20 PM Communication denied by rule 5.158.51.183:138 5.255.255.255:138 UDP Block outgoing NETBIOS requests System NT AUTHORITY\SYSTEM (I see this is for Hamachi but not sure if this might be an indicator the local network issue mentioned above.)

I've allowed UPNP for trusted zones and the errors have really dropped." }-

I turned on UPNP and turned off "Block unsafe address after attack detection" (this worked for someone else) and I still get nothing with the firewall turned on.

[SBMongoos]

-{ Quote: "I turned on UPNP and turned off "Block unsafe address after attack detection" (this worked for someone else) and I still get nothing with the firewall turned on." }-

Well, this has helped me weed through some minor issues. The dropped connection comes and goes. I've seen it work for a while fine and then it becomes chronic. Twice I've seen this occur after an update. Happened yesterday and I lost all LAN/WAN connection. After I rebooted I was fine.

Now, I'm just looking at the log to see what's getting tripped up that shouldn't.

Seems to be narrowed down to these three now (I think):

4/7/2009 1:48:42 PM No usable rule found 192.168.0.100 239.255.255.250 IGMP (my desktop)
4/7/2009 1:48:21 PM Packet blocked by active defense (IDS) 192.168.0.100:1668 65.212.121.29:80 TCP (my desktop)
4/7/2009 1:48:00 PM Communication denied by rule 5.158.51.183:138 5.255.255.255:138 UDP Block outgoing NETBIOS requests System NT AUTHORITY\SYSTEM (my desktop - Hamachi)

I've attached a jpg of the items being blocked that in the rules. Maybe I've screwed up or this happened while it was in automatic mode.

[xxJackxx]

I thought I would just try to reboot my machine and now it works with the firewall on. My only thought for something that would have been cleared by a reboot is that earlier I was prompted that another machine was trying to communicate with mine and I selected Block and checked the box to temporarily remember as I bring my laptop to work with me and don't want coworkers trying to access my machine. If that was the cause it appears that blocking communication with another machine stops all network connections? v3 did not behave this way, and it is not what I would expect.

[SBMongoos]

-{ Quote: "Well, this has helped me weed through some minor issues. The dropped connection comes and goes. I've seen it work for a while fine and then it becomes chronic. Twice I've seen this occur after an update. Happened yesterday and I lost all LAN/WAN connection. After I rebooted I was fine.

Now, I'm just looking at the log to see what's getting tripped up that shouldn't.

Seems to be narrowed down to these three now (I think):

4/7/2009 1:48:42 PM No usable rule found 192.168.0.100 239.255.255.250 IGMP (my desktop)
4/7/2009 1:48:21 PM Packet blocked by active defense (IDS) 192.168.0.100:1668 65.212.121.29:80 TCP (my desktop)
4/7/2009 1:48:00 PM Communication denied by rule 5.158.51.183:138 5.255.255.255:138 UDP Block outgoing NETBIOS requests System NT AUTHORITY\SYSTEM (my desktop - Hamachi)

I've attached a jpg of the items being blocked that in the rules. Maybe I've screwed up or this happened while it was in automatic mode." }-

Anyone? Seems that the three items listed above should be allowed.


4/7/2009 1:48:42 PM No usable rule found 192.168.0.100 239.255.255.250 IGMP (my desktop)
4/7/2009 1:48:21 PM Packet blocked by active defense (IDS) 192.168.0.100:1668 65.212.121.29:80 TCP (my desktop)
4/7/2009 1:48:00 PM Communication denied by rule 5.158.51.183:138 5.255.255.255:138 UDP Block outgoing NETBIOS requests System NT AUTHORITY\SYSTEM (my desktop - Hamachi)


On #3 I'm wondering if there is something similar happening with NETBIOS preventing Network Neighborhood from working properly. As I understand NETBIOS handles the name handling for PCs on the network. I believe the image I posted above shows some details from the rules/zone view. I do have it set for Trusted Zone but I wonder if the two are overlapping and causing issues.

[camperguy01]

I'm surprised so many are still having problems. I followed Eset's posted fix - http://kb.eset.com/esetkb/index?page=content&id=SOLN2207&actp=LIST_RECENT

So far it's been 3 days and internet is working fine. I would have thought this would have been a done deal. Curious as to why this fix would work for me but not others??

This has easily been the most frustrating software upgrade I have ever experienced. Best of luck to everyone - hope your back to normal soon.

[Temp Member]

Because the "Fix" is a joke as it will be overwrote by next update be it Normal Mode or in Test Mode (wrote this week or so ago in another thread).

ESET need to fix it not the end users.



Edited for Typos.

[The PIT]

Bump and any news for a fix.

V3 I'm having no problems and theres no point installing version 4 again until the consenus is that the problems are fixed.

[cssoz]

yup i have the same problem i did

THIS!
-{ Quote: "1. Go the the Command Prompt: Start>Accessories>Command Prompt.

2. Type in:ipconfig /release.

3. Disable your Ethernet NIC, WiFi, USB or whatever device you are using for your network/internet. You can either use the Device Manager or Control Panel>Network Connections.

4. Shutdown your system and pull the plug on your computer, router, network monitor (whatever device you have) and let everything drain for (oh about...) 2~3 minutes, the longer the better.

5. Plug everything back in beginning with any of your external networking hardware.

6. Start up your computer, log on, etc...

7. Re-enable all your devices in XP the same way you disabled them.

8. Go to the Command Prompt again. Type in:ipconfig /renew" }-

and i got it back up (using NOD ESS v4.0.417 DB 4002)

[eisefr]

You have to be kidding... :dry:

All this

-{ Quote: "1. Go the the Command Prompt: Start>Accessories>Command Prompt.

2. Type in:ipconfig /release.

3. Disable your Ethernet NIC, WiFi, USB or whatever device you are using for your network/internet. You can either use the Device Manager or Control Panel>Network Connections.

4. Shutdown your system and pull the plug on your computer, router, network monitor (whatever device you have) and let everything drain for (oh about...) 2~3 minutes, the longer the better.

5. Plug everything back in beginning with any of your external networking hardware.

6. Start up your computer, log on, etc...

7. Re-enable all your devices in XP the same way you disabled them.

8. Go to the Command Prompt again. Type in:ipconfig /renew
" }-

To get a software to work??

I think its much easier to deinstall ESS4 and use something else. ::)

[DarrenDavisLeeSome]

-{ Quote: "To get a software to work??

I think its much easier to deinstall ESS4 and use something else" }-

Not really.

You've got to keep in mind that after making any major changes to your system often reflects how your system communicates with your network. NIC's, Routers, Modems, computer systems, etc...all have their respective RAM's: all of which do get fragmented from time to time. Doing the drain thing helps to empty out everything out of RAM whether it's your computer system, NIC, Router, Modem...whatever hardware you might be using for your network/internet connections, starts back up with a clean slate of RAM.

I make regular use of it. Not just on my system. I do the same thing with the network that I am the Administrator of. What are we talking about here: 5, max of 10 minutes of maintenance? Big deal especially when I've got a network with a minimum of 5 systems hooked to it at any given time. Sometimes 8. Soon to be 9 when my friend gets his other system built.

[Temp Member]

That's not how System Memory (RAM) works. ???

Reboot your PC and its flushed clear. ;)

[DarrenDavisLeeSome]

-{ Quote: "Reboot your PC and its flushed clear." }-

I don't think so. I don't care what the "experts" may say. I've seen things that implicate otherwise. I think there's always something (maybe just a little at least) left over with a reboot flush.

[bodgy]

A minor electronics lesson :)

The reason switching a computer (and other electronic devices) off and waiting between 30 seconds to 3 minutes is due to.

1. Capacitors. They hold a charge which due to the way they work do not lose charge immediately power is removed, they need time do dissipate. The charge level can be high enough to still power low current devices, so if you just reboot, they may dip, but won't have discharged enough to remove current availability to other components.

2. RAM can act in the same way as a capacitor, apart from the fact it may still have power available to it by a capacitor, it will retain any information it has in it until the charge inside the RAM chip sinks below a certain level. Again it requires a period of time to discharge.

In fact for those who like to reverse engineer electronic parts, some security chips have been broken into in this very way, by removing the ceramic/plastic and metal protection layers of a chip, and using high powered micrscopes to reveal the charge left in the secure chips and thereby hack the contents.

Moral - always switch a system off completely for approx a minute. For some situations it may require removing the power plug as many modern motherboards have power to them and USB ports even when the PC is 'switched off'.

Colin

[Temp Member]

-{ Quote: "I don't think so. I don't care what the "experts" may say. I've seen things that implicate otherwise. I think there's always something (maybe just a little at least) left over with a reboot flush." }-


Hmm, who said anything about experts.

And TOTAL RUBBISH, normal system Memory looses all its data when rebooted, thats why an IRAM Ram Drive Card uses a battery so you can reboot/turn your PC off.

Also Memory does not have any Caps that can store power, even if Memory in a modern PC has power all the time its plugged into the mains for sleep functions etc it still is made to purge all data when Windows reboots.

~Snip. Comment removed.~

[bodgy]

-{ Quote: "Hmm, who said anything about experts.

And TOTAL RUBBISH, normal system Memory looses all its data when rebooted, thats why an IRAM Ram Drive Card uses a battery so you can reboot/turn your PC off.

Also Memory does not have any Caps that can store power, even if Memory in a modern PC has power all the time its plugged into the mains for sleep functions etc it still is made to purge all data when Windows reboots.

I think you need a Tinfoil Hat TBH." }-

I'm afraid you are incorrect, electronics (embedded products) hardware and firmware is my day job.

I didn't say that RAM modules have caps, they do however behave like caps. A reboot does not remove power from the system, look up which interrupt and sequence it uses. even if it did remove power, to the electronics it looks like a brownout, which can addle memory even more, they've started to discharge and then are immediately recharged.

Look at the size (value) of the caps not only in the PSU but also on the motherboard - check the RC time constant to reach 30% of it's discharged value.

Colin

[ronjor]

Several off topic posts removed.

[cssoz]

-{ Quote: "Same here, i switched back to V3...

Internet connections were down every half hour, Firefox couln't find any site anymore.

I had to wait a couple of minutes and then Internet was back - for the next 30 minutes...

Not good!

Forellenblau" }-

same just downgraded to v3.0.684 (been looking for .685 but don see it anywhere)

[ronjor]

3.0.685 is in the Ukranian language. Is this what you want? If so, choose the language on this

page. >> http://www.eset.com/download/registered_software.php

[The PIT]

Does the latest update fix the issue ????

[Temp Member]

-{ Quote: "Does the latest update fix the issue ????" }-

I cannot comment on Firewall part as it did not cause me issues other than sometimes it does not load at startup. (apparently this causes slowdown for some peeps).

My slow surfing is caused by the Web/HTTP Scanner, its far better in this build as it does not time out my sites but its slow still.

I could not use it like this permanently but will for a day or so then turn it back off.

[Jenee]

The latest build does fix the problem, at least in my case. Internet is fast and there are no dropouts.

[The PIT]

I may try it again after a full system backup.

[The PIT]

-{ Quote: "The latest build does fix the problem, at least in my case. Internet is fast and there are no dropouts." }-


So far so good but I haven't fired up Fritz chessbase as this would always cause a freeze when browsing the web while waiting for a move.

~Phrase removed.~