Wilders Security Forums  

Go Back   Wilders Security Forums > Official ESET Support Forum > ESET Home Users Products Forum > ESET NOD32 Antivirus
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old August 22nd, 2009, 08:49 AM
ccomputertek ccomputertek is offline
Frequent Poster
 
Join Date: Jul 2009
Posts: 371
Default windows xp prefetch changes load order

I just compared 2 boot logs, 1 with prefetch enabled and 1 with it disabled and I have no clue why, but drivers moved out of order in the boot log while prefetch was on.I just found out this was the main cause of my problem.Anyone having a driver or service related error or issue might want to go delete NTOSBOOT-B00DFAAD.pf from their prefetch folder and reboot without that file there and see if your problems go away.The people with SBS 2003 and 2008 might want to try this for their issues as well.This explains why I could not reproduce the problem on the same machine when I did a clean install of windows 2000 SP2, no prefetch.So if i have this right, prefetch monitors the way the drivers and services are loaded the first time and makes it's NTOSBOOT-B00DFAAD.pf file, then the next time you reboot while the file is there it loads stuff the way it appears in the file into memory ignoring everything else........ weird.I set prefetch to zero in the registry and empty the folder or delete that file and the problem never comes back, this is a very odd discovery.
  #2  
Old August 23rd, 2009, 09:27 AM
ccomputertek ccomputertek is offline
Frequent Poster
 
Join Date: Jul 2009
Posts: 371
Default Re: windows xp prefetch changes load order

This was the effects of turning prefetch on or off.As you can see, wanarp.sys moved from loading just before eprwtdir.sys to a couple of spaces after.Why would wanarp.sys loading after eprwtdir.sys cause me to get this error:

Personal firewall: An error occurred while starting proxy server. Checking of application protocols (POP3, HTTP) will not work.

And then when I leave prefetch on and change easdrv.sys to start after epfwtdir.sys the error goes away.This makes no sense, easdrv is the anti-stealth driver, and has nothing to do with being a network driver.

Any experts out there that can shed some light on why this slight change in load order causes some type of conflict ? I searched high and low for info on wanarp.sys and it's role in the system, but cannot find anything.
Attached Thumbnails
Click image for larger version

Name:	untitled.GIF
Views:	5
Size:	53.6 KB
ID:	211514  

  #3  
Old September 12th, 2009, 10:34 AM
WayneP's Avatar
WayneP WayneP is offline
Support Specialist
 
Join Date: Apr 2009
Posts: 339
Default Re: windows xp prefetch changes load order

Hello ccomputertek,

We sometimes see those messages on machines that do not have much RAM. The order that drivers load may be evidence of how much some of them use memory to start. This is just speculation, however because I do know how much memory any of these use or how much RAM you have on the machine.
  #4  
Old September 12th, 2009, 11:28 AM
ccomputertek ccomputertek is offline
Frequent Poster
 
Join Date: Jul 2009
Posts: 371
Default Re: windows xp prefetch changes load order

well I know that the Nvidia display drivers starting with the forceware 70 series, gobble up about 400 megs of RAM when it loads, but then later releases the RAM, I am still using version 6176 though.I have a minimum of 1 GIG of ram on all these machines.It's not that epfwtdir is failing to load when I get this message, But seems like EASDRV interferes with it somehow and prevents erkrn from filtering the web or something, but only when boot file prefetch is enabled, does not make sense to me.I have my own fixes for the problem anyway, so Im not too worried about it.It's seems from doing a google search that I actually pioneered the fixes for this issue.Set the INF's up the way I have them, and no one will have a problem anymore.
 

Wilders Security Forums > Official ESET Support Forum > ESET Home Users Products Forum > ESET NOD32 Antivirus « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 02:26 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums