NOD32 on windows SBS 2008 Freeze

Dear All,

We have problem with our customer server.
They have windows SBS 2008 and purchace EAVBE.
After they install eavbe the server getting freeze. and must shut down from computer button.

they already follow these steps.
http://kb.eset.com/esetkb/index?page=content&id=SOLN2567
http://kb.eset.com/esetkb/index?page=content&id=SOLN2144

but the problem still raise.

is eavbe doesn't support win sbs 2008?
and what should we do.

Regards,

 

Do they have the latest version of EAV 4.2.71 installed? If so, the best would be if they could generate a complete memory dump when the system freezes which might reveal a potential interference with another driver or software that is installed and convey it to ESET for perusal. In the mean time, they could try configuring real-time protection to scan only files with default extensions potentially carrying malware instead of all files (set by default).

 

yes they have the latest eavbe 4.2.71.
should we ask for kernel dump or just small memory dum . i try kernel dump on my pc the file size is so big. 240MB

thanks marcos.

 

I think latest version is 4.7.2 instead of 4.7.1Wrong posted

 

I meant a complete memory dump, it's size should be approx. equal to the size of installed RAM.

 

We have similar issues that seems related to v4 on SBS 2008.

We followed the guidelines regarding exclusions (Microsoft) and the server configuration recommendations as linked earlier in this thread, but note that the system would also freeze with all modules disabled in v4. We are currently not running any antivirus software on the server.(I will revise this post within a week if the instability issues return.)


Unfortunately, I could not get more time on troubleshooting this server when it froze (planned on triggering a memory dump). We do have six bugcheck errors recorded (STOP 0x0000001E) in the system event log (EventID: 1001, Source: BugCheck), six minidumps and a complete memory dump.


KB page on triggering a memory dump:
http://support.microsoft.com/kb/969028/en-us

KB page on antivirus exclusions:
http://support.microsoft.com/kb/822158

 

Does running "driverquery /v | find "epfwwfpr" /i" yield any results? It shouldn't if you actually renamed the ESET WFP driver to work around the bug in Windows WFP.

 

No epfwwfpr listed.

Edit: Nevermind. You were talking about an SBS 2008 currently running v4. I mentioned we uninstalled it and won't be testing it at the moment.

 

solved. they decide reinstall the server. until now nod32 running well.

Thank you.

 

The server has been running without lockups since the uninstall of 4.2.71.2 (released January 25, 2011).


We will install it again and disable the epfwwfpr driver until Microsoft releases a fix for WFP.