Problems after latest windows updates

Windows Xp professional sp3.

This windows update caused a blue screen on reboot, on startup Webroot said it needed a rescan.

I allowed it, at the end I got "computer is protected" but all statistics and configuration are reset.

Moreover, all processes in the firewall are on monitor state.

Tried a reinstall and got version .105 that did its initial work.

Still no change, all processes in monitor state.

 

Another computer...........

XP sp3 home

Again blue screen on reboot.

On this one I was luckier............on reboot webroot worked normally and all known processes are on allow as they should be

 

Third computer, Winxp Professional Sp3.

Again Blue screen on reboot, at startup webroot seems to be working normally with know processes on allow and configuration still there

 

There seems to be definitely a problem between webroot and the last windows update, at least on Win Xp.

My first computer is still with all processes on monitor.

I could put them on allow manually but I don't trust this thing at all.

Please, help

 

On the Webroot Community it's being reported also: http://community.webroot.com/t5/Web...se-BSoD-on-2-Win-XP-Computers/m-p/26160#M2374 can you also put in a support ticket so that they can gather some logs? https://www.webrootanywhere.com/servicewelcome.asp?

Thanks,

TH

 

I suggest uninstalling and reinstalling completely, but please first write into our inbox so that we can collect logs to see what else is happening.

 

This is what I got from my XP SP3 VM when I updated.

TH

 

Does this happen just once or is your system not booting? Could you send me a full memory dump directly (compressed), TH?

Thanks!

 

for me my xp system is in a no boot status right now. it starts and bsod and restarts ... rinse and repeat.. im going to see if i can get it to start in safe mode. is there any way to remove wsa from a boot disk??

 

It boots fine after and everything runs OK it's just when you Click restart to finish installing updates. I will send you the miniDump!

TH

 

interesting i wonder why for me it created a boot loop.

 

I had v8.0.2.105 installed then I updated Windows they all installed fine got BSOD when clicked restart and then I powered down and started up again and all was fine.

TH

 

not here boot loop for me.

 

for me it's a once only BSOD...........after power off and power on the 3 computers succesfully start.

I have only one of the three available............could you please tell me where I can find the dump needed and which way can I send them to you?

Another question: on the only one that reset all his settings, the one on which I deinstalled and reinstalled webroot, is it normal that after the reinstall all processes are on monitor in the firewall, even the usual trusted ones?

After a few time of observation they are put on allow, have I to do it myself, is it normal?

thanks in advance

 

I have an old DELL laptop I use for work with XP on I'll hold off updating that until the coast is clear, no problems with Win7 /32 & 64 Bit though.

 

No problems on Vista Business 32-bit too. It seems the BSOD relates only XP.

 

Follow up from: WSA Forum:

Reply from Support:

Hello,

Thank you for your report. After analyzing the automatically attached logs, we have white-listed the unknown processes which SecureAnywhere had been monitoring on your system.

We ask that you run a new scan of your computer now (click "Scan My Computer" in the Overview window of SecureAnywhere). Please let us know if the same issue persists after this scan.

Regards,

The Webroot Threat Research Team

I have sent Support logs from my second computer to compare results, since both computers were running different versions of WSA at the time of the BSoD. Sorry I didn't have time to send second computer logs yesterday had to travel.

 

Which unknown processes did you have..........on my computer even after the reinstall EVERY process is under monitoring.

 

OK, tested a trial webroot installation in a virtual machine.......and as I thought after installation all known processes are on allow in the firewall.

In the PC of my first post, even after unistall and reinstall.........all processes are under monitor.

Please, help?

 

After reading all this I am glad that I don't have any of those (or other) problems with Win7 and WSA v8.0.2.105. So far. - But I have to ask now my relatives using XP if their systems are still alive and what's going on if anything at all ... I hope they didn't already buy a new computer.

 

We're still investigating this but so far it looks to be XP specific, related to the recent update of win32k.sys which was previously unchanged since 2003.

It would probably be safest to hold off updating XP machines for now until this is better understood. Vista/7 appear unaffected.

 

Can you uninstall, reboot, then reinstall, ensuring you don't import configuration options from your previous installation? That should correct it for you.

 

Another BSOD here, XP hp sp3, after hard reset all seems well.
W7 pro x64 no issues.

Yes, win32k.sys issue.

 

Could you (or did you already?) fix this in the cloud so that people don't experience this BSOD anymore?

The problem is: MS updates are automatic on one WinXP system I have in mind. - If my relative is booting his system s..t is gonna happen, right?

So it would really be nice if you, PrevxHelp, could post here if this problem is gone (cloud fixed etc.) and booting XP computers is safe again.

 

That's the exact procedure I did yesterday but today....it worked

The change you did to your side corrected the problem.....now it seems to work well on this machine too with all the known processes on allow (it still monitor the unknown ones , right? )

I also tried an update in a XP VM and got no BSOD and updated another real XP machine that I kept not-updated till now and the process went on smoothly.

Many thanks for the help, Joe