Dr Web problem

Discussion in 'other anti-virus software' started by PeterVO, Mar 19, 2007.

Thread Status:
Not open for further replies.
  1. PeterVO

    PeterVO Registered Member

    Joined:
    Aug 25, 2003
    Posts:
    87
    Location:
    Belgium, Leuven
    o_O Hello,

    after updating Dr Web AV today, Spider Mail is aborting everytime when booting the pc and making dumps. What follows are some of the error messages in the minidump.

    -------------------------------------------------------------------------
    ** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\WINDOWS\system32\ntdll.dll -
    function: ntdll!KiFastSystemCallRet

    ***** ERROR: Module load completed but symbols could not be loaded for C:\Program Files\DrWeb\spiderml.exe
    WARNING: Stack unwind information not available. Following frames may be wrong.
    ChildEBP RetAddr Args to Child
    0012fd48 00434e08 0012fd6c 00000000 00000000 ntdll!KiFastSystemCallRet
    77d496b8 ff016aec 2ae80875 5dfffff2 900004c2 spiderml+0x34e08
    8b55ff8b 00000000 00000000 00000000 00000000 0xff016aec

    *** WARNING: Unable to verify checksum for C:\Program Files\DrWeb\drwspcnt.dll
    *** ERROR: Symbol file could not be found. Defaulted to export symbols for C:\Program Files\DrWeb\drwspcnt.dll -
    WARNING: Stack unwind information not available. Following frames may be wrong.
    ChildEBP RetAddr Args to Child
    00a9ff08 003d15cd 00a9ff40 00000000 00000000 ntdll!KiFastSystemCallRet
    77d496b8 ff016aec 2ae80875 5dfffff2 900004c2 drwspcnt!InitHookControl+0x3ad
    8b55ff8b 00000000 00000000 00000000 00000000 0xff016aec
    -------------------------------------------------------------------------

    I've never seen this before, Dr Web has always functioned flawlesly until now.
    No new programs had been installed before the update.

    What could be wrong?

    Kind regards,

    PeterVO
     
  2. dan_maran

    dan_maran Registered Member

    Joined:
    Aug 30, 2004
    Posts:
    1,053
    Location:
    Stamford, CT
  3. Serge Popov

    Serge Popov AV Expert

    Joined:
    Feb 10, 2006
    Posts:
    41
  4. PeterVO

    PeterVO Registered Member

    Joined:
    Aug 25, 2003
    Posts:
    87
    Location:
    Belgium, Leuven
    Dear Mr Popov,

    thank you very much for the quick response and even more for the quicker fix.:D

    The good doctor is in prestine condition again.:thumb:
     
  5. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    7,927
    Location:
    The land of no identity :D
    o_O

    I got the updated drwtoday.vdb, but I never experienced this bug in the first place with Virus Chaser (despite the fact that VC uses a Dr.Web developed SpiderMail component). :doubt:
     
  6. KikiBibi

    KikiBibi Registered Member

    Joined:
    Oct 23, 2006
    Posts:
    173
    How do you know if your DrWeb components/database has been corrected?

    I press "update" and it updated but no indication of what's being updated.
     
  7. n8chavez

    n8chavez Registered Member

    Joined:
    Jul 19, 2003
    Posts:
    2,302
    Location:
    Location Unknown
    Right-click on the SpiderGuard icon on the taskbar. Then select 'about.' The version numbers of the components should be listed there. Also, there is a Dr Web RSS feed here which would also let you know of updates.
     
  8. Firecat

    Firecat Registered Member

    Joined:
    Jan 2, 2005
    Posts:
    7,927
    Location:
    The land of no identity :D
    If you check the Spider Mail logs after each update, there will be two updates where the virus records for drwtoday.vdb will be exactly the same (i.e. no signatures were added). This is the corrected record, though I doubt everyone would be lucky enough to have seen it, since not everyone updates Dr.Web each hour.
     
Loading...
Thread Status:
Not open for further replies.