F prot 6 causing crash when at sigalert.com

Discussion in 'other anti-virus software' started by jhubsta, May 1, 2007.

Thread Status:
Not open for further replies.
  1. jhubsta

    jhubsta Registered Member

    Joined:
    May 1, 2007
    Posts:
    1
    Hello,

    I am the IT person at a fairly large office which is in the process of upgrading all the computers to F prot 6. However, with the upgrade there is a strange bug which I believe is a false-positive induced crash.

    A lot of people go to sigalert.com to check the bay area traffic, and we have everyone using Firefox as their default browser. With F prot 6 installed, whenever someone goes to this site (myself included), the computer will crash after a few moments (usually after clicking "back" while navigating through the site) and automatically restart. In looking at the dump file, it says that FStopW.sys is most likely the culprit.

    I tried clearing the cache and deleting all cookies and disabling cookies altogether with the same result. There are only 2 ways that it will not crash:

    1. Turn off file system protection on F Prot.
    2. Using IE instead of Firefox.

    After clearing the cache and then only visiting the site (and disabling the file system scan), I looked through my cache to see if I could find the offending file. I found a reference to a .js file with only 1 line of code:

    function DocumentDotWrite(s){document.write(s);}

    Is there anything about this file that might send up a flag with F Prot's heuristic scan?

    It seems like everything else in the cache is either a picture or a google analytics link, or other benign stuff.

    Any help with this strange problem would be much appreciated!

    Thanks.
     
  2. NAMOR

    NAMOR Registered Member

    Joined:
    May 19, 2004
    Posts:
    1,526
    Location:
    Arkham Asylum
    Hi jhubsta,

    You should also post this at the f-prot forum to get immediate help from their support team.


    http://forum.f-prot.com/
     
  3. glentrino2duo

    glentrino2duo Registered Member

    Joined:
    May 8, 2006
    Posts:
    310
    FStopW.exe is for version 3 only..
     
  4. flyrfan111

    flyrfan111 Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    1,224
    I can confirm the crash on visiting that site and hitting the back button. I also posted on Frisk Forum with a link to this thread.
     
  5. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,619
    Location:
    Toronto Canada
    Has anybody tried going to the site with another Av installed?
     
  6. Littlemutt

    Littlemutt Guest

    I browsed around a bit at that site and had no crashes.
    Vista HP, Firefox (Minefield build, trunk)
    NAV 2007

    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9a5pre) Gecko/20070502 Minefield/3.0a5pre Firefox ID:2007050204 [cairo]
     
  7. NAMOR

    NAMOR Registered Member

    Joined:
    May 19, 2004
    Posts:
    1,526
    Location:
    Arkham Asylum

    I also browsed a bit on 3 different computer using IE7, Firefox (no extension) and XPSP2. Seemed ok with KIS, NIS2007 and AVG security Suite.
     
  8. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,619
    Location:
    Toronto Canada
    NOD is fine also. So it's just limited to F-Prot I suppose.
     
  9. flyrfan111

    flyrfan111 Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    1,224
Loading...
Thread Status:
Not open for further replies.