F prot 6 causing crash when at sigalert.com

Discussion in 'other anti-virus software' started by jhubsta, May 1, 2007.

Thread Status:
Not open for further replies.
  1. jhubsta

    jhubsta Registered Member

    Joined:
    May 1, 2007
    Posts:
    1
    Hello,

    I am the IT person at a fairly large office which is in the process of upgrading all the computers to F prot 6. However, with the upgrade there is a strange bug which I believe is a false-positive induced crash.

    A lot of people go to sigalert.com to check the bay area traffic, and we have everyone using Firefox as their default browser. With F prot 6 installed, whenever someone goes to this site (myself included), the computer will crash after a few moments (usually after clicking "back" while navigating through the site) and automatically restart. In looking at the dump file, it says that FStopW.sys is most likely the culprit.

    I tried clearing the cache and deleting all cookies and disabling cookies altogether with the same result. There are only 2 ways that it will not crash:

    1. Turn off file system protection on F Prot.
    2. Using IE instead of Firefox.

    After clearing the cache and then only visiting the site (and disabling the file system scan), I looked through my cache to see if I could find the offending file. I found a reference to a .js file with only 1 line of code:

    function DocumentDotWrite(s){document.write(s);}

    Is there anything about this file that might send up a flag with F Prot's heuristic scan?

    It seems like everything else in the cache is either a picture or a google analytics link, or other benign stuff.

    Any help with this strange problem would be much appreciated!

    Thanks.
     
  2. NAMOR

    NAMOR Registered Member

    Joined:
    May 19, 2004
    Posts:
    1,530
    Location:
    St. Louis, MO
    Hi jhubsta,

    You should also post this at the f-prot forum to get immediate help from their support team.


    http://forum.f-prot.com/
     
  3. glentrino2duo

    glentrino2duo Registered Member

    Joined:
    May 8, 2006
    Posts:
    310
    FStopW.exe is for version 3 only..
     
  4. flyrfan111

    flyrfan111 Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    1,229
    I can confirm the crash on visiting that site and hitting the back button. I also posted on Frisk Forum with a link to this thread.
     
  5. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,752
    Location:
    Toronto Canada
    Has anybody tried going to the site with another Av installed?
     
  6. Littlemutt

    Littlemutt Guest

    I browsed around a bit at that site and had no crashes.
    Vista HP, Firefox (Minefield build, trunk)
    NAV 2007

    Mozilla/5.0 (Windows; U; Windows NT 6.0; en-US; rv:1.9a5pre) Gecko/20070502 Minefield/3.0a5pre Firefox ID:2007050204 [cairo]
     
  7. NAMOR

    NAMOR Registered Member

    Joined:
    May 19, 2004
    Posts:
    1,530
    Location:
    St. Louis, MO

    I also browsed a bit on 3 different computer using IE7, Firefox (no extension) and XPSP2. Seemed ok with KIS, NIS2007 and AVG security Suite.
     
  8. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,752
    Location:
    Toronto Canada
    NOD is fine also. So it's just limited to F-Prot I suppose.
     
  9. flyrfan111

    flyrfan111 Registered Member

    Joined:
    Jun 1, 2004
    Posts:
    1,229
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.