Windows 10 Upgrade Eureka 7.2 Crash Report -Was told to Repost

Dear Bleepingcomputer Staff,   

 

       Hi. I recently upgraded from Windows 7 to Windows 10. Everything was going fine until I installed Comodo and Anti Beacon. I installed Anti Beacon because I really don't want Microsoft rummaging thru my data for advertisers. I now constantly get Eureka 7.2 crash report every 2 seconds. Emsisoft no longer scans automatically after start up like it used to. That's my scheduled scan. Also recently it wont let me  right click and scan with Emsisoft. Please help. I really appreciate your help.

Thank you for what you do.


Best Regards,

 

Nathaniel Evans 

 

EurekaLog 7.2.6.17 RC 1 crash report


Access violation at address 00007FFFA075729B in module 'ntdll.dll'.

Read of address 000000000000030

ExceptionLog7.Init (Location: (000000000{ntdll.dll  }003729B)

[00007FFFA075729B] ntdll.RtlVirtualUnwind + $1DB)



(report generated by EDebugInfo,debugInfoInitDoneErrorHandler)

Press Ctrl + C to copy report to clipboard
 

 

nevans07:

 

Hello and welcome to the Bleeping Computer Virus, Trojans, Spyware, and Malware Removal Logs Forum.  My name is Phil and I am a trainee in the Bleeping Computer Malware Removal Study Hall.  If you would permit me to address you by your first name, I would prefer to do that since we will be working together.

 

I will be assisting you with your computer issues.  All of my proposed fixes and suggestions must be approved by a fully-qualified Malware Removal Team member or instructor.  This will delay response times somewhat, but I will endeavor to respond daily when possible, and no later than 48 hours after your last post.

 

I will need some time to review your FRST logs.  Once I have done, so I will post back with instructions.

 

Thank you and have a great day.

 

Regards,

-Phil

Thank you Phil!

nevans07:

 

Thank you for your patience.  I have analyzed your FRST log files.  Bleeping Computer Study Hall rules require that my analysis, and proposed "fixes", be approved before I can post them.  This is done for "protection" of the computer users, like yourself, who have come here for assistance.  I am still in training and therefore Bleeping Computer wants to ensure that any direction given in these Forums by a Study Hall trainee is the correct solution and will not damage a user's computer.

 

I submitted my analysis for approval on Wednesday PM and I am still awaiting a response.  I did communicate by private message with a Study Hall Administrator yesterday.

 

Apparently there is a shortage of instructors currently, which is delaying approvals.  These Forums are very busy, as you can see.  I apologize for the delay.  I will be active all day on my computer and will post as soon as I get approval to do so.

 

Once again, thank you for your patience.  You are not forgotten.  Have a great day, and I hope to post later today.

 

Regards,

-Phil

nevans07:

I have analyzed your FRST logs. The good news is that I did not detect any active malware.

I did notice that the following security programs, or traces thereof, were installed on your computer.

• Hitman Pro with CryptoGuard
• Emsisoft Anti-Malware
• Comodo Firewall shown as "Installed Program", but files, drivers, etc. and Scheduled Tasks for Comodo Internet Security
• Malwarebytes Anti-Malware
• WinPatrol
• WinPatrol WinAntiRansom
• Web of Trust BHO
• Microsoft Anti-Malware boot driver loading (wdboot.sys) (S3 - On Demand)
• Sybot Anti-Beacon
• (-) Adblock Plus
• (-) CryptoPrevent
• (-) SUPERAntiSpyware, not shown as "Installed Program" but there are Scheduled Tasks.
• (-) Malwarebytes Anti-Rootkit

(-) Does not show in Addition.txt Installed Programs, but files are found in the FRST scan log.


I think that the numerous security programs are "tripping over" each other. It is recommended to have only one anti-virus and one anti-malware product installed and active on your computer.
 

IMPORTANT NOTE: Using more than one anti-virus program is not advisable. Why? The primary concern with doing so is due to Windows resource management and significant conflicts that can arise especially when they are running in real-time protection mode simultaneously. Even if one of them is disabled for use as a stand-alone on demand scanner, it can still affect the other and cause conflicts. Anti-virus software components insert themselves deep into the operating systems core where they install kernel mode drivers that load at boot-up regardless of whether real-time protection is enabled or not. Thus, using multiple anti-virus solutions can result in kernel mode conflicts causing system instability, catastrophic crashes, slow performance and waste vital system resources. When actively running in the background while connected to the Internet, each anti-virus may try to update their definition databases at the same time. As the programs compete for resources required to download the necessary files this often can result in sluggish system performance or unresponsive behavior.

Reference Link I recommend that you read the entire post from Quietman7. He provides some great security advice.


I see that you have Emsisoft Anti-Malware, which includes both anti-virus and anti-malware capabilities. I would recommend that you start by uninstalling Comodo and Spybot Anti-Beacon, which precipitated your issues. I noted that you have Revo Uninstaller Pro installed on your computer. I would use that to uninstall those programs. Reboot please, between each uninstallation, as anti-malware and anti-virus applications "go deep" and a reboot is usually required to clean out residual files.

I will leave it to you decide which anti-virus and which anti-malware application(s) that you want to keep. If it was my computer, I would uninstall the others.

When you have completed that, then test your computer. If all is good, create a restore point, and then reinstall Spybot Anti-Beacon, if you so choose, since it is not really an anti-virus or anti-malware product, and see if your computer is still functioning fine.

Please post back with your results. Thank you for your patience waiting for a response from me and have a great day.

Regards,
-Phil

Dear Phil,

        Hi. Thank you for your time. I uninstalled as you instructed. I am having a compatibility issue with Comodo and Windows 10. I did not have this problem in Windows 7. I had to install Comodo Internet Security and then modify it just to use the firewall. Do you or your instructors have any ideas or suggestions?? I read an article that for the life of me I can't find- detailing the fw hates anti beacon microsofts privacy data location as 00000000. And basically gives a castrating false positive. They had a way of changing the 0000000s so the fw wouldn't lose its mind. Not too technical. I'm just paraphrasing. The article.

 

Thank You,
Nathaniel Evans

Nathaniel:

Thank you for your post. It is not clear to me what security program(s) your uninstalled and which one(s) you are currently running. The Bleeping Computer recommendation is to only have one anti-virus application and one anti-malware application (see my previous post).

I have very little knowledge of the Spybot Anti-Beacon application. Much more knowledgeable folks can be found in the Bleeping Computer Anti-Virus, Anti-Malware, and Privacy Software Forum. You could also try researching at the Spybot Forums here.

How is your computer working now? What security application(s) are you running now?

Thank you and have a great day.

Regards,
-Phil

Dear Phil,

 

I had posted to Spybot Anti Beacon as you suggested. I will post to Virus, Anti-Malware, and Privacy Software Forum as you instruct. A instructor on the forum Spybot Anti Beacon forum you referred me to(great suggestion!) told me to finish here. I'm just following instructions. My apologies. I had already uninstalled comodo and responded to the instructor prior to you who told me to post here. Again my apologies for not being more clear.

I uninstalled Comodo. And when I uninstalled Comodo-  Voila! No more Eureka Crash Reports. Emsisoft scans as scheduled. Now I know what was causing the crash report. Help! Only problem is I need my Comodo. I did not have this problem with Windows 7. I reinstalled Comodo. Any advice will be appreciated. 

 

Best Regards,

Nathaniel Evans

nevans07:

 

Thank you for your post.  I am pleased that you have identified the cause of your crash issue.

 

As I previously told you, I can see no sign of active malware on your computer.

 

Certainly you do need a firewall active on your computer.  You didn't say whether the crashes returned after you reinstalled Comodo?

 

Sometimes, a reinstall of security software is necessary because the installation becomes corrupted and that might be sufficient to solve your problem.  I see that all the time in the Bitdefender and Malwarebytes Forums (those are the security solutions that I personally use).  Their experts recommend doing a complete clean uninstall and then reinstall of their applications.  In most cases that seems to solve the problem.

 

If that doesn't work for you, then posting in the Virus, Anti-Malware, and Privacy Software Forum is probably your best bet.  The experts there would know of any conflicts between the security applications that you are running and how to resolve them.  Also you could consider visiting the Comodo Forums here to see if there are any reports of issues there.

 

If you don't need anything further in terms of malware log analysis, I will ask a moderator to close this thread.  Please let me know.

 

It has been my pleasure assisting you.  Thank you for choosing Bleeping Computer to help you with your computer issues.

 

Have a great day.

 

Regards,

-Phil

Thank you Phil! After I reinstalled Comodo unfortunately the crash reports returned. I will post in the forums you suggested. Thanks again.

nevans07:

 

Thank you for your post.  Best of luck resolving your Comodo issues.  Have a great day.

 

Regards,

-Phil

It appears that this issue is resolved, therefore I am closing the topic. If that is not the case and you need or wish to continue with this topic, please send me or any Moderator a Personal Message (PM) that you would like this topic re-opened.