Jump to content

paulderdash

Member
  • Posts

    47
  • Joined

  • Last visited

Everything posted by paulderdash

  1. Any update on this? I have had about four DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS epp.sys BSODs since I last posted, two of which have been post-2018.3.0.8555.
  2. OK thanks, was struggling to upload the dump anyway. I hope the beta is forthcoming soon. I have had two more BSoDs today. Another IRQL_NOT_LESS_OR_EQUAL and another DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS - both due to epp.sys. I wonder if Win 10 updates have something to do with this. If this persists I may have to uninstall EAM, which naturally I am reluctant to do.
  3. Not a DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS but a IRQL_NOT_LESS_OR_EQUAL. This was just after updating Win 10 x64 with KB4088776 (to build 309), and on opening Firefox 59 in Sandboxie 5.24 (both latest). On Wed 2018/03/14 7:11:03 AM GMT your computer crashed or a problem was reported crash dump file: C:\WINDOWS\MEMORY.DMP This was probably caused by the following module: epp.sys (epp+0x6B1C) Bugcheck code: 0xA (0xFFFFC50EE029A4F0, 0x2, 0x0, 0xFFFFF8003722ADEF) Error: IRQL_NOT_LESS_OR_EQUAL file path: C:\Program Files\Emsisoft Anti-Malware\epp.sys product: Emsisoft Protection Platform company: Emsisoft Ltd description: Emsisoft Protection Platform Driver Bug check description: This indicates that Microsoft Windows or a kernel-mode driver accessed paged memory at DISPATCH_LEVEL or above. This is a software bug. This bug check belongs to the crash dump test that you have performed with WhoCrashed or other software. It means that a crash dump file was properly written out. A third party driver was identified as the probable root cause of this system error. It is suggested you look for an update for the following driver: epp.sys (Emsisoft Protection Platform Driver, Emsisoft Ltd). Google query: epp.sys Emsisoft Ltd IRQL_NOT_LESS_OR_EQUAL Dump to follow.
  4. Argh. Just got another one, but on restart dump was cleaned by BlackFog Privacy. Have unticked that option now.
  5. Won't go searching for it now ... Only thing I will add is that it has only happened on a system restart - not randomly.
  6. Thanks stapp. Not expecting any solution now. If it happens again, I will keep the dump.
  7. Windows 10 Pro x64 v1709 16299.214 native OS. I have no more info other than the WhoCrashed report I attached, and haven't kept a dump. Stapp, I had two instances of this when the Intel patches (MS and BIOS) first came out (pre-OSArmor or BlackFog Privacy) but didn't get to reporting it, thinking it was also due to transitory problems. But I had it again yesterday, after installing BlackFog ... TBH I am not too concerned about it. Was just wondering if epp.sys was an EAM driver.
  8. I have had the occasional DRIVER_UNLOADED_WITHOUT_CANCELLING_PENDING_OPERATIONS BSOD due to epp.sys. Is this due to EAM? eppsys.txt
  9. Interestingly, since 2017.2 WD LPS is no longer switched off on reboot. Could be this had something to do with it? Improved integration with the Windows Security Center to avoid unnecessary alerts and Windows Defender popups while rebooting and restarting the software.
  10. OK, unless it is by design by Microsoft that WinDef LPS needs to be reactivated on every boot, my only guess then is that this is being caused by Malwarebytes 3, which is the only other AV registered in the Security Centre. I have this installed but not set to start with Windows.
  11. Yes indeed. Thank you @stapp. Every time I reboot that setting is off again. I would have thought MS would make that setting stick, so I thought maybe EAM is resetting it. Especially after reading this post at Wilders: https://www.wilderssecurity.com/threads/windows-defender-is-becoming-the-powerful-antivirus-that-windows-10-needs.383448/page-16#post-2652065
  12. Hi I have EAM and want to run Windows Defender Limited Periodic Scanning alongside. However, every time I reboot WD Periodic Scanning is turned off again, and I need to set it to on again. Could it be that EAM is not just disabling WD but also switching off WD Periodic Scanning on (re)boot? It shouldn't. EAM 2017.1.1.7166 Windows 10 Pro x64 Build 14393.693. Other security software as per signature.
  13. I have an EAM license which expires in two weeks, and an EIS license which was renewed quite recently, that I renewed quite recently. Can I convert my EIS license to an EAM license, and then use that key on my existing EAM installation. If so, how do I go about this - what info do you need from me?
  14. ReHIPS devs: Added workaround for Emsisoft Anti-Malware issue. Should work fine now.
  15. It just uses the Windows firewall. I do have the Adguard WFP option turned on. I'll switch it off and see if that stops the DNS switching ... I have posted on their forum also. I do have SD, HMPA, and NVT ERP. ZAM and WSA have been uninstalled, so these could go. But no need to write a fixlist, but thanks! Thanks Arthur! Will do.
  16. Probably. I have a lifetime Premium license. I just run a scheduled daily scan, no real time.
  17. The DNS flip-flop still occurs with EIS removed. I am starting to think it may be to do with Adguard. Edit: Don't think you have that in you armoury @GT500 - will you still give me a FRST fix file or should I just do a sc delete epp to fix my EAM install problem?
  18. Here are my FRST logs ... FRST.txt Addition.txt
  19. I did this then installed EAM, but it says I am unprotected and I need to contact support. See attachments. Windows Action Center says both WD and EAM are not active. Even though I try to start EAM and trust publisher, situation remains the same. What is the trick to get EAM going?
  20. Thanks Arthur. Not sure if Heimdal Pro is firewall software per se, just that it uses its own DNS - but network-related stuff is generally a bit of a mystery to me. Also - can you enlighten me as to how one can determine if a software uses a WFP driver (other than contacting the devs)? I have EAM on my second machine, and EIS on this one. Maybe I'll swap them around to test for now. Edit: Btw I see Adguard can / does also use a WFP driver to filter Modern UI applications traffic in Win 8+, so that may also conflict with EIS.
  21. Thanks @stapp. I have also edited the post above to remove that link.
  22. I am using Heimdal Pro which uses it's own SecureDNS via 127.0.0.1 to filter traffic. However I see a frequent flip-flop to 192.168.1.1 and back to 127.0.0.1 via Glasswire (see attached). I am using EIS - could the firewall or Surf Protection be causing this - see: http://blog.emsisoft.com/2013/02/18/tec130218/ ? If so, is there a way to get EIS and Heimdal to play together? I have added eimdal processes to EIS process whitelist. I can't think of another program on my setup that could be 'competing' for the DNS (maybe Adguard, I have posted on their forum too) ... see my signature for other softs on my Win 8.1 x64 machine. @Peter2150 I know you use both EIS and Heimdal Pro - have you made any settings changes to either?
×
×
  • Create New...