Jump to content

EAM 5 trial nvidia issues


T-RHex
 Share

Recommended Posts

Hello,

I've been trialling EAM 5 for about a week now and have run into multiple instabilites or conflicts and I don't know where to start in trying to resolve them. I know you prefer having one issue per thread topic, so I will start with these since I think they are related:

  1. Windows shutdown is much slower than before.
  2. When I shutdown Windows I now get the dialog: NVIDIA Twinview not shutting down; it eventually goes away (I do not click "End Now"), then comes back, goes away and Windows does not shutdown. Then if I choose "Start > Shut Down" again, Windows does shutdown properly.
  3. All applications on the left screen hung once (dual screen setup).
  4. I have a hotkey to "move window to next display"; when I use it I get a BB warning not on nView but on the application itself that it's acting like a keyboard/mouse event handler.

WinXP Pro SP3

NVIDIA nView Desktop Manager 120.64 (nview.dll 6.14.10.12064)

EAM 5.0.0.61 (30 day trial)

  • File Guard: on
  • Behavior Blocker: on
  • Surf protection: on
  • with configuration pretty much the installed defaults

OnlineArmor Premium 4.0.0.45

  • Mail Shield: off
  • Web Shield: off
  • Program Guard: on
  • Firewall: on

I had run with OA for 2 weeks without any issues prior to installing EAM.

I previously had ESET Nod32 installed, but uninstalled it before installing EAM.

Any idea how to figure out what's going on?

Thanks

Link to comment
Share on other sites

Hi T-RHex, welcome to the forum

Have you changed (updated the driver)? As far as I know it is not the latest version that you have , but anyway.

The main point is that the rules could've changed.

You can find all related rules and either recreate them (delete & then answer all Alerts appropriately), or just change them by setting “Exclude” (from monitoring)

Another option to look at: if that is nVIDIA's Manager - you may consider not starting it when Windows is Booting up. You always can access it via Control Panel. But the latter is just an additional choice – I think if you set Exclusion all should be fine

As for question #4 – as I understand – you should answer: “Allow” the behavior

Then check the rules in OA as well if you are using its HIPS / Program Guard.

Your system may check the same things ... differently, but still some conflicts may occur

My regards

Link to comment
Share on other sites

Hi Lynx, thanks very much for the response.

I have not changed the driver -- it's the one I've always been using.

You can find all related rules and either recreate them (delete & then answer all alerts appropriately), or just change them by setting “Exclude” (from monitoring)

You mean rules within EAM? I don't see any specific rules for nVidia in the "Application Rules" tab.

I'd rather not disable nView from starting up, as I use the windows-positioning hotkey quite a bit.

Yes, I've been answering "allow" and "remember this" for #4. I just wanted to confirm that was expected behavior (ie. the message coming from the app itself, not from NVIDIA's nView manager).

I'm not sure what you mean by this:

Then check the rules in OA as well if you are using its HIPS / Program Guard.

Your system may check the same things ... differently, but still some conflicts may occur

Which rules would I check? I know there may be some overlap between OA's HIPS and EAM's BB, but it's odd that it would affect shutdown and not startup. I have absolutely no issues on startup; the speed is even decent. But on shutdown I get no alerts from either OA or EAM; just the "Windows cannot close..." dialog. Is there a debug log I can enable within EAM to determine what it might be doing?

Thanks again.

Link to comment
Share on other sites

Thanks for reply, T-RHex

The message you described is a system message by MS Windows

It may or may not relate to one of the Packages in question. Some unrelated system changes may've occurred that you are not aware of yet

My suggestion re: checking rules in OA ( better to ask in the respective forum) and EAM were just a steps in order to investigate the issue.

1) You can temporarily and separately disable BB & real-times (OA's HIPS / program guard) and see whether you still get the system message;

2) in any case please have a look into the logged system Events (use Event Viewer); you may find specific related messages there with ID & Error code;

3) Please have a look at this MS article as well;

4) in addition find other advices regarding the said message by Googling this phrase: “Windows cannot close message on shutdown”

My regards

Link to comment
Share on other sites

Good call on the Event Viewer; sometimes I focus on the problem of the "new" thing and forget the basics.

There's a whole bunch (page fulls) of the following error in my Application log:

Event Type: Error

Event Source: nview_info

Event ID: 1

Date: 10/07/16

Time: 4:47:13 PM

Description: The description for Event ID ( 1 ) in Source ( nview_info ) cannot be found. The local computer may not have the necessary registry information or message DLL files to display messages from a remote computer. You may be able to use the /AUXSOURCE= flag to retrieve this description; see Help and Support for details. The following information is part of the event: NVIEW : a2guard: shared heap exhausted or damaged

The 16th was probably the day I had the most trouble. However, I haven't had any entries yesterday or today, so that's not so bad. I'll keep an eye on that log.

There is this in the System log:

Event Type: Information

Event Source: Service Control Manager

Event ID: 7035

Date: 10/07/19

Time: 9:54:36 AM

Description: The Emsisoft Anti-Malware 5.0 - Service service was successfully sent a stop control.

Event Type: Error

Event Source: Service Control Manager

Event ID: 7031

Date: 10/07/19

Time: 9:54:37 AM

Description: The Emsisoft Anti-Malware 5.0 - Service service terminated unexpectedly. It has done this 1 time(s). The following corrective action will be taken in 0 milliseconds: Restart the service.

Event Type: Information

Event Source: Service Control Manager

Event ID: 7036

Date: 10/07/19

Time: 9:54:37 AM

Description: The Emsisoft Anti-Malware 5.0 - Service service entered the running state.

I'm thinking that had to do with the latest update; I know I suddenly got a Windows security notice that I had no virus scanner installed and noticed the EAM icon had disappeared from the systray; then it came back and when I checked it was a new version. So I'm not concerned about that. Nothing else of note in the System log.

in addition find other advices regarding the said message by Googling this phrase: “Windows cannot close message on shutdown”

Ach, I should smack myself in the head. I searched for "nvidia twinview shutdown" and quickly found others having similar problems with other AV/AM products installed; the solutions were invariably to exclude nview from the AM. I will give that a try and see what happens the next time I shutdown.

Thanks for your patience, Lynx. Normally I try to think before speaking, but I guess I got focused on "EAM is the new thing, so it MUST be causing the problem". ;)

Link to comment
Share on other sites

...Good call on the Event Viewer;...
I'm glad that the suggestion shed some light on the issue, but that is still not clear enough in terms of “not having such problem previously".

In any case – the finding is good and indeed please keep an eye on that especially after the recent update to EAM v5.0.0.64

I would suggest to post this one ...NVIEW : a2guard: shared heap exhausted or damaged ... as a support ticket to Emsisoft developers irrespectively in case that will persist. They may ask you for additional info

As for the nVidia driver itself – as I said – you have the outdated one (please correct me if I am wrong... I don't have sys details of yours) The recent WHQL XP driver for desktops is 258.96 - yesterday' release (19/07/2010) Installed here & working fine

(nView.dll 6.14.10.13527) Running GeForce 9400 GT here

So you may try to install the latest driver, despite that is not a strong(est) suggestion - keeping drivers / BIOS / firmware /etc. up-to-date is a correct thing to do … but failures & incompatibilities may happen sometimes with new versions (usual & unfortunately unavoidable thing)

Speaking of another Event re: “Service service terminated unexpectedly ” & restarting the service that may not be a concern. Those things are happening with services (any) & the recovery & “getting back to business”, which is implemented in EAM is basically one of the best I've ever seen .

Cheers!

p.s.

...Ach, I should smack myself in the head...
don't do that! That may distract your attention and bring …hmmm :rolleyes: ..., say currently undesirable thoughts :lol:
Link to comment
Share on other sites

I'm glad that the suggestion shed some light on the issue, but that is still not clear enough in terms of “not having such problem previously".

True. I had no issues with just OA installed and using ESET Nod32; it wasn't until I installed EAM that the problem came up. However, now that I recall, those entries from the EventLog came on a day when it seemed "everything" was going wrong; I had several apps crash on shutting down the system, including TrueCrypt -- and I've never before had TrueCrypt crash. Maybe I should've mentioned that previously, but I didn't think it pertinent to this topic of nVidia.

I would suggest to post this one
...NVIEW : a2guard: shared heap exhausted or damaged ...
as a support ticket to Emsisoft developers irrespectively in case that will persist. They may ask you for additional info

I will do that when time permits.

As for the nVidia driver itself – as I said – you have the outdated one (please correct me if I am wrong... I don't have sys details of yours) The recent WHQL XP driver for desktops is 258.96 - yesterday' release (19/07/2010) Installed here & working fine

Sorry, I forgot to respond to that previously. I had tried updating my nVidia driver a few months ago, and found some other issues with it (repositioning windows to the other screen actually left them in the middle of the two screens). After restoring a prior system image (something I do occasionally to get back to a clean system), I did not update the nVidia driver. I will try that just to see if it resolves the shutdown issue.

Speaking of another Event re: “Service service terminated unexpectedly ” & restarting the service that may not be a concern. Those things are happening with services (any) & the recovery & “getting back to business”, which is implemented in EAM is basically one of the best I've ever seen .

Not sure I follow you there. Are you just saying EAM has the best service recovery ability you've seen?

p.s. don't do that! That may distract your attention and bring …hmmm :rolleyes: ..., say currently undesirable thoughts :lol:

Haha. Don't worry, computers have given me far too many undesireable thoughts over the years, so I'm used to them and won't get distracted. ;)

Oh, as a test, I had added nvsvc32.exe to the Guard's Application Rules as "always allow". It was the only nVidia .exe I could find that was running (as opposed to .dlls) but it had no effect. Today I will try a few other options (it's just a pain, because to try each option requires rebooting the machine and unfortunately I have work to do ;) ).

Thanks again, much appreciated.

0xtr

Link to comment
Share on other sites

(double post)

Okay, that went well (or not)...

I had an opportunity to reboot, so:

  1. I used Windows Update to update the nVidia driver; that went fine (I didn't look at nVidia's support site for the update file since Windows Update picked it up)
  2. before rebooting, I thought "just to avoid the previous problem, I will exit EAM", so I chose "Shut down Guard" from the systray icon right-click menu.
  3. I manually exited all applications and dismounted all TrueCrypt volumes.
  4. I shut Windows down (not reboot)

Three error windows popped up:

- TrueCrypt application error

- Explorer.exe application error

- "End Program: Media Center" (could not shutdown)

I clicked on the "close" for Explorer.exe and it kept coming back. Eventually (after much clicking), everything then shutdown normally.

Windows restarted fine (no errors) and I checked the Event logs. There's nothing of note in the Application log, but in the System log I see:

Installation Successful: Windows successfully installed the following update: nVidia - Display - NVIDIA GeForce 8600 GT

The Windows Installer service entered the stopped state.

[Event ID: 26] Application popup: Explorer.EXE - Application Error : The instruction at "0x019e7f70" referenced memory at "0x019e7f70". The memory could not be "written".

[a bunch of those]

Application popup: MediaCenter: RUNDLL32.EXE - Application Error : The instruction at "0x00ef7f70" referenced memory at "0x00ef7f70". The memory could not be "written".

Application popup: dwwin.exe - DLL Initialization Failed : The application failed to initialize because the window station is shutting down. [a bunch of those]

[And finally] The Event log service was stopped.

On startup, everything looks fine, and nVidia/nView is now updated to 197.45 (all the components in the nVidia Control Panel are 6.14.11.9745). I see my nView.dll is only 6.14.10.12561, a little behind the version you have. All the versions shown in the nView Desktop Manager are 6.14.10.12561.

I'll see how the next boot goes when I have a chance. I will also play a bit with shutting down EAM before shutting down Windows and see if I can reproduce the application errors.

Link to comment
Share on other sites

(another update)

The first shutdown after the above had no errors, but did not shutdown either. The only entry in the System log was this:

Event ID: 1073 The attempt to power off <machine> failed

Another attempt to shutdown actually shutdown the computer without further delay or any errors.

I then turned the computer on, did some "light" use (email, browsing), and then shutdown: no errors, no delays, no problems. It shutdown the way I would hope or expect.

So there may be some difference in the above two scenarios: the first usage was "typical" for me, the second was "light". "Typical usage" for me involves software development, VMWare, a lot of browsing/email/IM, and I wonder if something in that usage is causing the shutdown problem.

Then I noticed another thing: the nView Desktop Manager is disabled! It must have been changed when I updated the driver. I tried to enable it; it didn't respond for a while (hourglass) then became responsive but was still disabled. No Event log messages, no errors thrown, no EAM or OA alerts. So now I cannot enable the nView Desktop Manager. I will try again later with EAM disabled.

Link to comment
Share on other sites

Latest efforts ... I'm no longer getting errors on shutdown! That's progress.

However, I've been running the last few days with nView Desktop Manager disabled. If I try to enable it, the hourglass comes up for a min or two, then goes away and nothing changes in the Desktop Manager console. I cancelled the dialog, disabled EAM protection from the right-click menu on the systray icon, and opened nView Desktop Manager again. It was enabled, and all tabs were enabled now without doing anything further! I then re-enabled EAM, checked the nView console again and saw everything was still enabled. So far so good. Reboot. The Desktop Manager is disabled again.

There's definitely some conflict between EAM and nView Desktop Manager. Next I will try disabling EAM first, enabling nView, and see what happens. Note: I am using the nVidia driver from MS update (as mentioned above) and not the latest one that Lynx had mentioned.

Link to comment
Share on other sites

(I was away for the past week, it wasn't that I gave up...)

I have upgraded my nVidia drivers to the latest version from the nVidia support site.

WinXP Pro 32-bit SP3

DirectX: 9.0

GeForce 8600 GT

nVidia Driver version: 258.96

nVidia Components: 6.14.12.5896

nVidia Desktop Manager: 135.27 (6.14.10.13527)

  • I cannot enable the desktop manager with EAM guard running.
  • I shutdown the guard, enabled the desktop manager, and reboot the PC. I now have desktop manager enabled along with EAM guard.
  • My assigned hotkey (Alt+Home) wasn't working for switching a window between monitors, so I reassigned the hotkey and tried several different ones (finally using Alt+H to keep it simple). The hotkey works once on a window, then stops working. If I shut down the guard, the hotkey works fine. If I then re-enable the guard, the hotkey works one more time, then stops working.

As a software developer, I am constantly switching windows from one screen to the other so this hotkey for nVidia's Desktop Manager is very useful. Any suggestions on how to proceed?

Link to comment
Share on other sites

Hi T-RHex, welcome back

... it wasn't that I gave up...
Who does? ;) we should not.
...I cannot enable the desktop manager with EAM guard running...

...As a software developer, I am constantly switching windows from one screen to the other so this hotkey for nVidia's Desktop Manager is very useful. Any suggestions on how to proceed?

The issues with multiple displays management is not uncommon & that is emerging now & then with different security.

As far as I remember there were similar requests here in the forum as well & several problems were fixed.

I may find the cases, but that by itself may not be very helpful because "unexpected specifics" could emerge due to new versions from both parties

As for proceeding:

Please contact Emsisoft developers with a bug ticket

From your point of view it is a bug, which could be true... (there is no "doubt-flavour" expressed here)

They may request additional information and/or running some test/debugging/etc. & alike. And I am sure as a developer you will be able to provide that information

Knowing the attitude of Emsisoft developers for a long time - I'm absolutely sure - the issue will not be left unattended

My regards

Link to comment
Share on other sites

Thanks, Lynx, I appreciate the assistance and I've entered a bug ticket.

Something I've now noticed which is kinda funny: though the hot key seems to stop working, it looks like it queues up the switch-screen requests, and now my browser window is switching screens at random and unexpected times.

Thanks very much!

tr

Link to comment
Share on other sites

Guest
This topic is now closed to further replies.
 Share

  • Recently Browsing   0 members

    • No registered users viewing this page.
×
×
  • Create New...