Avast WEBforum
Consumer Products => Avast Free Antivirus / Premium Security (legacy Pro Antivirus, Internet Security, Premier) => Topic started by: Lisandro on August 27, 2010, 11:22:11 PM
-
I can't be sure - as the dump file can't be saved with CTM running - that the CTM 178 will BSOD with new pre-released build of avast 5.0.661.
I've tested two conditions: running Firefox inside and outside the avast sandbox. The result was the same (BSOD), although with different numbers. Seems it's not the sandbox (as I've posted earlier http://forum.avast.com/index.php?topic=61503.msg521478#msg521478 and http://forum.avast.com/index.php?topic=61433.msg519066#msg519066).
The computer BSOD after some hours of use. I think it could be related to the memory usage or disk faults.
My fear is that when avast release its new version and when CTM releases its new version on September, both will conflict and this problem will not be addressed.
Is there any way I can help troubleshooting this?
I can give remote access to my computer if its needed to test.
This problem does not occur with avast official release and CTM 178 and Firefox not sandboxed.
Thanks.
-
I know this is a solitary problem and very technical.
Anyway, system is stable with avast 5.0.594, CTM 2.8.155286.178, Mozy 2.2.2.3.
But I fear I will no longer be happy... :'(
-
I'm going to examine this problem today - I have already downloaded the latest CTM+Mozy builds.
Yesterday I tested build 661+CTM 178 (Win7 x86) and there were no BSODs.
I read your post on CTM forum that their software doesn't block the creating of minidumps (http://forums.comodo.com/news-announcements-feedback-ctm/comodo-time-machine-28155286178-bug-reports-t59643.0.html) - maybe it's blocked by someone else? or it hasn't been created at all?
Is there any way to troubleshoot the following BSODs without the dumps?
0x0000007E (0xC0000005, 0x82C3F7F3, 0xAFE757B8, 0xAFE75390)
0x00000609 (0x00000003, 0x00040BC0, 0x000010C2, 0x00000000)
I’m really surprised the difference of the first number of them.
0x7E - driver exception, last 3 numbers are addresses where it occurred
0x609 - it's not a standard windows bsod code, it belongs to the 3rd application (CTM/Mozy/Truecrypt/...) in your case
it's impossible to debug these BSODs without minidumps
I'll keep you informed.
-
I read your post on CTM forum that their software doesn't block the creating of minidumps
Yeah, it blocks. If something write to the disk without CTM drivers loaded, the snapshots (and the system) could break.
Doskey was talking about applications dumps and not kernel dumps. BSODs generate a dump but it can't be saved without CTM drivers on.
I'm going to test again with latest avast beta version... let's play with it :)
-
i'm testing it right now - no bsods yet (Win7 x86, build 666, CTM+Mozy)
-
pk, maybe it was PeerBlock (the first application which crashes) or it could be K9. Both have loaded drivers.
The computer become inoperable after 1h30, nothing special needs to be done. I could wait for the BSOD but I can't do nothing... Something similar as I can't "read" system drive (the one protected by CTM). Other drivers I can read.
-
More crashes... (and the first one, from PeerBlock on screenshot-59).
-
Boot time was not affected by the beta of avast.
I mean, the first one was. There is a slight curve today, but the boot time came to normal after the second boot.
I've uninstalled PeerBlock and testing.
I really don't want to uninstall K9. It's a pain because it does not have an option to export/import settings.
A long time ago, Vlk helped me to identify this following this:
I'd be very grateful if you could give it another test, but before doing so, do some preparations. Namely:
- enable PTE tracking by opening regedit and going to
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Session Manager\Memory Management
and creating a new REG_DWORD value called "TrackPtes" and setting it to 1. You will have to reboot the computer for the change to become effective (note: on some systems, I have actually seen this setting to cause some stability problems (on its own).... I hope this won't be the case on your computer).
Then, when you install AIS (you can wait for the new build tonight), you will be monitoring the number of allocated PTEs by using the following program:
http://public.avast.com/~vlk/poolmon.exe
This is a program that you will run with the following parameter:
poolmon.exe -iMdl
it will display (in the Diff column) the number of currently allocated MDLs (which is equivalent to the number of PTEs). Normally, this number should be below 1000-2000. In your dump, it was visible that the number was like 350000 before the system crashed (that's a huge number!). I'd be interested in seeing how fast the number grows, and which applications (or actions) make it grow faster (e.g. running eMule etc)... This may help us to track down the issue and fix it.
Thanks much
-Ondrej
I've read that the PTEs method could be the reason itself for crashes, I mean, change the registry key could crash by itself.
I'll test this if necessary. What do you think pk?
-
Working stable for 55 minutes ::)
-
Things start to fail again... Seems I'll BSOD in some minutes ;D
-
screenshots show that your system does have enough memory (sounds like a mem leak)
could you please check memory graphs in process explorer? (on the top of GUI) Especially Physical Memory (Available), Kernel Memory (Paged + NonPaged), etc. You can also execute "poolmon -a" (http://public.avast.com/~kurtin/poolmon.exe) to see allocated paged/nonpaged memory by their tags (you can post poolmon's screenshot).
-
screenshots show that your system does have enough memory (sounds like a mem leak)
Post what I could get before the computer get unusable (screenshot-94).
could you please check memory graphs in process explorer? (on the top of GUI) Especially Physical Memory (Available), Kernel Memory (Paged + NonPaged), etc.
Is that? The screenshot-94?
You can also execute "poolmon -a" (http://public.avast.com/~kurtin/poolmon.exe) to see allocated paged/nonpaged memory by their tags (you can post poolmon's screenshot).
When started the poolmon -iMdl command (like Vlk said) the Diff column goes with 2830. Using the computer it peaks to 2950 and then return back. But, like I said, the problems occur after 1h30... (screenshot-99).
The poolmon -a does not fit in a window. I'm posting how it is right now. (screenshot-98).
-
nice... post "process explorer graph" + "procmon -a" pics after one hour, I'll compare them (now it seems quite normal).
"procmon -iMdl" was used when we were hunting for memleak in one old avast+mozy case (avast caused a mem leak and these types of leaks were tagged as "Mdl", that's why we wanted poolmon to focus on Mdl blocks). If there is a problem with registry leak, these blocks are tagged as "CMxx" (as Config Manager), etc etc. It really depends which values will be outta limit after one hour.
-
nice... post "process explorer graph" + "procmon -a" pics after one hour, I'll compare them (now it seems quite normal).
"procmon -iMdl" was used when we were hunting for memleak in one old avast+mozy case (avast caused a mem leak and these types of leaks were tagged as "Mdl", that's why we wanted poolmon to focus on Mdl blocks). If there is a problem with registry leak, these blocks are tagged as "CMxx" (as Config Manager), etc etc. It really depends which values will be outta limit after one hour.
Ok. Everything is running now and I need to wait... and pray that I could take a screenshot when it begins...
-
I need to left the computer for 2h30... It was unusable...
Process Explorer crashed miserably...
Most of the screenshots couldn't be saved in any drive.
The video resolution dropped... A mess...
The only difference between now (I've restored a snapshot) and then is avast beta.
With avast 5.0.594 everything works. With the latest 661 beta I have a memory leak.
-
Other screenshot.
-
More one (sorry, the limit of 200kb of attachments is annoying...).
-
The last I could take before the computer collapsed...
-
I can return to that "problematic" snapshot in 15 seconds...
The problem is that I can't live with it more than 2 hours...
I've disabled avast programs updates (automatic to manual).
But I'll be glad if we can solve this.
-
Indeed, the problem is easily reproducible. 2h of use and it colapses.
Now I'm back to avast 5.0.594 and it's working again.
When I get some instructions of you on how to troubleshoot it or you need more informations, I'll get there again.
Last time, Mozy service crashed, avast services crashed and the system can't recognize the installation...
Take screenshots are almost impossible.
Poolmon indicates CMci and SeIf on the top. What does that mean?
I've looked into Process Manager and nothing seems that much problematic. Excel was using the most memory amount.
Diff seems a normal number.
-
thanks, I think where is the problem now - I'll let you know in some moment; disabling real-time shield should help
-
thanks, I think where is the problem now - I'll let you know in some moment; disabling real-time shield should help
Wow... Good news. Which real time shield? File Shield? All of them?
-
okay, may be completely off-topic here, I'm not sure so I'm posting it just in case: I've had a huge memory leak for two days now. Thought it was Chrome but it happened again after I didn't use Chrome for a few hours, RAM use was 3 GB out of 4. I also had some data corruption on one drive where there was an avast sandbox folder...can't tell if that was related, that was yesterday.
-
Logos same here(huge memory leak). I was playing BF:BC2 and it crashed to desktop saying it was running out of memory. Since i've been playing the game for months now with no issues and the only thing that i've changed in the last few days was installing the new avast! beta i guess it could be an avast! problem. Happened 3 times so far and once when playing Mafia 2. I will roll back to 594 and see if that changes anything.
-
I also had some data corruption on one drive where there was an avast sandbox folder.
What is that? I mean, aren't you able to save a file in disk?
-
Logos same here(huge memory leak). I was playing BF:BC2 and it crashed to desktop saying it was running out of memory.
Wow... It's not only me ;D
-
I also had some data corruption on one drive where there was an avast sandbox folder.
What is that? I mean, aren't you able to save a file in disk?
two things, I didn't mention it but I had to re-install Windows completely yesterday night. What happened is I rebooted when RAM use was too high, than automatically, CHKDSK showed the message at boot time about inconsistencies on a drive, and I saw it was restoring corrupted files. At the same time, while running Windows, it was getting more and more difficult to copy or delete files, dialog boxes were hanging >>> "discovering items" etc...I tried to create a new account >>> when attempting to login with the new account I got this message: "the user profile service failed the logon. User profile cannot be loaded. Happened two or three times. There was an unknown profile listed in advanced settings/performance...I deleted that, logged out, logged back in with my regular account and something bad happened ;D my EFS certificate got deleted and replaced by a newly generated one. No big deal (although I have no idea how this can happen) I got a backup of it, re-imported it, made sure that all encrypted data were using it, and decided to re-install Windows.
Memory leak came back today, but no corruption so far...well hopefully. I did a check disk on C: and it corrected a few things, unindexed stuff and free space to recover, no big deal I think . My fear is that the sandbox could corrupt partitions...
-
Memory leak came back today
What are the symptoms?
My fear is that the sandbox could corrupt partitions...
What program do you suppose is conflicting with avast?
Or do you think it is only avast beta?
-
Memory leak came back today
What are the symptoms?
My fear is that the sandbox could corrupt partitions...
What program do you suppose is conflicting with avast?
Or do you think it is only avast beta?
my normal memory use is between 1.6 and 1.8 with several apps opened. Now it's reaching sometimes 3.2 GB :o
I don't think anything is conflicting, I think it's this build of the beta, alone, generating the problem. Avast visible processes don't show too much RAM use in task manager, that's the problem, so it's probably either through svchost and/or kernel processes I suppose...
edit: okay this said I'm now back to normal, but I don't know for how long. Must depend on what Avast is monitoring...last time of excessive RAM use was following a first full scan.
-
This will be fixed by another beta refresh, probably tomorrow.
Sorry for the trouble.
-
This will be fixed by another beta refresh, probably tomorrow.
Sorry for the trouble.
This is the "memory leak"?
-
Hey guys. Today i woke up, sat behind the pc and there it was, the infamous running out of memory pop-up message. Hope the new beta refresh will be out soon...
-
Yep, the 661 BETA release has probably a memory leak. I suspected it, and mentioned it yesterday to Logos in the chat after which he posted here too.
Greetz, Red.
-
yeah Red thanks for telling me about it because I didn't suspect Avast ;) (thought it was Chrome)
-
Please update to the latest build (668) - should have the problem fixed.
Thanks
vlk
-
I've thought it was CTM ;D
Please update to the latest build (668) - should have the problem fixed.
Thanks :)
-
@ Tech
Perhaps you need to change the Original Post topic since 5.0.668 resolves this memory leak or add [Resolved] at the end of it.
You changed the title in the second post (BSOD with CTM and avast pre-release build 5.0.661) but the original title is still shown in the listings, so if that is still the case you need to change the original posts title.
-
Perhaps you need to change the Original Post topic since 5.0.668 resolves this memory leak or add [Resolved] at the end of it.
I'll do when I can say that for sure...
Up time now 2h 7min and seems ok.
-
yes same here, for me it's considered solved ;)
-
Solved.
Now let's try the sandbox and see if the BSOD is also solved with CTM.
-
Everything back to normal over here aswell. :)