Author Topic: Little issue with 4.8.1169 [zombie processes]  (Read 2905 times)

0 Members and 1 Guest are viewing this topic.

Offline Dwarden

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1793
  • Ideas, that's ocean without borders!
    • Bohemia Interactive
Little issue with 4.8.1169 [zombie processes]
« on: March 30, 2008, 12:28:10 PM »
well this happened when i try disable Avast! services thru services list , same rnd/rare like with beta
for some reason it takes like 5 times longer than when this bug not happens (both stopping of each component and starting)
these 'ghosts' are then unkillable ...

Windows XP SP3RC2 Pro (i got that ghost bug in SP2 too but that was 4.8 beta, not yet with final)



« Last Edit: March 30, 2008, 12:47:03 PM by Vlk »
https://twitter.com/FoltynD , Tech. Community, Online Services & Distribution manager of Bohemia Interactive

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Little issue with 4.8.1169
« Reply #1 on: March 30, 2008, 12:46:44 PM »
Interesting indeed.

1. Do you have the higlighliting options in ProcessExplorer modified in some way? What does the grey color supposed to mean?
2. if you click any of these zombie processes, and go to the Threads page, are there any threads shown?

Alternatively, we can create a full dump of the system and have it analyzed here with a debugger.

Thanks
Vlk
If at first you don't succeed, then skydiving's not for you.

Offline Dwarden

  • Avast Evangelist
  • Super Poster
  • ***
  • Posts: 1793
  • Ideas, that's ocean without borders!
    • Bohemia Interactive
Re: Little issue with 4.8.1169
« Reply #2 on: March 30, 2008, 08:11:42 PM »
Interesting indeed.

1. Do you have the higlighliting options in ProcessExplorer modified in some way? What does the grey color supposed to mean?
2. if you click any of these zombie processes, and go to the Threads page, are there any threads shown?

Alternatively, we can create a full dump of the system and have it analyzed here with a debugger.

Thanks
Vlk

1. default colors and it mean the process is suspended (you can check it manually by RMB on some process in PE and choosing suspended (then use resume to return)), ofc it fails with these ghosts
2. only one thread TID : 1688 / 2332 / 2876 | all got same Start Address: 0x7c8106f5
https://twitter.com/FoltynD , Tech. Community, Online Services & Distribution manager of Bohemia Interactive

Offline Vlk

  • Avast CEO
  • Serious Graphoman
  • *
  • Posts: 11658
  • Please don't send me IM's. Email only. Thx.
    • ALWIL Software
Re: Little issue with 4.8.1169 [zombie processes]
« Reply #3 on: March 30, 2008, 10:25:10 PM »
Hmm, interesting...

A full dump would come handy, that's for sure.
Would you be willing to try it?

Instructions are here: http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=71


Thanks
Vlk
If at first you don't succeed, then skydiving's not for you.