EldoS | Feel safer!

Software components for data protection, secure storage and transfer

Callback Filter conflict with anti-virus program such as NOD32

Also by EldoS: BizCrypto
Components for BizTalk® and SQL Server® Integration Services that let you securely store and transfer information in your business automation solutions.
#10108
Posted: 05/21/2009 20:30:05
by Wang Sheng (Basic support level)
Joined: 02/16/2009
Posts: 44

I use your sample:encrypt, to monitor *.doc File opened by Microsoft word2003
I do a small edit:
void EncryptContext::EncryptBuffer()
{
//for (DWORD I = 0; I < mBufferSize; I++)
// mBuffer[I] ^= 0xFF;
}

void EncryptContext::DecryptBuffer()
{
//for (DWORD I = 0; I < mBufferSize; I++)
// mBuffer[I] ^= 0xFF;
}


I set filter to: *.doc
My computer also install and run:NOD32 anti-virus program.
word2003 can open *.doc files correctly, but when I want to save the doc File,
word2003 say error ,can not save File. and then system reboot.
when I disable nod32, everything is OK,incluse save file operation.

2)
My computer also install and run:NOD32 anti-virus program.
I then set filter to :*.txt
I use notepad.exe to open txt file, I can save txt file,but after a while,system reboot.
If disable nod32,everything is OK.
#10112
Posted: 05/22/2009 01:32:30
by Vladimir Cherniga (EldoS Corp.)

Please specify your operation system version.
#10122
Posted: 05/22/2009 03:56:44
by Wang Sheng (Basic support level)
Joined: 02/16/2009
Posts: 44

My operation system version is :xp sp3.

And system reboot only happen on the version 1.1.17, also only when you quit
the encrypt program.

system won't reboot when running previous version.
#10129
Posted: 05/22/2009 05:43:28
by Vladimir Cherniga (EldoS Corp.)

If it is possible, please post kernel memory dump, when system reboot. Do it with a debug version of cbflt.sys driver.
#10141
Posted: 05/24/2009 06:27:23
by Wang Sheng (Basic support level)
Joined: 02/16/2009
Posts: 44

Sorry,I don't know how to get de kernel memory dump.
Would you check this problem fist:
Encrypt samples is conflict with anti-virus program
#10145
Posted: 05/25/2009 08:08:19
by Vladimir Cherniga (EldoS Corp.)

I shell inform you when this issue will be resolved.
Also by EldoS: CallbackProcess
A component to control process creation and termination in Windows and .NET applications.

Reply

Statistics

Topic viewed 3511 times

Number of guests: 1, registered members: 0, in total hidden: 0




|

Back to top

As of July 15, 2016 EldoS Corporation will operate as a division of /n software inc. For more information, please read the announcement.

Got it!