every time i run live update w 9x the program says unexpectly needs to close

[CeciliaB 478]

Thank you all

Two persons with Norton and two with Avast Free. That is useful information for Lavasoft.

[quote](I also disable the anti-virus control process in Ad-Watch-live setting, but it usually re-enables itself after update or sometimes, a restart of Ad-aware)[/quote]Probably Ad-Aware forgets the setting when it crashes and restarts.

[sixdbs 0]

[quote name='CeciliaB' timestamp='1340905297' post='136933']
[quote name='sixdbs' timestamp='1340900798' post='136931']
(I also disable the anti-virus control process in Ad-Watch-live setting, but it usually re-enables itself after update or sometimes, a restart of Ad-aware)
[/quote]
Probably Ad-Aware forgets the setting when it crashes and restarts.
[/quote]

This is a long standing issue as discussed previously here:

[url="http://www.lavasoftsupport.com/index.php?/topic/31711-recurring-anti-virus-engine-not-fixed/page__p__129349#entry129349"]http://www.lavasofts...349#entry129349[/url]

[cootmaster 1]

will this be v9 it did it last night when conputer was idle

[CeciliaB 478]

[quote name='sixdbs' timestamp='1340912688' post='136934']

This is a long standing issue as discussed previously here:

[url="http://www.lavasoftsupport.com/index.php?/topic/31711-recurring-anti-virus-engine-not-fixed/page__p__129349#entry129349"]http://www.lavasofts...349#entry129349[/url]
[/quote]
Sorry, that I didn't remember that.

[LS.Andy 79]

Hi,

The short version of the problem is that Avast & Ad-Aware are wrestling over resources. The advice is not to install Ad-Aware & Avast on the same machine. Here comes the science!

AAW9.6 set hooks on NTCreateKey and NTSetValueKey:

!chkimg nt -d
804f95d6-804f95da 5 bytes - nt!KeDelayExecutionThread
[ 8b ff 55 8b ec:e9 bd 42 42 77 ]
[b] 80501c30[/b]-80501c33 4 bytes - nt!KiServiceTable+a4 (+0x865a)
[ 86 a2 61 80:7e d8 63 f7 ]
80501f68-80501f6b 4 bytes - nt!KiServiceTable+3dc (+0x338)
[ 0c 88 61 80:fe db 63 f7 ]
8053354c-80533550 5 bytes - nt!ExAllocatePool (+0x315e4)
[ 8b ff 55 8b ec:e9 e8 a2 3e 77 ]
80544e80-80544e84 5 bytes - nt!ExAllocatePoolWithTag
[ 8b ff 55 8b ec:e9 e4 89 3d 77 ]
805b384e-805b3852 5 bytes - nt!NtDuplicateObject
[ 6a 28 68 58 97:e9 02 a1 36 77 ]
805c129b-805c129f 5 bytes - nt!NtOpenProcess+5 (+0xda4d)
[ 68 a8 9a 4d 80:e9 36 c3 35 77 ]
805c1527-805c152b 5 bytes - nt!NtOpenThread+5 (+0x28c)
[ 68 d0 9a 4d 80:e9 16 c1 35 77 ]
38 errors : nt (804f95d6-805c152b)

dps [b]80501c30[/b]
80501c30 f763d87e [b]Lbd+0x87e[/b]
80501c34 8056e38a nt!NtCreateMailslotFile
80501c38 8060d7be nt!NtCreateMutant
80501c3c 8056e2b6 nt!NtCreateNamedPipeFile
80501c40 805a0da8 nt!NtCreatePagingFile
80501c44 8059a404 nt!NtCreatePort
80501c48 805c7420 nt!NtCreateProcess
80501c4c 805c736a nt!NtCreateProcessEx
80501c50 8060dbde nt!NtCreateProfile
80501c54 805a06ec nt!NtCreateSection
80501c58 8060b15a nt!NtCreateSemaphore
80501c5c 805b9594 nt!NtCreateSymbolicLinkObject
80501c60 805c7208 nt!NtCreateThread
80501c64 8060d08e nt!NtCreateTimer
80501c68 805ef3d0 nt!NtCreateToken
80501c6c 8059a428 nt!NtCreateWaitablePort

Those hooks in RKU:

[attachment=9424:RKU.png]

When AVAST is installed:

kd> dps 80501c30
[b]80501c30[/b] f3f67b32*** ERROR: Module load completed but symbols could not be loaded for aswSP.SYS
[b]aswSP+0x17b32[/b]
80501c34 8056e38a nt!NtCreateMailslotFile
80501c38 8060d7be nt!NtCreateMutant
80501c3c 8056e2b6 nt!NtCreateNamedPipeFile
80501c40 805a0da8 nt!NtCreatePagingFile
80501c44 8059a404 nt!NtCreatePort
80501c48 805c7420 nt!NtCreateProcess
80501c4c 805c736a nt!NtCreateProcessEx
80501c50 8060dbde nt!NtCreateProfile
80501c54 805a06ec nt!NtCreateSection
80501c58 8060b15a nt!NtCreateSemaphore
80501c5c 805b9594 nt!NtCreateSymbolicLinkObject
80501c60 805c7208 nt!NtCreateThread
80501c64 8060d08e nt!NtCreateTimer
80501c68 805ef3d0 nt!NtCreateToken
80501c6c 8059a428 nt!NtCreateWaitablePort
80501c70 80639a86 nt!NtDebugActiveProcess

Hooks in RKU and crash of AAW9.6:

[attachment=9425:Hooks and Crash.png]

Conclusion: the problem arises when the AAW9.6 hook gets control after AVAST’s hook. The problem will be solved if AAW9.6 sets its hook up before AVAST’s - AAW9.6 will, in that case, be successfully updated. Basically, don't run both apps at the same time.

The same problem is reproduced on a clean system with AAW9.6 if unhook NTCreateKey, NTSetValueKey and run update.

[attachment=9426:Success.png]

[cootmaster 1]

what about norton

[CeciliaB 478]

It is probably the same thing with Norton, cootmaster.

[cootmaster 1]

ok

[sixdbs 0]

Thanks LS Andy for the thorough advice.

It seems like the days are over when Ad-Aware's malware protection would complement another vendor's antivirus product. Since my 'Avast! free' now includes an anti-spyware element and appears to be good at it's job with fewer reported problems, I believe I should remove Ad-Aware from my computers.

I'm open to suggestions about this, or other single/combined products, but I'm not sure this is the forum to discuss it.

Thanks CeciliaB for your helpful comments over the years that are always polite and dignified regardless of what members may throw at you!

[cootmaster 1]

[quote] I should remove Ad-Aware from my computers.[/quote]
six did u pull it out

[LS.Andy 79]

Hi sixdbs,

[quote]It seems like the days are over when Ad-Aware's malware protection would complement another vendor's antivirus product.[/quote]
I understand why you say that - as the malware landscape shifted, we decided to provide more comprehensive protection, like real time malware blocking, virus disinfection, rootkit removal.. that kind of thing. Our plan was to prevent malware installing rather than letting it run and [i]then[/i] detecting, removing & cleaning up the system. We wanted to broaden and deepen the scope of protection Ad-Aware offers so that it is a complete security application. You can definitely say that Ad-Aware in 2012 is the same kind of application as AVG, Avast, Norton.

However, we've been paying close attention to the suggestions and comments on the forum and elsewhere. It's clear that a LOT of people want to run Ad-Aware as a second line of defense alongside their main antivirus.

We are currently investigating what it will take for us to build a version of Ad-Aware that will run as an on demand scanner that compliments rather than looks to replace your "first line of defense" like Norton etc. It's in the early stages right now, so we are nowhere near discussing a release date but I can tell you that the application is being scoped out. A percentage of Ad-Aware users have spoken and we're going to provide a version of Ad-Aware that they asked for.

You can expect to see a version of Ad-Aware that will complement another vendor's anti-virus product in the not too distant future.

Thanks for posting, and yes, CeciliaB rules

Andy
Lavasoft Malware Labs

[sixdbs 0]

[quote name='cootmaster' timestamp='1341345761' post='137024']
six did u pull it out
[/quote]

Coot

Still researching best alternative, e.g. [url="http://www.virusbtn.com/vb100/latest_comparative/index"]http://www.virusbtn....mparative/index[/url] (where Lavasoft come out well).

How about you?

[cootmaster 1]

i pulled it
i put spybot in

DESKTOP - ADAWARE 1 hr
hangs up computer
laptop 45 min

SB SD DESKTOP 10 min
LAPTOP 30 min
NO hang ups Edited July 4, 2012 by cootmaster

[sixdbs 0]

Hi Andy

The new direction towards more comprehensive protection makes perfect sense.

I'll keep a look out for your 'complementary' version over the coming months. I must point out though that many vendors already offer versions that can be set up to just scan on demand. Indeed, an attractive advantage of Ad-Aware was its real time spyware protection that few (maybe no) other vendors' free versions offer; although I understand why that may no longer be feasible. Quite a few anti-spyware products claim to run alongside another's anti-virus product, although it seems this is becoming rarer probably for similar reasons that drove your new direction. I'll be interested to see where your 'complementary' version sits with this.

Thanks again
sixdbs

[CeciliaB 478]

Hi sixdbs,

Thank you very much for your kind words!

There are indeed very few programs with real-time protection and good detection that works well together with an antivirus program nowadays, even less (maybe none) if it has to be free. For example Spybot S&D, in my experience, is far from detecting as much as Ad-Aware.

The product called "Lavasoft" on [url="http://www.virusbtn.com/vb100/rap-index.xml"]http://www.virusbtn....0/rap-index.xml[/url] is Lavasoft Ad-Aware Total Security and not Ad-Aware Free/Pro 9.6 or 10. Ad-Aware 10 is too new to have any test results published by the trusted test organisations, as far as I know.

[cootmaster 1]

i agree
Adaware is ONE mmy favs and MOST recomended
if a new version gets released that doesnt lock out my AV
ill be very interested seeing how works

[LS.Andy 79]

Thanks cootmaster - it's really cool to hear that.

As a malware analyst, I just want people to be safe. As long as people use some kind of security application, I'm happy. If people opt to use multiple lines of defense, even better. We're aware that people want a conflict free, on demand scanner (maybe similar to what Ad-Aware was way back then) so if people want that choice, we're more than capable of providing the option. Just need to build it

Andy

[cootmaster 1]

Agreed
yes i always say USE SOME AV if not norton use a free one
a free one is better than NONE
same w adaware since the 10 has a av i have no use for it bcf it nags i have norton,
SB SD and malwarebytes better than NONE
adaware not for me at this time
its like religion
if ppl believe jesus for them GREAT
im jewish, Hes NOT for me
pick one YOU feel is RIIGHT for YOU

[BigSigh 0]

I wish I had found this topic before I spoke to tech help in India. Someone should tell them about this. They insisted that it was a virus and that I should give them access to my computer. "You are not a technician," they said. Um...I worked in computer security before you were born...You don't let strangers poke around in your computer. Ever.

I'm runing XP Pro sp 3 and AVG anti-virus with ZoneAlarm Pro firewall, and have the same problem with the updater in 9.6.

I used to love AdAware. I've used it for many years. So, in a fit of hubris, last year I thought I'd try Total Security. It totally crashed my computer, to the point where it was barely recoverable (by me), so I'm not about to let 10 run rampant in my computer. (Yes, I got a refund.)

PLEASE, Andy, please? A return to the old, truly excellent anti-spyware only days?? I know the company was sold, and maybe there's a new agenda, but I haven't heard of another anti-spyware that's as good.

I don't have a lot of expertise on the current generation of computers, but something we fossils tend to like in running layered security is even when one's belt breaks, the suspenders are still holding up the pants. The tradeoff in speed seems worth it. Maybe that's outdated, but we fossils change slowly.

[CeciliaB 478]

Hi BigSigh,

Did you see post #36 in this topic?

[moemoff 0]

I get the very same problem on 9.6 recently. It arrived a month or so after the nag screen about updating to 10. I am running Windows XP pro service pack 3. I leave the pc live overnight and get about 4 or 5 of these error messages about closing down unexpectedly and sending a message. I get them in the day as well but when there are so many you sure notice it first thing in the morning!

Antivirus Bitdefender - firewall Zone Alarm Pro and hardware firewall.

[CeciliaB 478]

Hi moemoff,

It might be the same type of conflict as LS Andy describes in [url="http://www.lavasoftsupport.com/index.php?/topic/32555-every-time-i-run-live-update-w-9x-the-program-says-unexpectly-needs-to-close/page__view__findpost__p__136994"]http://www.lavasofts...post__p__136994[/url] You can try his suggestion there to install Ad-Aware before BitDefender is installed.

[moemoff 0]

thank for your response .. and I had read that one ..but how come it worked perfectly even after the nag screen came in but then developed the error. Something must have changed.

[CeciliaB 478]

You are welcome

There was a change of the nag screen after a while, maybe a month, to add the "Remind me later" function. I don't know but maybe Ad-Aware made some kind of small reinstallation and the order of these hooks were reversed. Or has BitDefender made some kind of update?

[BigSigh 0]

Hi CeciliaB,

Yes, the hope ignited by message #36 and subsequent was a big part of my reason for posting. To add to the clamour for such a product.

Also, to mention the failure of the contract tech help, the problem I had with Total Security, and to mention that I had the same issue with AVG that others did with Avast and Norton (I used to use each of those (at different times), but then they got unwieldly, and too total packagey. Antivirus--and other security programs--should be lean and mean, not a leviathan like MS Office).