eEye Digital Security

When opening a QBW file in Quickbooks 2008 or if you try to export a report to Excel, Quickbooks hangs if the Blink services are running.  The following dialog box appears and Quickbooks hangs if you click Switch To or Retry.  Typical hang time is 20 sec to 2 min.  If Blink is closed this error does not appear.

C:\Program Files\eEye Digital Security\Blink\BAMs\BAIMICQ.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BAMs\BDNS.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BFP.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BAMs\BFTP.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BAMs\BHTTP.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BAMs\BIMAP4.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BLINK.EXE, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BLINKAVSCAN.EXE, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BLINKDATAHANDLER.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BLINKDLL.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BLINKEVT.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BLINKRES.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BLINKRM.EXE, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BLINKRMPS.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BLINKRPTGEN.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BLINKSHLEXT.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BLINKSVC.EXE, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BLINKSVCPS.DLL, Version: 4.3.1.2150
C:\Program Files\eEye Digital Security\Blink\BLINKUTL.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BAMs\BMSNMSG.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BAMs\BNBT.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BAMs\BNNTP.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BAMs\BPACKET.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BAMs\BPOP3.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BAMs\BSNMP.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BAMs\BTDS.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BAMs\BTELNET.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BAMs\BTFTP.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BAMs\BWINS.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\BAMs\BYMSG.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\CORE.DLL, Version: 4.3.2.2179
C:\Windows\system32\DEBUGRPT.DLL, Version: 2.4.29.331
C:\Windows\system32\EEVTC.DLL, Version: 2.4.5.413
C:\Windows\system32\Drivers\eeyehv.sys, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\EEYEINTHST.DLL, Version: 4.3.2.2179
C:\Windows\system32\Drivers\eeyenv.sys, Version: 4.3.2.2179
C:\Windows\system32\EEYEPKI.DLL, Version: 2.4.5.413
C:\Windows\system32\Drivers\eeyetv.sys, Version: 4.3.2.2179
C:\Windows\system32\ELIC.DLL, Version: 3.3.11.196
C:\Program Files\eEye Digital Security\Blink\IEMIMEFILTER.DLL, Version: 4.3.2.2179
C:\Windows\system32\MFC71.DLL, Version: 7.10.6041.0
C:\Program Files\eEye Digital Security\Blink\MFX86.DLL, Version: 1.2.1.682
C:\Program Files\eEye Digital Security\Blink\RETINADATAHANDLER.DLL, Version: 5.10.12.1700
C:\Program Files\eEye Digital Security\Blink\SCANHDL.DLL, Version: 4.3.2.2179
C:\Program Files\eEye Digital Security\Blink\SCHEDULER.DLL, Version: 4.3.2.2179

 Can you narrow it down to what component (i.e. Firewall, IPS, AV, ect)  in Blink might be causing the issue?  I would try disabling each component and then launch your program.

 I have the same problem with Quickbooks 2007 Premier edition. This happens on two computers that Quickbooks and Blink are installed on, one running XP and the other Vista. If I click switch to, and log on to an identical user account with the same user name (created by Blink?), I can log on to the program. Or, if I wait long enough and keep clicking retry, I can log in without swithcing user accounts. I have not  set up more than one user account on either computer.

 Thought I would add two things. I tried changing the firewall rule for the quickbooks application from md5 to full path, didn't help, and Blink is consuming 99% CPU during 'hang time'.

 I would recommend to both of you if you can gather more data on the issue for eEye and send it to them by following this post I made for another user:

http://forums.eeye.com/forums/p/971/4185.aspx#4185

I did some more testing and the issue only occurs with antivirus and antispyware running.  I can't reproduce it with all of the other services running.  I'll email you the log file.

Dezl0ck:

I did some more testing and the issue only occurs with antivirus and antispyware running

     I see, unfortunately I assumed that was the problem to begin with.  Alright, do your debugging session with all the components disabled (except the AV component) and then do a separate session with everything enabled and send both logs to the email addresses I noted in the my forum post.  Hopefully the issue can be resolved for you.

     I know by default this setting in the AV is disabled, but by any chance did you enable the "Scan Archived Files" under the "On-Access Scan" section found under:

Options >> "Virus and Spyware Protection" tab >> "Edit Scans" button

Just curious, because I checked this (by choice) in the past and it seriously brings things to a crawl if you have it enabled.

Jeff,

Here's a reference article that may help in the future for troubleshooting Blink:

http://www.eeye.com/html/support/kb/view.html?id=KB000802

Hope that helps.

Brian

 Alright, I like that better.  I was trying to explain the same thing, but I did differently here:

http://forums.eeye.com/forums/p/971/4185.aspx#4185

I'm having this same problem.  I've circumvented it by turning off Blink's Virus and Spyware Protection.  Any news on the status of this problem?

Had a back and forth dialog on this issue with support today.  Told me to exclude the Quickbooks folder, didn't work.  Then I realized that there's files in the common files directory.  So in my case I excluded:

C:\Program Files\Intuit\QuickBooks 2007

C:\Program Files\Common Files\Intuit\QuickBooks

So far no errors.

rmy:

So far no errors.

So your are successful at running Blink then with the AV/Spyware component running?

Interesting.  Quickbooks 2009 started hanging for me just about a week ago.  Seems coincidental that we all have the rare combination of Quickbooks and Blink.  Something obviously changed about a week ago to cause this problem.  I have done the exclude patch to get it working again - after several hours of trying to diagnose the problem I'm glad just to get it working again.

Now I'm in maintenance mode I just checked for Quickbooks updates and see that there have been no updates since March 3, 2009.  Also during my diagnosis I did a system restore back about two months ago.  Quickbooks was still hanginging, although I don't recall if it did so before updating Blink.  It seems to suggest that the only likely change to the system over this time is with Blink.

 Excluding the QuickBooks folders should solve this issue. It seems to be caused by a custom quickbooks packer which makes the Sandbox scanner spend too much time scanning these files.

We are working on a solution to avoid these issues.