Blink Beta 3.1 Feedback

Scheduler Error

jgs1940 — Fri, 15 Jun 2007 13:13:14 GMT

I have had two occurences of a "Scheduler Error" show up in my log. The Event ID is "Blink-ENG-601". The description requests to send the "debug_syncit.log" to support; however, I have not located a way to do this.

Any suggestions?

Jim

Scehuler error??

geoclock — Sun, 17 Jun 2007 11:48:22 GMT

I am using 3.1 beta personal . Friday I got an error report in the log:

Information : Scheduler error 2007-06-14 02:10:34
Event ID: BLINK-ENG-601
Severity: High
Description: The Scheduler module enountered an error. Please send the following file to our support department: %CommonProgramFiles%\eEye Digital Security\SyncIt\debug_syncit.log

Alert: No Error

Message: SyncIt failed.

This file is over 2 MB. EXACTLY where is "support" for forwarding this file?

What is this error, and is it anything I should worry about?

HTTP : Suspicious HTTP method from Skype

GameFanatic — Wed, 20 Jun 2007 10:30:44 GMT

Getting lots of these in the logs. Are they bad? What can I do to stop these if not?

Event ID: BLINK-BAM-5002

Severity: High

Description: A client tried to send a request with a method that has a suspicious size

Method: êÅØ`û¯Ù¤àv\¢÷0šäøëÜûd™&TÚ8YVÚ˜2`Øûà_,”ÿká.l/1Jnx¼óìë°ì

2: Ò xm÷rÎ›{áÐhÎ²°ËvRÿ”*®|Nf°–ø÷«óïvu,XÔcPß6ªÉl´ÞËvp´v„eºR~A{›ÑìœäŸ&…–¸€Í7T¢8~.š3’ë[®)»¶gcùÉD/4Ó(yÖàœ8k‹7i×ûG±øñÌ Hf1;¯š«O>^ý‡µmÖ|bRJ·

3: ËXÀ|a+°®¿ÜÓÝ¡•ƒÉ·Èræ<MÖU˜±˜‡yÉãÁ®ß³ó¼OV±¬‚šÎHƒÃÝ“ê¤%d“®ç®gðSmC{Ô#YÚòRë.ãëôdi g!i¸.\æ°r»uµžÊ)Ðá–E«j±ÓRÞù´+\:§åœ

4: 8ŸÆÉBj”¢Ëv€v®ÐóÐGì·P l…c6B…‘Uß"wœ«8p´

5: u+‹à¦% ®ôX?Ne‹ÌÒbnÕÀ0Ìèn}xov2ã³xmš AŠ•üwuøÁyÛ8·J©ž:1o°J

Process Path: C:\Program Files\Skype\Phone\Skype.exe

Attacker IP: 124.254.82.116, 89.149.56.37, 203.84.186.45, 202.84.110.172

Action: Logged event

Victim IP: 192.168.xxx.xxx

Alert: No

Protocol: TCP

Attacker Port 22925, 16097, 1808, 1289, 1521, 22925

Method Size : 42-143

Victim Port 58223

I have already Kevlar'ed Skype.exe but still get these in the log.

RET55 NDIS Protocol Driver service failed to start

dottedquad — Wed, 13 Jun 2007 22:30:36 GMT

Qestion: is the RET NDIS driver servce part of Blink? If so, maybe someone can explain the following. Just checked XP event log and got 30 to 40 identical errors all occuring at 23:00:07. The event log output is as follows. =========================== start of event ======================================== Event Type: Error Event Source: Service Control Manager Event Category: None Event ID: 7000 Date: 13/06/2007 Time: 23:00:07 User: N/A Computer: ZOOM-UFFORD Description: The RET55 NDIS Protocol Driver service failed to start due to the following error: The system cannot find the file specified. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. ============================ end of event ======================================== I checked the Blink log and nothing was loggwsd a,t or near, that time.

Porblems with HTML Outlook email

CFGuthrie — Fri, 29 Jun 2007 15:22:38 GMT

When you're in Outlook and typing text into an HTML formatted email there is a very long delay between your typing and the text appearing on the screen. Doesn't happen with RTF or Plain Text messages. Delay is so long HTML formatting becomes almost unusable.

Vista--3.1.1.1631 Installation Fatal Internal Error 2378

BABatson — Tue, 26 Jun 2007 07:00:03 GMT

Vista OS: Blink Personal exe. installation encounters fatal error (Error 2378) and aborts installation after extracting files. (I'll stay tuned for Vista compatibility.)

23 houirs 15mins for complete scan on P///-550

frustrated — Thu, 14 Jun 2007 05:09:23 GMT

After numerous attempts on a XP Pro P///-550 w 512 MB RAM I was able to complete a complete virus scan in only 23 hours 15 mins! Afterwards I was unable to check for updates as each update errored out.

Where are the logs? Blink seems to have eaten my OS

tvanover — Wed, 27 Jun 2007 19:17:44 GMT

I was using Blink on my laptop and it threw a warning that it had failed to quarantine malware. When I clicked more information blink crashed, and explorer crashed soon after. I attempted to restart and now I get the windows load screen, then the computer restarts. No matter what boot mode I use, Safe mode, Command Prompt, etc. I always restart. This is the second time it has occurred, the last prompted me to get a new Hard drive. I have pulled the hard drive but I am having difficulty finding the logs.

It is odd that I got a malware alert. I had been using the computer unattached to any network for over six hours. I am hoping that the logs could shed some light on what happenend.

Outlook Newsgroups Slow under Blink 3.1

bobb — Tue, 26 Jun 2007 13:00:30 GMT

Blink Personal BETA Version 3.1.0, Rule version 1406
AntiVirus Version 1.0.162
Vulnerability Scanner version 5.8.4, Audits version 1690

Windows XP, all patches; Office 2003

Program: Outlook Newsgroups (actually it's Outlook Express Newgroups, but Outlook hides that fact.)

Upon right-clicking a Newsgroup and selecting 'Catch up' (sets all messages to a read status) Blink 3.1 grabs 90%+ of the CPU and doesn't let go. Takes many seconds to mark even just a few messages. Without Blink a second or two is enough to mark many messages read.

If one waits long enough, Blink returns the CPU, but it's not a quick process.

-bb

Unable to apply Windows Updates..Blink Seems to Block

Brent — Wed, 13 Jun 2007 02:51:22 GMT

I am getting the following when I try to apply windows updates....

Application protection : Application alert

6/12/2007 7:44:25 PM

Event ID:	BLINK-APP-100
Severity:	High
Description:	Blink detected a suspicious system call. If you believe this application is not malicious, you can add it to a list of approved applications in the Config\apiex.ini file using this format 'FilePath;[Optional MD5];Kevlar;0'
Reason:	KERNEL32.DLL!CreateFileA
Action:	Restart process
Program:	C:\Program Files\Internet Explorer\iexplore.exe
Alert:	Yes

Why would the app not allow normal windows updates to be applied? Please advise...

Update in Logs?

duke1959 — Sat, 16 Jun 2007 12:10:13 GMT

Should I be seeing the daily Antivirus updates in my logs? I did a manual update yesterday and it logged that, but there are no logs for any other AV updates since I installed BPE a few days ago.

Blink Personal Beta 3.1 (Error Code 251)

hgfire — Sat, 23 Jun 2007 23:04:41 GMT

While using Nero 7 Ultra, I'm receiving Error Code 251 while attempting to start up Nero Show Time. This only happens when attempting to start this module. All other aspects of the suite appear to function correctly. This occurs under XP Pro, service pack 2, and fully patched up to second Tuesday of June.

Virus and Spyware scan does not complete

frustrated — Thu, 07 Jun 2007 15:51:11 GMT

The following is a repost from the old forums that still is unresolved:

I have tried and tried and no matter what I do I can not get Blink to complete a Virus and Spyware scan. This last attempt I stopped only 5 hours into the scan when it showed 54,753 files scanned and Blink showed that it was scanning drive C: even though previously it showed it was scanning a logical partition down further. The computer is P///-600 w 512MB RAM XP Pro SP2 fully updated with Blink 3.1 with all updates. I have left the scan running for 13 hours without it completing.

Null Session Registry Settings

Spunner — Thu, 14 Jun 2007 22:23:37 GMT

View Last Assesment Report:

BID 494
CVE CVE-2000-1200
Description: Anonymous acces to the registry is not restricted.

I followed the instructions, but all the regkeys were already there, and already set as recommended. How do I get rid of the entry showing up?

I'll have more questions as I deal with the rest of the 38 vulnerabilities tomorrow!

Blink heavy on resource consumption

Frank — Fri, 08 Jun 2007 22:25:34 GMT

I can appreciate that blink does a lot of stuff in the background, but it also interferes with a lot of my apps and it consumes quite a bit of resources compared to the combination of TinyFirewall and 9M of ram and AVG 7.5 (Free Edition) @7.5M of ram. Over the last 5 or 6 days of my testing Blink and the beta, Blink has never used less than 25% CPU and app 64M of ram. Is this considered "average" resource consumption? Personally, I'd like to see it consume less than 20MB total ram and less than 10% cpu during heavy load.

Can eEye recommend tricks or tips for reducing consumption of ram and CPU?

Thanks

WinXP Pro, SP2
AMD Athlon 64 3200+
2.19 GHz, 1.87 GB of Ram

Getting Beta 3.1

einstein.cubed — Sat, 16 Jun 2007 04:25:50 GMT

I would like to use Beta 3.1 to see if it solves my network problems. However, I do not know if I need a key for it. I never got an e-mail offering use of the beta. I have already downloaded the installer, but have not yet installed it. Do I need a license other than my regular license for non-bet to be able to install it? Thank you.

Postscript: Thanks for your help. I figured it out, now I hear that it is out of beta though.

Vulnerability Assessment "Cannot start scanner."

mithril — Fri, 15 Jun 2007 09:55:32 GMT

When I start the Vulnerability Assessment the status bar reports that it "Cannot start scanner."

I upgraded to the beta because of this issue in 3.0 - but the issue remains.

I'm running Windows XP SP2.

Blink Personal BETA Version 3.1.0, Rule version 1406
AntiVirus Version 1.0.155
Vulnerability Scanner version 5.8.4, Audits version 1686

Blink Beta added a new User Account

duke1959 — Fri, 15 Jun 2007 00:13:37 GMT

After installing the Blink Personal Edition Beta 3.1 I noticed that after I reboot my PC I no longer goes directly to my Desktop and I have to log on now. This then led me to check User Accounts in Control Panel where I saw a User Account named Blink_Darryl and underneath it, Limited account Password protected. Although this may be done on purpose for some reason, it still concerns me as I don't want another user account, and don't know the password to it. There is also a picture of an old style Race Car beside it. I have Guest Account turned off, and like I said I have to log on after restart where before I didn't. Any answers for this will be much appreciated as I am just a little bit worried about somehow getting locked out of my PC.

Sound Icon missing

digital28 — Mon, 11 Jun 2007 04:18:51 GMT

I noticed with the 3.0 and 3.1 beta that my sound icon is missing, the round grey one. Windows XP Pro

Cheers, Dave

Malware scan false positive, can't retrieve from Quarantine

Frank — Fri, 08 Jun 2007 21:37:30 GMT

I did a malware scan, and it reported and quarantine several files that were verified as non-malware. Specifically, in this case a .zipped cheat for the game Diablo. This is the report.

Malware : Malware found - W32/Multidrp.FY

2007-06-06 4:56:18 PM

Event ID:	BLINK-MAL-205
Severity:	High
Description:	Blink has found a malware application
Virus found:	W32/Multidrp.FY
Item found:	D:\Files for Re-Install\Games\Diablo II Cheats\xtremed2trainerv10.zip
Action:	Repair
Alert:	Yes
Name:	W32/Multidrp.FY
File:	XtremeD2Trainer10.exe
Second Action:	Quarantine
Category:	Trojan

When I try to recover it, I get a pop up with: "This item could not be restored. Please check the logs for information".

When I do "Restore and trust", It seems to (at least in the ui) and then the entire of quarantined items is duplicated in the window.

Does the Beta have a help file?

mtz4of12 — Fri, 08 Jun 2007 20:33:03 GMT

So, am limited user account on win xp home edition running Blink Beta. Hit the Help file and nothing happens. Is there one?

Thanks,

Installation - Crashed on Updating 3.1 Beta

wagnercg80 — Sat, 09 Jun 2007 16:55:20 GMT

Hi! Just wanted to relate an unexpected occurance. I allowed Blink 3.1 beta to uninstall my 3.0 and proceed with installation. When it got to the part about updating 3.1 beta during installation, the system rebooted itself. The Microsoft error/crash tool reported that an exception occured but did not offer any other information. My 3.0 installation did not crash during installation.

Thanks,

Chris

Problem caused by Device Driver

You received this message because a device driver installed on your computer caused the Windows operating system to stop unexpectedly. This type of error is referred to as a "stop error." A stop error requires you to restart your computer.

More information

Problem report summary

Problem type	Windows stop error (a message appears on a blue screen with error code information)
Solution available?	No
What does this problem mean?	Windows has encountered a problem it cannot recover from and it needs to be restarted
Cause	Unknown
Computer symptoms	A message appears on a blue screen with error code information (for example: 0x0000001E, KMODE_EXCEPTION_NOT_HANDLED)
Additional steps for you to take	Please continue to send problem reports so analysts at Microsoft can study and try to correct the problem as quickly as possible

Technical Information

How to Troubleshoot Hardware and Software Driver Problems in Windows XP (Q322205)

blinksvc.exe uses 100% of CPU

RDavison — Fri, 08 Jun 2007 02:44:29 GMT

I'm running the beta with the latest updates installed under w2k. I've noticed that blinksvc.exe uses all of the CPU under a couple of different circumstances. 1st running itunes when I'm downloading video podcasts.

2nd when I'm installing ms windows patches.

Simply disabling all of the services does not cause it to release the CPU. Blink must be shutdown in order to get the system performance back up again.

On a side note I have also experienced high latency while running Blink with WOW. (this was reported by someone else on the old forum). I'd appreciate hearing if there are workarounds or fixes for either of these issues.

Thanks,

Rod.

No icon but loaded---extra low priority

cesar — Fri, 08 Jun 2007 09:02:58 GMT

When the user tries to start blink but its already started you should reload the icon in systray

Its probably just because explorer crashed(or some minor error) in my computer, anyway i had to shutdown blink to get the icon back