| Subject: WinFS Stores and VirusScan Ent conflict |
| Group: microsoft.public.windows.developer.winfx.winfs |
| Date: 12/19/2005 3:44:02 PM |
| From: =?Utf-8?B?c3RlcGhjcmF3?= [Email Address Protection] |
I am a tester at McAfee and installed WinFS Beta 1 onto a WinXPSP2 machine with all the latest updates, including .NET Framework 2.0. After installing the latest version of VirusScan Enterprise, then opening Windows Explorer and double-clicking on the WinFS Stores folder VSE's Buffer Overflow protection catches the following file with a heap buffer overflow: dllhost.exe.ADVAPI32:RegOpenKeyExW When I close the alert window the Windows Explorer window has crashed and can only be closed via the Task Manager. With mcshield.exe, our background scanner, disabled the problem does not occur. As well, if I add dllhost.exe to the list of exceptions in the VSE Buffer Overflow Properties, the problem does not occur, so it is clearly an issue between the two. I noticed that dllhost.exe is loaded when I double-click on the WinFS Stores folder. I have attempted to attach Windbg to explorer.exe, dllhost.exe and mcshield.exe, separately, to try and grab some debug spew for this issue but am coming up empty. Any ideas would be helpful. |
| Back |