Frequent Crashes After False Virus Detection - DSD+ FastLane v2.242

[AB9NN]

My Webroot virus prevention software identified FMP24 as infected and quarantined it. I released it from quarantine as it was a false positive and also copied in the original files from last downloads for both FMP24 and DSDPlus. Now, I experience quite frequent crashes that take down both FMP24 and DSDPlus and all open windows associated with FastLane, latest version. Has anyone else experienced this and what are best practices for diagnosis and remedy?

 

[wgbecks]

I am not specifically familiar with Webroot but you should be able to create exceptions for both FMP24 and DSDPlus. It shouldn't be necessary,
but you may also have to refresh/replace these files in your DSDPlus folder on the odd chance one of them were somehow corrupted as a result of the quarantine process.

 

[mtindor]

Get rid of Webroot. I mean who uses it, besides you? That's some obscure stuff. If you are running Windows 10, Windows Defender is great AV software. Personally, I feel the days of using third party AV is silly on a Windows 10 system.

But if you are insistant upon using it (and I have a feeling you are), listen to what @wgbecks said about adding exceptions for the DSDPlus applications and the DSDPlus folder.

mike

 

[TheButcher]

Panda works good for me... And it is free... Works with DSD+ just fine.

 

[AB9NN]

I run three dongles in scan mode. After a year or so I began receiving frequent crashes and the following error messages. The three dongles run out of three seperate folders and scan lists. When on crashes they all crash and they all have the same error messages other than the port numbers. I suspected virus software and whitelisted the folders. I suspected hardware and tried to isolate one dongle or one port. I run the three from a powered USB hub. I bought a new one. Nothing got better. I suspected the port the USB hub was at fault so I moved to a different USB port. Nothing improved. I suspected Windows Firewall and I made sure that FMP24 was whitelisted. I added DSDPlus to the whitelist also - for each folder. Nothing has improved. Thoughts? The scan process works for some time and actively decodes audio quite nicely until it crashes at some point - usually when not decoding. It also crashes when just one dongle is tuned to just one frequency for a good amount of time. All USB ports are USB 3 I believe.

DSD+ Event Log
"TCP link lost"

1R DSD+ Window
"Initiating TCP connection to 127.0.0.1:20009...
TCP connect error = 10061
[No connection could be made because the target machine actively refused it]"

 

[DRL-XM43]

Do you have them all on different port numbers?

 

[AB9NN]

Do you have them all on different port numbers?

Yes, and all port numbers match from the FMP24 line to the DSDPlus line in my batch files. Port numbers are:
-o20001
-o20007
-o20009

 

[wgbecks]

You didn't mention if you're using AV or Internet Security software. I've seen similar issues with Bitdefender and PC Matic. I'd suggest using Wireshark to capture the loopback adapter, but with your crashes being so infrequent, this is not a practical approach.

Are you aware of any particular events preceding the crashes? More importantly, can you these events with decoding of any particular system? The reason I ask, prior to 2.242, I experienced intermittent crashes while scanning a particular DMR system. The DSDPlus development team quickly analyzed the problem once I was able to capture raw audio associated with these events. There was apparently some function or opcode broadcast periodically that caused DSDPlus to vapor lock!

Bill

 

[AB9NN]

You didn't mention if you're using AV or Internet Security software. I've seen similar issues with Bitdefender and PC Matic. I'd suggest Wireshark traces of the Windows loopback adapter but your crashes are so infrequent that this is not practical.

Are you aware of any particular events preceding the crashes? More importantly, can you possibly correlate the crashes with decoding of any particular system? The reason I ask is that prior to DSDPlus FL 2.242, I was experiencing intermittent crashes while scanning a DMR system whereby a bug existed in DSDPlus that caused the crash when decoding a particular function (opcode) on that system.

I am using WebRoot security software and have whitelisted the folders that these programs run from. The crashes are of variable frequency, sometimes very frequently. It doesn't seem to be associated with any one mode. Some are DMR but also I had just tuned FMP24 to a local 2 meter ham frequency on FM and that crashed several times as well. Doesn't seem associated with any decode activity or other PC activity like game playing, etc.. Very frustrating. Thought of replacing all the dongles one at a time but since they all crash at once I believe it's a software issue somewhere...

 

[wgbecks]

One other question... How is the external USB Hub powered? Does it have it's own power supply or is it powered from the PC? Was the previous HUB powered the same way? Just an off chance there might be a power rail issue if powered from the PC. Are there any indications other that DSDPlus that Windows itself dies? If nothing else, remove or fully disable Webroot for a couple of days to see if that has any impact on the situation.

 

[AB9NN]

Both were powered via an external power supply (a wall wart). Windows itself and all other programs seem to operate as expected. I will try removing WebRoot for a time, although it was installed for a year when it was working fine. I guess there could be some new virus definition that is now providing the false positive or some memory conflict. Thanks for the questions!

 

[wgbecks]

This is most interesting... It sure seems as if something is either causing loss of data with the USB bus or the IP communications between FMP24 and DSDPlus. Please post your results after disabling Webroot for a few days.

Good luck!

 

[AB9NN]

This is most interesting... It sure seems as if something is either causing loss of data with the USB bus or the IP communications between FMP24 and DSDPlus. Please post your results after disabling Webroot for a few days.

Good luck!

I disabled Webroot for half a day and there were no crashes. When I restarted Webroot they crashed again soon after. I am consulting with Best Buy Geek Squad to get the issue resolved. They did say that the lame_enc.dll should also be whitelisted. So far it is not resolved but I am now convinced it is Webroot that is the culprit.

 

[a417]

I am consulting with Best Buy Geek Squad to get the issue resolved.

Did they sell you webroot? I was surprised it's still out there, haven't heard of it in quite some time.

 

[AB9NN]

Did they sell you webroot? I was surprised it's still out there, haven't heard of it in quite some time.

Yes, they did. Some years ago. I was escalated to a higher level of support and after some time on hold I was told my choices were to run DSD+ Fastlane without Webroot protection or to consult with the Fastlane software authors since Webroot did not notify me that it blocked anything with a pop-up. They wondered if there were other files that needed to be whitelisted other than the three I already have whitelisted. Thinking of trying different security software but that comes at a cost to purchase.

 

[wgbecks]

You could try loading and running Process Monitor (Process Monitor - Windows Sysinternals) just prior to launching DSDPlus after enabling Webroot as a tool to trap exactly what it is that triggers the crash. This is a very handy tool but does have a bit of a learning curve initially if you haven't used it before.

 

[DRL-XM43]

Use the free and pretty decent free Windows security programs. I do an occasional scan with other products to double check - no issues.

 

[AB9NN]

Glad to report that I deactivated and removed Webroot security software and installed Norton. It detected DSD+ as a virus and quarantined it. I was glad that, with one click for each instance, I was able to restore the files and whitelist them at the same time. I have been scanning all afternoon without any more crashes. Problem seems to have been solved.

 

[a417]

if you put all the DSDs in the same root folder, you don't have to whitelist each one or forget one if you add it.

I also prefer to do that, as I have separate ACLs/perms and backup preferences for the decoding software root folder. I don't want my rsync backup to be bogged down every night with all the live recordings that DSD+ & op25 does - no real loss if I lose them as the are just for fun & projects.

 

[wgbecks]

Jon,

Glad to hear that you've got it worked out and thanks for bringing this to the forum.

Bill