Sigh, Finally, traced my “Nonpaged Pool” memory
leak down to mpfirewall.sys. Also, in process, I found
out that mpfirewall is NOT a microsoft certified
driver, and instead of using unique TAGs to allocate memory
which everyone does, they use the default “Ddk”. Very
displeased with McAfee at this point.
xxxxx@sbcglobal.net wrote:
Sigh, Finally, traced my “Nonpaged Pool” memory
leak down to mpfirewall.sys. Also, in process, I found
out that mpfirewall is NOT a microsoft certified
driver, and instead of using unique TAGs to allocate memory
which everyone does, they use the default “Ddk”. Very
displeased with McAfee at this point.
We stopped recommending McAfee to our clients many years ago, when we
discovered that it was virtually impossible to uninstall. We now
recommend Symantec/Norton.
–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.
“Tim Roberts” wrote in message news:xxxxx@ntdev…
>
> We stopped recommending McAfee to our clients many years ago, when we
> discovered that it was virtually impossible to uninstall. We now
> recommend Symantec/Norton.
>
Of course with all the hooking and the stuff it does to stop debugging,
Symantec/Norton is no real improvement.
–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
http://www.windrvr.com
Remove StopSpam from the email to reply
> ----------
From: xxxxx@lists.osr.com[SMTP:xxxxx@lists.osr.com] on behalf of Tim Roberts[SMTP:xxxxx@probo.com]
Reply To: Windows System Software Devs Interest List
Sent: Tuesday, September 26, 2006 1:27 AM
To: Windows System Software Devs Interest List
Subject: Re: [ntdev] McAfee Personal Firewall (mpfwadmin.sys) found the cause of my memory leakWe stopped recommending McAfee to our clients many years ago, when we
discovered that it was virtually impossible to uninstall. We now
recommend Symantec/Norton.
I guess you don’t read ntfsd 
Best regards,
Michal Vodicka
UPEK, Inc.
[xxxxx@upek.com, http://www.upek.com]
I used to use Zone Alarm (free version) until they went to version 5 which screwed up a lot of things and when you “disabled” it, it still stayed resident, you had to uninstall it and scour the registry to get rid of it. Then I went to SyGate (again another free version) it was fine until I found out they stopped supporting it in 2004 because Symantec/McAfee/Norton/DoesItMatter bought it and killed it. I am back to Zone Alarm, version 6.x (free version), it appears to work OK. I don’t know if they have memory leaks issues, but if you always download the free version and see if you run into the same problem.
I spent a while examining the interaction of both with the system, and I
would agree with Don that the both suck equally. Symantec is not
exactly easy to uninstall either.
>> xxxxx@acm.org 2006-09-25 19:31 >>>
“Tim Roberts” wrote in message news:xxxxx@ntdev…
>
> We stopped recommending McAfee to our clients many years ago, when
we
> discovered that it was virtually impossible to uninstall. We now
> recommend Symantec/Norton.
>
Of course with all the hooking and the stuff it does to stop debugging,
Symantec/Norton is no real improvement.
–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
http://www.windrvr.com
Remove StopSpam from the email to reply
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer
Martin O’Brien wrote:
I spent a while examining the interaction of both with the system, and I
would agree with Don that the both suck equally. Symantec is not
exactly easy to uninstall either.
So what do you use? I don’t run any real-time virus scanner, instead
relying on (a) rudimentary checking in our own mail server, (b) a mail
reader that is not Outlook, and (c) good habits to protect me, but most
of our clients do not meet any of those criteria.
–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.
“Tim Roberts” wrote in message news:xxxxx@ntdev…
> So what do you use? I don’t run any real-time virus scanner, instead
> relying on (a) rudimentary checking in our own mail server, (b) a mail
> reader that is not Outlook, and (c) good habits to protect me, but most
> of our clients do not meet any of those criteria.
>
Tim,
I use NOD32 it is clean and solid, and it has one of the fast response
times for ugrading the database for new threats.
–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
http://www.windrvr.com
Remove StopSpam from the email to reply
I use f-prot because it doesn’t suck worse than any of the others and
its licensing terms are good (i.e. cheap.) I had norton on my dev system
for a while and had to evict it for the usual reasons. A year later I
can only attribute one crash to f-prot. My Mcafee experience is that I
have to turn off its on-demand nonsense as it routinely kills my system.
As Tim notes, with a decent firewall and reasonable email filtering in a
corporate environment, on-demand filesystem filters may not be not
critical.
The only systems I deal with that get routinely whacked are my kid’s
systems and they get whacked by spyware/malware web downloads posing as
shiny objects of interest. Anti-virus software does not do much in this
area. XP system restore points on the other hand work perfectly.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Don Burn
Sent: Monday, September 25, 2006 9:10 PM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] McAfee Personal Firewall (mpfwadmin.sys) found the
cause of my memory leak
“Tim Roberts” wrote in message news:xxxxx@ntdev…
> So what do you use? I don’t run any real-time virus scanner, instead
> relying on (a) rudimentary checking in our own mail server, (b) a mail
> reader that is not Outlook, and (c) good habits to protect me, but
most
> of our clients do not meet any of those criteria.
>
Tim,
I use NOD32 it is clean and solid, and it has one of the fast
response
times for ugrading the database for new threats.
–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
http://www.windrvr.com
Remove StopSpam from the email to reply
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer
TIM:
I don’t use anything on my local machine. Obviously, I wouldn’t
recommend that anyone do this, but, that being said, I’ve never had a
problem in the roughly ten years I’ve been out of college and working.
I think the major reason why is that I, with very rare exceptions, do
not use Word or Excel.
MM
>> xxxxx@probo.com 2006-09-25 21:05 >>>
Martin O’Brien wrote:
I spent a while examining the interaction of both with the system, and
I
would agree with Don that the both suck equally. Symantec is not
exactly easy to uninstall either.
So what do you use? I don’t run any real-time virus scanner, instead
relying on (a) rudimentary checking in our own mail server, (b) a mail
reader that is not Outlook, and (c) good habits to protect me, but
most
of our clients do not meet any of those criteria.
–
Tim Roberts, xxxxx@probo.com
Providenza & Boekelheide, Inc.
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer
The irony of the situation is that by being all but impossible to
uninstall, McAfee and especially Norton border on constituting viri
themselves; they just lack intent.
>> xxxxx@stratus.com 2006-09-26 09:43 >>>
I use f-prot because it doesn’t suck worse than any of the others and
its licensing terms are good (i.e. cheap.) I had norton on my dev
system
for a while and had to evict it for the usual reasons. A year later I
can only attribute one crash to f-prot. My Mcafee experience is that I
have to turn off its on-demand nonsense as it routinely kills my
system.
As Tim notes, with a decent firewall and reasonable email filtering in
a
corporate environment, on-demand filesystem filters may not be not
critical.
The only systems I deal with that get routinely whacked are my kid’s
systems and they get whacked by spyware/malware web downloads posing
as
shiny objects of interest. Anti-virus software does not do much in
this
area. XP system restore points on the other hand work perfectly.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Don Burn
Sent: Monday, September 25, 2006 9:10 PM
To: Windows System Software Devs Interest List
Subject: Re:[ntdev] McAfee Personal Firewall (mpfwadmin.sys) found the
cause of my memory leak
“Tim Roberts” wrote in message news:xxxxx@ntdev…
> So what do you use? I don’t run any real-time virus scanner,
instead
> relying on (a) rudimentary checking in our own mail server, (b) a
mail
> reader that is not Outlook, and (c) good habits to protect me, but
most
> of our clients do not meet any of those criteria.
>
Tim,
I use NOD32 it is clean and solid, and it has one of the fast
response
times for ugrading the database for new threats.
–
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
http://www.windrvr.com
Remove StopSpam from the email to reply
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer
—
Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer