VirtualDubMod and Symantec Corporate AntiVirus 10.0.0.359 problem [Archive]

vladlp

25th April 2005, 17:18

Just install Symantec Corporate AntiVirus 10.0.0.359
and when I start CompCheck in GK if file "c:\Program Files\GordianKnot\_.avi" already exists then VirtualDubMod 1.5.10.1 generate error:
FastWriteStream: couldn't open "C:\PROGRA~1\GORDIA~1\_.avi": The operation completed successfully..
I have also check start script generated by GK for CompCheck with VirtualDub 1.6.4 and received completly the same error:(

If I manualy delete the file _.avi - everesyng is ok, but just for one time - then I have to delete it every time before start CompCheck:(
If I disable autoprotect - then everesing work fine.
Already try to put whole directory with GK to ignore folder - does not help:(

What it can be:confused:

srotman

29th April 2005, 03:15

I can confirm this problem. I've tried to encode a video twice now with the same error, that "the file already exists" or something like that (sorry i didn't write down the exact error) and it happens at some point during the first pass of encoding. I wasn't sure what was causing it, but now that I think of it, I too JUST installed Symantec Antivirus Corporate 10, so I'm sure it's no coincidence.

jggimi

29th April 2005, 15:52

as its an iteroperability bug report

vladlp

2nd May 2005, 09:07

as its an iteroperability bug report
Yes, because if real time scanner is swich off then everesyng works perfect. Also i have test it on few PC's with xp sp2 and Symantec 10 - on all of them the same problem.

PS: Probably today i will have time, then I try to compile VirtualDubMod in debug mode and trace till error occurs.

Ok... just find the solution:
in the file FastWriteStream.c function FastWriteStream::open look so

bool FastWriteStream::open(const wchar_t *pFilename, DWORD flags) {
if (GetVersion() & 0x80000000) {
hFile = CreateFileA(VDFastTextWToA(pFilename), GENERIC_READ | GENERIC_WRITE, FILE_SHARE_WRITE, NULL, OPEN_ALWAYS, flags, NULL);
DWORD err = GetLastError();
VDFastTextFree();
SetLastError(err);
} else {
hFile = CreateFileW(pFilename, GENERIC_READ | GENERIC_WRITE, FILE_SHARE_WRITE, NULL, OPEN_ALWAYS, flags, NULL);
}

return hFile != INVALID_HANDLE_VALUE;
}

but I think monitor from symantec required read access, so if change

hFile = CreateFileW(pFilename, GENERIC_READ | GENERIC_WRITE, FILE_SHARE_WRITE, NULL, OPEN_ALWAYS, flags, NULL);

to

hFile = CreateFileW(pFilename, GENERIC_READ | GENERIC_WRITE, FILE_SHARE_WRITE | FILE_SHARE_READ , NULL, OPEN_ALWAYS, flags, NULL);

it solve the problem.

srotman

2nd May 2005, 18:06

unfortunately i dont understand the whole re-coding process as my programming is limited. so i just downgraded from symantec 10 to 9. so do i have to wait for a new version of autogk or virtualdubmod based on your findings?

len0x

2nd May 2005, 19:12

Moved to VDubMod forum.

P.S. Although as vdubmod is not being developed atm - its unlikely that there will be any fixed releases.

vladlp

6th May 2005, 17:12

I have just recompile VirtualDubMod with fix above.
Just replace VirtualDubMod.exe with this one:
_http://rapidshare.de/files/1607894/VirtualDubMod.zip.html
(As I have now other hosting I put it on rapidshare.de. To download just select free at the bottom of the page wait for ... seconds and press the link to download)

now it have to work.

In case of problem report it here...

PS: The size of exe file is mach bigger, it's because I have not ups to pack it.

theantipop

17th August 2005, 23:43

You are awesome man! Oh the beauties of OSS. Worked wonderfully for me.

metapy

23rd August 2005, 19:34

I too am also using Norton Corporate Edition and ran into this problem. The difference is I had it completely disabled, no realtime scanning, no service loaded when I ran into this problem. The fixed EXE cured things, but I think a more permanent fix needs to be implemented into AGK

ptaker

26th March 2006, 18:18

Does anyone have a definite answer to the problem of the Fast Write stream couldn't open file X because it is being used by another process. Nothing else was running except the AutoGK and Symantec.
------------------------------------------------------------------
I have tried to convert a DVD to avi using the latest autoGK 2.27. I did replace VirtualDubMod.exe with this one:
_http://rapidshare.de/files/1607894/VirtualDubMod.zip.html as suggested to get rid of the "Fast write couldn't open file" problem. Result: The autoGK passed the first of two passes without a problem. Then on the second pass, it bombed with the same error message everyone else is complaining about. I do have Corporate Symantec version 10.0.1.1000. I did not disable Symantec when running the AutoGK program.

I have made the autogk log available to you at www.artray.com/autogk if you need to look at it.

Help me here please. I am new at this program. It goes without saying this but is not good for a new inexperienced user.

http://forum.doom9.org/images/smilies/thanks-t.gif
:thanks:

vinoda

17th June 2006, 10:50

Thanks too!

gardar

30th August 2006, 22:37

can anyone please repost the fix? The download link at rapidshare has expired...

teqnilogik

31st August 2006, 23:13

I have reposted the fix here:

http://www.teqnilogik.com/files/vdubmod_sav10_fixed_exe.zip

Also, it appears this bug may have been fixed in VirtualDub according to this link:

http://www.virtualdub.org/blog/pivot/entry.php?id=51

abbadon

9th January 2007, 23:06

I've reformatted and need the fixed vdub, both links are broken. Can some one repost somewhere?

foxyshadis

15th January 2007, 12:44

It should be fixed in the latest virtualdub. Try downloading that and report back (or report to phaeron over there) if it still doesn't work.

(Second link works for me, btw. Might've been a temporary thing.)

abbadon

15th January 2007, 19:44

Hmm can't download the fixed vdubmod.exe from either
http://rapidshare.de/files/1607894/VirtualDubMod.zip.html
or
http://www.teqnilogik.com/files/vdubmod_sav10_fixed_exe.zip

VirtualDub may have fixed the problem, but seeing how AutoGK uses VirtualDubMod it doesn't help.

leecole

7th June 2007, 15:21

I'm with others that have posted. I use AutoGK which uses VirtualDubMod, so the fact that it is fixed in VirtualDub doesn't do it for me. Both links fail!!!!

dwm4444

9th June 2007, 05:35

foxyshadis is correct above.

According to the changelog at free-codecs.com, the fix was incorporated into VirtualdubMod version 1.5.10.2 back in August of 2005.

Quoted from that page:

- Fixed: possible issue with Symantec Corporate AntiVirus 10
Thanks to vladlp : http://forum.doom9.org/showthread.php?t=93554

Link to the page:
http://www.free-codecs.com/download/VirtualDubMod.htm

leecole

11th June 2007, 19:19

rdb4133

24th September 2007, 08:01

I am having the same issue also and I am not running Symantec Corp AV 10. I am running AVG Free.

poonpower

9th March 2008, 06:58

I have the newest version of VirtualDubMod, 1.7.8
the one that comes with the Autogk is 1.5.4.1
if i just replace it the autogk wont work.
how do i get autogk to work with the newest virtualdub

setarip_old

9th March 2008, 08:52

Hi!I have the newest version of VirtualDubMod, 1.7.8I believe you are mistaken - and you actually have v.1.7.8 of the standard VirtualDub, not VirtualDubMod...

Taurus

9th March 2008, 11:04

I have the newest version of VirtualDubMod, 1.7.8
the one that comes with the Autogk is 1.5.4.1
if i just replace it the autogk wont work.
how do i get autogk to work with the newest virtualdub
You can't. Newer is not always better for a specific task....
VirtualDubMod and VirtualDub are two different shoes.

poonpower

12th March 2008, 18:58

ok thanks guys, I solved the problem.
Do you have any idea why the final size is at 255mb when I preset the size to be 350mb?

thank you

den78

15th March 2008, 22:30

did v1.5.4.1 gave u any problems? if not, why do you have a need for a newer version?
4 me everything works perfect, & trust me, len0x knows what he's doing ;)

grgre

23rd May 2008, 09:50

Had the same problem with the AV product I'm using and it was a pain - till that is I actually bothered to seek for a solution myself.

Well, I simply upgraded the VirtualDubMod version that comes with the installation of AutoGk with the latest found here

http://kent.dl.sourceforge.net/sourceforge/virtualdubmod/VirtualDubMod_1_5_10_2_b2542.zip

and problem solved. I'm surprised to say the least that the author of AutoGK does not even suggest this in his forum.

Hope that helps.

Taurus

23rd May 2008, 16:16

Back in the good ol days of AutoGk development, lenOx, the author of AutoGk, decided to use VirtualdubMod 1.5.4.1,
because any other version, older or newer gave trouble.
It's the most stable version floating around....
So, blame Symantec for not updating there virus definitions in the meantime..
Sometimes it's hard for the free software developers to have a stand against these monster companies.
I guess its the packer used in Virtualdubmod, which is triggering your antivirus.
But cant remember exactly, it's somewhere lost in history :p

grgre

24th May 2008, 16:32

It doesn't trigger any antivirus - all AV products do real-time scanning and lock files. Unfortunately, the virtualdubmod version packed in autogk aborts during the second pass of encoding.

In any case, as I said this thing is no longer an issue if you install the latest version of virtualdubmod from the link I provided above. What I find really bad though, is the fact that the author does not offer any solution whatsover although there have been numerous posts all over regarding this issue.

Just my 2c.

LoRd_MuldeR

24th May 2008, 16:45

VirtualDubMod is a dead project, there is no Author working on it any more...

grgre

24th May 2008, 21:51

As I said in my 1st post above, Im talking about the author of autogk - lenox whatever his internet name is. Not the author of VirtualDubMod.

Taurus

25th May 2008, 08:07

@ grgre:
Please stop posting about this subject.
Look here.
At www.virustotal.com you get:
AhnLab-V3 2008.5.22.1 2008.05.23 -
AntiVir 7.8.0.19 2008.05.24 -
Authentium 5.1.0.4 2008.05.23 -
Avast 4.8.1195.0 2008.05.25 -
AVG 7.5.0.516 2008.05.24 -
BitDefender 7.2 2008.05.25 -
CAT-QuickHeal 9.50 2008.05.24 -
ClamAV 0.92.1 2008.05.25 -
DrWeb 4.44.0.09170 2008.05.25 -
eSafe 7.0.15.0 2008.05.22 suspicious Trojan/Worm
eTrust-Vet 31.4.5817 2008.05.23 -
Ewido 4.0 2008.05.24 -
F-Prot 4.4.4.56 2008.05.23 -
F-Secure 6.70.13260.0 2008.05.23 -
Fortinet 3.14.0.0 2008.05.25 -
GData 2.0.7306.1023 2008.05.23 -
Ikarus T3.1.1.26.0 2008.05.25 -
Kaspersky 7.0.0.125 2008.05.25 -
McAfee 5302 2008.05.23 -
Microsoft 1.3520 2008.05.25 -
NOD32v2 3128 2008.05.23 -
Norman 5.80.02 2008.05.23 -
Panda 9.0.0.4 2008.05.24 -
Prevx1 V2 2008.05.25 -
Rising 20.45.42.00 2008.05.23 -
Sophos 4.29.0 2008.05.25 -
Sunbelt 3.0.1123.1 2008.05.17 -
Symantec 10 2008.05.25 -
TheHacker 6.2.92.318 2008.05.23 -
VBA32 3.12.6.6 2008.05.24 -
VirusBuster 4.3.26:9 2008.05.24 -
Webwasher-Gateway 6.6.2 2008.05.25 -
Only one (eSafe) is complaining.
And my first guess was allright, it's the packer which triggered the AV. (UPX 2.90 [LZMA])

LoRd_MuldeR

25th May 2008, 16:32

Suspecting your innocent programs of containing "Malware" just because it's UPX'd is a common malpractice :rolleyes:
I understand that they have to use some kind of heuristics in order to detect "new" Trojans/Worms, but this behavior is just stupidity!
When an AV software is complaining all the time, even for clearly innocent software, the user won't put much trust in the result.
This leads to the user ignoring the AV software's warnings, even if there is a legitimate detection...

IMO they should clearly(!) distinguish between "real" Trojan/Worm detection and detection of "suspicious" files.
In the latter case they must tell the user that the file might contain malware, but they must also say that most probably the file is absolutely clean!

Hinata

14th August 2008, 03:25

I'm having this problem "FastWriteStream: couldn't open "C:\PROGRA~1\GORDIA~1\_.avi": The operation completed successfully.. "

And all the links on this thread seem to be dead. can anyone help? thanks

DarkZell666

17th August 2008, 16:39