Little issue with 4.8.1169 [zombie processes]

well this happened when i try disable Avast! services thru services list , same rnd/rare like with beta
for some reason it takes like 5 times longer than when this bug not happens (both stopping of each component and starting)
these ‘ghosts’ are then unkillable …

Windows XP SP3RC2 Pro (i got that ghost bug in SP2 too but that was 4.8 beta, not yet with final)

http://img441.imageshack.us/img441/5751/avast48bugcb3.jpg

Interesting indeed.

  1. Do you have the higlighliting options in ProcessExplorer modified in some way? What does the grey color supposed to mean?
  2. if you click any of these zombie processes, and go to the Threads page, are there any threads shown?

Alternatively, we can create a full dump of the system and have it analyzed here with a debugger.

Thanks
Vlk

  1. default colors and it mean the process is suspended (you can check it manually by RMB on some process in PE and choosing suspended (then use resume to return)), ofc it fails with these ghosts
  2. only one thread [b] TID : 1688 / 2332 / 2876 | all got same Start Address: 0x7c8106f5

Hmm, interesting…

A full dump would come handy, that’s for sure.
Would you be willing to try it?

Instructions are here: http://support.avast.com/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=71

Thanks
Vlk