Closed Bug 1251020 Opened 8 years ago Closed 6 years ago

crash in eoppmonitor.dll@0x9dd6 with ESET & Malwarebytes Anti-Exploit on sync signup page

Categories

(External Software Affecting Firefox :: Other, defect)

Product:
External Software Affecting Firefox
Component:
Other
Platform:
x86
Windows NT
Type:
defect
Priority:
Not set
Severity:
critical

Tracking

(firefox47 wontfix, firefox48 wontfix, firefox-esr45 wontfix)

Status:
RESOLVED WONTFIX
Tracking Flags:
Tracking Status
firefox47 --- wontfix
firefox48 --- wontfix
firefox-esr45 --- wontfix

People

(Reporter: philipp, Unassigned)

References

Details

(Keywords: crash, reproducible, Whiteboard: [AV:Malwarebytes][AV:ESET])

Crash Data

This bug was filed from the Socorro interface and is 
report bp-b55d4fcf-734c-4dd3-8cd9-46b2d2160224.
=============================================================
Crashing Thread (8)
Frame 	Module 	Signature 	Source
Ø 0 	eoppmonitor.dll 	eoppmonitor.dll@0x9dd6 	
Ø 1 	eoppmonitor.dll 	eoppmonitor.dll@0xa83d 	
Ø 2 	eoppmonitor.dll 	eoppmonitor.dll@0xaf6f 	
Ø 3 	eoppmonitor.dll 	eoppmonitor.dll@0xace9 	
Ø 4 	mbae.dll 	mbae.dll@0xd81c 	
Ø 5 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 6 	mbae.dll 	mbae.dll@0xd81c 	
Ø 7 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 8 	mbae.dll 	mbae.dll@0xd81c 	
Ø 9 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 10 	mbae.dll 	mbae.dll@0xd81c 	
Ø 11 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 12 	mbae.dll 	mbae.dll@0xd81c 	
Ø 13 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 14 	mbae.dll 	mbae.dll@0xd81c 	
Ø 15 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 16 	mbae.dll 	mbae.dll@0xd81c 	
Ø 17 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 18 	mbae.dll 	mbae.dll@0xd81c 	
Ø 19 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 20 	mbae.dll 	mbae.dll@0xd81c 	
Ø 21 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 22 	mbae.dll 	mbae.dll@0xd81c 	
Ø 23 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 24 	mbae.dll 	mbae.dll@0xd81c 	
Ø 25 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 26 	mbae.dll 	mbae.dll@0xd81c 	
Ø 27 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 28 	mbae.dll 	mbae.dll@0xd81c 	
Ø 29 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 30 	mbae.dll 	mbae.dll@0xd81c 	
Ø 31 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 32 	mbae.dll 	mbae.dll@0xd81c 	
Ø 33 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 34 	mbae.dll 	mbae.dll@0xd81c 	
Ø 35 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 36 	mbae.dll 	mbae.dll@0xd81c 	
Ø 37 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 38 	mbae.dll 	mbae.dll@0xd81c 	
Ø 39 	eoppmonitor.dll 	eoppmonitor.dll@0xad05 	
Ø 40 	mbae.dll 	mbae.dll@0xd81c 	
Ø 41 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 42 	mbae.dll 	mbae.dll@0xd81c 	
Ø 43 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 44 	mbae.dll 	mbae.dll@0xd81c 	
Ø 45 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 46 	mbae.dll 	mbae.dll@0xd81c 	
Ø 47 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 48 	mbae.dll 	mbae.dll@0xd81c 	
Ø 49 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 50 	mbae.dll 	mbae.dll@0xd81c 	
Ø 51 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 52 	mbae.dll 	mbae.dll@0xd81c 	
Ø 53 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 54 	mbae.dll 	mbae.dll@0xd81c 	
Ø 55 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 56 	mbae.dll 	mbae.dll@0xd81c 	
Ø 57 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 58 	mbae.dll 	mbae.dll@0xd81c 	
Ø 59 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 60 	mbae.dll 	mbae.dll@0xd81c 	
Ø 61 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 62 	mbae.dll 	mbae.dll@0xd81c 	
Ø 63 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 64 	mbae.dll 	mbae.dll@0xd81c 	
Ø 65 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 66 	mbae.dll 	mbae.dll@0xd81c 	
Ø 67 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 68 	mbae.dll 	mbae.dll@0xd81c 	
Ø 69 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 70 	mbae.dll 	mbae.dll@0xd81c 	
Ø 71 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 72 	mbae.dll 	mbae.dll@0xd81c 	
Ø 73 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 74 	mbae.dll 	mbae.dll@0xd81c 	
Ø 75 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 76 	mbae.dll 	mbae.dll@0xd81c 	
Ø 77 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 78 	mbae.dll 	mbae.dll@0xd81c 	
Ø 79 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 80 	mbae.dll 	mbae.dll@0xd81c 	
Ø 81 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 82 	mbae.dll 	mbae.dll@0xd81c 	
Ø 83 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 84 	mbae.dll 	mbae.dll@0xd81c 	
Ø 85 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 86 	mbae.dll 	mbae.dll@0xd81c 	
Ø 87 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 88 	mbae.dll 	mbae.dll@0xd81c 	
Ø 89 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 1015 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 1016 	mbae.dll 	mbae.dll@0xd81c 	
Ø 1017 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 1018 	mbae.dll 	mbae.dll@0xd81c 	
Ø 1019 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 1020 	mbae.dll 	mbae.dll@0xd81c 	
Ø 1021 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 1022 	mbae.dll 	mbae.dll@0xd81c 	
Ø 1023 	eOppMonitor.dll 	eOppMonitor.dll@0xad05 	
Ø 1024 	mbae.dll 	mbae.dll@0xd81c

this is a low level windows crash, but it comes up on the sumo forums every now and then and is easily reproducible:
1. install a trial version of malwarebytes anti-exploit from https://malwarebytes.org/antiexploit/
2. install a trial version of eset from https://www.eset.com/int/download/thank-you-eset-smart-security/file/13935/ (use the default parameters during installation)
3. open a fresh firefox profile, click on the menu > sign-in to sync
4. firefox crashes

the modules from ESET (eOppMonitor.dll) & malwarebytes anti-exploit (mbae.dll) seem to get in each others way here. not sure if something can be done from our side to address it, other than outreach to those two vendors...
i approached eset & malwarebytes about the issue and heard back from malwarebytes that they were able to reproduce the issue and looking into testing and releasing a fix for it.
(In reply to philipp from comment #1)
> i approached eset & malwarebytes about the issue and heard back from
> malwarebytes that they were able to reproduce the issue and looking into
> testing and releasing a fix for it.

Did we ever hear back from them (or do have a contact?) In looking at Bug 1229252, this seems to be the same or a similar crash issue in that bug.
i just went through their customer support form & got an answer fairly soon. (however they didn't address the issue on a general level but gave me instructions how to configure their program to avoid interference). so no particular contact unfortunately...
things haven't improved so far.
Crash Signature: [@ eoppmonitor.dll@0x9dd6] [@ eoppmonitor.dll@0xa701] [@ eoppmonitor.dll@0xa801] [@ eoppmonitor.dll@0xa704] [@ eoppmonitor.dll@0xa702] [@ eoppmonitor.dll@0xa804] → [@ eoppmonitor.dll@0x9dd6] [@ eoppmonitor.dll@0xa701] [@ eoppmonitor.dll@0xa801] [@ eoppmonitor.dll@0xa704] [@ eoppmonitor.dll@0xa702] [@ eoppmonitor.dll@0xa804] [@ eoppmonitor.dll@0xa821]
status-firefox47: --- → affected
Crash volume for signature 'eoppmonitor.dll@0xa821':
 - nightly (version 50): 0 crash from 2016-06-06.
 - aurora  (version 49): 0 crash from 2016-06-07.
 - beta    (version 48): 13 crashes from 2016-06-06.
 - release (version 47): 83 crashes from 2016-05-31.
 - esr     (version 45): 5 crashes from 2016-04-07.

Crash volume on the last weeks:
             Week N-1   Week N-2   Week N-3   Week N-4   Week N-5   Week N-6   Week N-7
 - nightly          0          0          0          0          0          0          0
 - aurora           0          0          0          0          0          0          0
 - beta             2          1          0          7          2          1          0
 - release         13         20          9         17          9          7          6
 - esr              0          0          0          4          0          0          0

Affected platform: Windows
status-firefox48: --- → affected
status-firefox-esr45: --- → affected
Component: General → Other
Product: Core → External Software Affecting Firefox
Whiteboard: [AV:Malwarebytes]
Version: 44 Branch → unspecified
Closing because no crash reported since 12 weeks.
Status: NEW → RESOLVED
Closed: 6 years ago
Resolution: --- → WONTFIX
Whiteboard: [AV:Malwarebytes] → [AV:Malwarebytes][AV:ESET]
You need to log in before you can comment on or make changes to this bug.