Jump to content
saroot

EFS 7.0.12014.0 - MSSQL ERROR

Recommended Posts

8 hours ago, espkiller said:

the same problem here, some progress?

Unfortunately there are no news from Microsoft yet.

Share this post


Link to post
Share on other sites

Signtool cannot be used to determine if a dll is properly signed to meet requirements for protection of anti-malware services introduced by Microsoft in Windows 8.1. To our best knowledge, if a dll meets requirements can only be determined via a debugger and there's no command line tool that could be used for that.

In a debugger you'd get a message like

Quote

[\Device\HarddiskVolume1\Windows\System32\1033\sqlnclir11.rll]:
[\Device\HarddiskVolume1\Program Files\ESET\ESET Security\ekrn.exe] 0x7 > 0x1

******************************************************************


 

This break indicates this binary is not signed correctly: 
\Device\HarddiskVolume1\Windows\System32\1033\sqlnclir11.rll

and does not meet the system policy.

The binary was attempted to be loaded in the process:
 \Device\HarddiskVolume1\Program Files\ESET\ESET Security\ekrn.exe

This is not a failure in CI, but a problem with the failing binary.

Please contact the binary owner for getting the binary correctly signed.

*****************************************************************

 

Share this post


Link to post
Share on other sites

So why is ESET the only AV that is failing this file's signature?

Share this post


Link to post
Share on other sites

Either the other AVs do not work as a protected service or they do not call a particular API function that causes the rll file to load.

Share this post


Link to post
Share on other sites

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.
Note: Your post will require moderator approval before it will be visible.

Guest
Reply to this topic...

×   Pasted as rich text.   Paste as plain text instead

  Only 75 emoji are allowed.

×   Your link has been automatically embedded.   Display as a link instead

×   Your previous content has been restored.   Clear editor

×   You cannot paste images directly. Upload or insert images from URL.


  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...