HIPS module: Is 1115 or 1119 current as of March 3, 2014?

[howardagoldberg 13]

I have two computers running:

 

Windows 7 x64 SP1 and

ESET NOD32 Anti-Virus 7.0.302.26

 

This morning (about 13 hours ago), one system BSOD:

 

The computer has rebooted from a bugcheck.  The bugcheck was: 0x00000050 (0xfffffa80087d6ca2, 0x0000000000000000, 0xfffff880029c8f29, 0x0000000000000000). A dump was saved in: C:\Windows\MEMORY.DMP. Report Id: 030314-25989-01.

 

After doing some research on this type of error (hxxp://msdn.microsoft.com/en-us/library/windows/hardware/ff559023(v=vs.85).aspx), I have decided (for the moment) this is probably a "one-time" event -- as this is the first BSOD on this system that I can recall in at least several years, and the error has not reoccurred in over 12 hours. (The error occurred while using Skype, if that makes any difference ... and I used Skype frequently afterwards without issue.)

 

But ... here's the issue which I don't know if it is related to the above. On both systems, the modules are the same (as of 10:30 p.m. Eastern/U.S.) ... 

 

Virus signature database: 9496 (20140303)

Rapid Response module: 3767 (20140303)

Update module: 1047 (20131023)

Antivirus and antispyware scanner module: 1421 (20140219)

Advanced heuristics module: 1147 (20140114)

Archive support module: 1191 (20140210)

Cleaner module: 1084 (20140224)

Anti-Stealth support module: 1057 (20131125)

ESET SysInspector module: 1240 (20131202)

Real-time file system protection module: 1006 (20110921)

Translation support module: 1145 (20131121)

HIPS support module: 1115 (20140206)

Internet protection module: 1108 (20140224)

Database module: 1054 (20140218)

 

... except on the system that BSODed ... the HIPS support module is now 1119 (20140227)

 

On both systems NOD32 is set for "regular updates," not "pre-release updates"

 

Can anyone confirm whether 1115 or 1119 is the current HIPS module?

 

Did one of my computer's inadvertently pull down a pre-release module or has one computer not updated to the latest HIPS module?

 

In either case, how can I resolve the issue?

 

Thanks for any insights!

[Marcos 4,720]

Those who don't have pre-release updates enabled may have HIPS module 1115 or 1119 installed at the moment.

Please compress the memory dump from BSOD, upload it to a safe location and pm me the download link.

[howardagoldberg 13]

Marcos,

 

Thank you for your quick reply and offer of assistance. Unfortunately, I have already deleted the memory dump log after not being able to identify a direct/reproducible cause of the BSOD. If the event happens again, I will upload the log so that you can review it.

 

I just booted up both systems this morning (8:30 a.m. Eastern/U.S.), and the "issue" remains. All the signatures/modules are the same on both systems ...

 

Virus signature database: 9498 (20140304)

Rapid Response module: 3770 (20140304)

Update module: 1047 (20131023)

Antivirus and antispyware scanner module: 1421 (20140219)

Advanced heuristics module: 1147 (20140114)

Archive support module: 1191 (20140210)

Cleaner module: 1084 (20140224)

Anti-Stealth support module: 1057 (20131125)

ESET SysInspector module: 1240 (20131202)

Real-time file system protection module: 1006 (20110921)

Translation support module: 1145 (20131121)

HIPS support module: 1115 (20140206)

Internet protection module: 1108 (20140224)

Database module: 1054 (20140218)

 

... except HIPS which is at 1119 on the other system. It seems that on both systems, ESET is updating itself normally otherwise.

 

So to make certain I understand your response:

 

1) The fact that one system is at 1115 for HIPS and the other is at 1119 for HIPS is nothing to be concerned about and no action should be/needs to be taken?

 

2) This is the first time that I have seen a difference in modules between the two systems. Is 1119 being rolled out slowly for some reason? Why would two systems with very similar configurations (almost identical, software-wise), on the same network (plugged in to the same router) have different HIPS modules?

 

I just want to make certain that I am fully protected on both systems and that the behavior here is not outside the realm of normal.

 

Thank you again!

[Marcos 4,720]

Right, the HIPS module currently available on the update servers is 1115. We release new module updates in steps, ie. after being tested in our testing and production environment, they go to pre-release servers for a certain period of time. Afterwards we perform staggered updates so not all users receive new modules immediately.

[howardagoldberg 13]

Marcos,

 

Again thank you. That definitely eases my mind :-)

 

It is just a bit unprecedented, if you will -- since the two computers in question are literally sitting next to each other on a desk, plugged in to the same router, etc ... and all the other modules match up.

 

But if you say it's "normal," that's good enough for me.

[howardagoldberg 13]

Same issue again ... one computer updated to HIPS module 1133, the other 1131. This is the first time since the differential noted in this post. All other modules are "equal."

 

Any explanation as to why one computer on the same network is getting a different HIPS module earlier than the other?

 

(No BSOD this time ... but on the system with 1133, the log indicates a "program modules updated" this morning, the other computer has no such entry.)

Edited June 13, 2014 by howardagoldberg

[Marcos 4,720]

HIPS module will update to 1133 soon when this version becomes available permanently for all users.