Welcome Guest! To enable all features please Login or Register.

Notification

Icon
Error
Hearthranger.exe just won't open since tonight
Options
Previous Topic Next Topic
amfly
#1 Posted : Wednesday, February 3, 2016 6:42:42 AM(UTC)
Rank: Newbie

Groups: Registered
Posts: 5
Hi,

I have windows 7, and symantec antivirus.

Since yesterday, when I try to open hearthranger.exe, it just won't open.
I tried to uninstall, use launcher, open as Administrator.
Basically, I did everything

after a while, I found out that if I turn off the antivirus, it will open.
I put shitloads of exceptions on the folder, the hearthranger.exe file, and nothing will work.

so, what happens, if I disable my symantec antivirus, open the hearthranger.exe, then enable the antivirus again, this is the error I get in my event viewer in Windows Logs>Application:

First error - where in Source tab it says .NET Runtime.
Faulting application name: HearthRanger.exe, version: 5.3.2.0, time stamp: 0x56acdb29
Faulting module name: KERNELBASE.dll, version: 6.1.7601.19110, time stamp: 0x56842600
Exception code: 0xe0434352
Fault offset: 0x0000c42d
Faulting process id: 0x1390
Faulting application start time: 0x01d15e643b56f732
Faulting application path: D:\Network programs\HearthRanger\HearthRanger\HearthRanger.exe
Faulting module path: C:\Windows\syswow64\KERNELBASE.dll
Report Id: fbb041fe-ca57-11e5-a67a-50e5493c87dc

Second error - where in Source tab it says Application Error:
Application: HearthRanger.exe
Framework Version: v4.0.30319
Description: The process was terminated due to an unhandled exception.
Exception Info: System.UnauthorizedAccessException
Stack:
at System.IO.__Error.WinIOError(Int32, System.String)
at System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
at System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean)
at System.IO.StreamWriter.CreateFile(System.String, Boolean, Boolean)
at System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding, Int32, Boolean)
at System.IO.StreamWriter..ctor(System.String, Boolean)
at System.IO.File.CreateText(System.String)
at SysLog.SysLogger.Log(SysLog.enLogLevel, System.String)
at HsConsole.Config.BotConfig.SaveToFile(System.String)
at lKXtxXjDemZPidOSNUpFlMfxCqrf.‏‬‬‬‏‫​‌‎‮‌‭​‍‌‏‫‪‬‌‮(System.Object, System.Windows.RoutedEventArgs)
at System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs)
at System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
at System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
at System.Windows.UIElement.RaiseEvent(System.Windows.RoutedEventArgs)
at System.Windows.Controls.Primitives.ButtonBase.OnClick()
at System.Windows.Controls.Button.OnClick()
at System.Windows.Controls.Primitives.ButtonBase.OnMouseLeftButtonUp(System.Windows.Input.MouseButtonEventArgs)
at System.Windows.UIElement.OnMouseLeftButtonUpThunk(System.Object, System.Windows.Input.MouseButtonEventArgs)
at System.Windows.Input.MouseButtonEventArgs.InvokeEventHandler(System.Delegate, System.Object)
at System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object)
at System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs)
at System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
at System.Windows.UIElement.ReRaiseEventAs(System.Windows.DependencyObject, System.Windows.RoutedEventArgs, System.Windows.RoutedEvent)
at System.Windows.UIElement.OnMouseUpThunk(System.Object, System.Windows.Input.MouseButtonEventArgs)
at System.Windows.Input.MouseButtonEventArgs.InvokeEventHandler(System.Delegate, System.Object)
at System.Windows.RoutedEventArgs.InvokeHandler(System.Delegate, System.Object)
at System.Windows.RoutedEventHandlerInfo.InvokeHandler(System.Object, System.Windows.RoutedEventArgs)
at System.Windows.EventRoute.InvokeHandlersImpl(System.Object, System.Windows.RoutedEventArgs, Boolean)
at System.Windows.UIElement.RaiseEventImpl(System.Windows.DependencyObject, System.Windows.RoutedEventArgs)
at System.Windows.UIElement.RaiseTrustedEvent(System.Windows.RoutedEventArgs)
at System.Windows.UIElement.RaiseEvent(System.Windows.RoutedEventArgs, Boolean)
at System.Windows.Input.InputManager.ProcessStagingArea()
at System.Windows.Input.InputManager.ProcessInput(System.Windows.Input.InputEventArgs)
at System.Windows.Input.InputProviderSite.ReportInput(System.Windows.Input.InputReport)
at System.Windows.Interop.HwndMouseInputProvider.ReportInput(IntPtr, System.Windows.Input.InputMode, Int32, System.Windows.Input.RawMouseActions, Int32, Int32, Int32)
at System.Windows.Interop.HwndMouseInputProvider.FilterMessage(IntPtr, MS.Internal.Interop.WindowMessage, IntPtr, IntPtr, Boolean ByRef)
at System.Windows.Interop.HwndSource.InputFilterMessage(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndWrapper.WndProc(IntPtr, Int32, IntPtr, IntPtr, Boolean ByRef)
at MS.Win32.HwndSubclass.DispatcherCallbackOperation(System.Object)
at System.Windows.Threading.ExceptionWrapper.InternalRealCall(System.Delegate, System.Object, Int32)
at MS.Internal.Threading.ExceptionFilterHelper.TryCatchWhen(System.Object, System.Delegate, System.Object, Int32, System.Delegate)
at System.Windows.Threading.Dispatcher.LegacyInvokeImpl(System.Windows.Threading.DispatcherPriority, System.TimeSpan, System.Delegate, System.Object, Int32)
at MS.Win32.HwndSubclass.SubclassWndProc(IntPtr, Int32, IntPtr, IntPtr)
at MS.Win32.UnsafeNativeMethods.DispatchMessage(System.Windows.Interop.MSG ByRef)
at System.Windows.Threading.Dispatcher.PushFrameImpl(System.Windows.Threading.DispatcherFrame)
at System.Windows.Threading.Dispatcher.PushFrame(System.Windows.Threading.DispatcherFrame)
at System.Windows.Threading.Dispatcher.Run()
at System.Windows.Application.RunDispatcher(System.Object)
at System.Windows.Application.RunInternal(System.Windows.Window)
at System.Windows.Application.Run(System.Windows.Window)
at RXkXnPZlkOSHyUvjwcgVeEFOoEs.‫‎‪‫‬​‬‪‮‭‭‭‍‭‏​‭‍‎‬‮‎‫‏​‎‎‪‪​‪‭‮()

Information message(still in Application log)
Fault bucket , type 0
Event Name: CLR20r3
Response: Not available
Cab Id: 0

Problem signature:
P1: HearthRanger.exe
P2: 5.3.2.0
P3: 56acdb29
P4: mscorlib
P5: 4.0.30319.36213
P6: 5348974f
P7: 4527
P8: 13c
P9: System.UnauthorizedAccess
P10:

Attached files:
C:\Users\[user]\AppData\Local\Temp\WER54C5.tmp.WERInternalMetadata.xml

These files may be available here:
C:\Users\[user]\AppData\Local\Microsoft\Windows\WER\ReportArchive\AppCrash_HearthRanger.exe_3fc9ef14d20d12af02264ac13c34c8e631fc4_19805a60

Analysis symbol:
Rechecking for solution: 0
Report Id: fbb041fe-ca57-11e5-a67a-50e5493c87dc
Report Status: 1


Any idea on what to do?
Back to top
WWW
amfly
#2 Posted : Wednesday, February 3, 2016 6:45:04 AM(UTC)
Rank: Newbie

Groups: Registered
Posts: 5
By the way, if I do open the hearthranger.exe after I disable the antivirus, and then I enable the antivirus, then the bot will shutdown if I will go to settings, and then press save.

If I just try to open the hearthranger.exe when antivirus is enabled, nothing happens, and nothing is written down to the event viewer aswell.
Back to top
WWW
 |  Edit by user
JoyAdmin
#3 Posted : Wednesday, February 3, 2016 6:49:24 AM(UTC)
Rank: Administration

Groups: Administrators
Posts: 4,881

Thanks: 808 times
Was thanked: 4545 time(s) in 1642 post(s)
The log shows your anti-virus software blocked hearthranger to write log file.


Exception Info: System.UnauthorizedAccessException <--------- Your anti-virus software block HR to use file IO.
Stack:
at System.IO.__Error.WinIOError(Int32, System.String)
at System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
at System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean)
at System.IO.StreamWriter.CreateFile(System.String, Boolean, Boolean)
at System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding, Int32, Boolean)
at System.IO.StreamWriter..ctor(System.String, Boolean)
at System.IO.File.CreateText(System.String)
at SysLog.SysLogger.Log(SysLog.enLogLevel, System.String) <-------------- HR try to open log file when start up.
Back to top
WWW
amfly
#4 Posted : Wednesday, February 3, 2016 7:09:42 AM(UTC)
Rank: Newbie

Groups: Registered
Posts: 5
JoyAdmin;35503 wrote:
The log shows your anti-virus software blocked hearthranger to write log file.


Exception Info: System.UnauthorizedAccessException <--------- Your anti-virus software block HR to use file IO.
Stack:
at System.IO.__Error.WinIOError(Int32, System.String)
at System.IO.FileStream.Init(System.String, System.IO.FileMode, System.IO.FileAccess, Int32, Boolean, System.IO.FileShare, Int32, System.IO.FileOptions, SECURITY_ATTRIBUTES, System.String, Boolean, Boolean, Boolean)
at System.IO.FileStream..ctor(System.String, System.IO.FileMode, System.IO.FileAccess, System.IO.FileShare, Int32, System.IO.FileOptions, System.String, Boolean, Boolean, Boolean)
at System.IO.StreamWriter.CreateFile(System.String, Boolean, Boolean)
at System.IO.StreamWriter..ctor(System.String, Boolean, System.Text.Encoding, Int32, Boolean)
at System.IO.StreamWriter..ctor(System.String, Boolean)
at System.IO.File.CreateText(System.String)
at SysLog.SysLogger.Log(SysLog.enLogLevel, System.String) <-------------- HR try to open log file when start up.



so what should I do?

what else do I need to put an exception to?
Back to top
WWW
oijkn
#5 Posted : Wednesday, February 3, 2016 8:21:13 AM(UTC)
oijkn


Rank: Advanced Member

Groups: HSModerator, Registered
Posts: 472
Man
Location: 127.0.0.1

Thanks: 76 times
Was thanked: 271 time(s) in 93 post(s)
I think the best way is to add in your AV rules to exclude the HR's directory to the scan and real time access.

Regards.
Back to top
WWW
amfly
#6 Posted : Wednesday, February 3, 2016 9:20:23 AM(UTC)
Rank: Newbie

Groups: Registered
Posts: 5
oijkn;35506 wrote:
I think the best way is to add in your AV rules to exclude the HR's directory to the scan and real time access.

Regards.


I already did that, still not working.
Back to top
WWW
amfly
#7 Posted : Wednesday, February 3, 2016 9:44:32 AM(UTC)
Rank: Newbie

Groups: Registered
Posts: 5
well, I managed to get version 4 something and it worked. it seems like there is a bug in the current version, and that my SONAR, whichi s realtime detection of viruses detects it and blocks it.

no matter what I do, I can't put an exception for this.

please patch up HR and fix this :(
Back to top
WWW
JoyAdmin
#8 Posted : Wednesday, February 3, 2016 10:52:35 AM(UTC)
Rank: Administration

Groups: Administrators
Posts: 4,881

Thanks: 808 times
Was thanked: 4545 time(s) in 1642 post(s)
I think it's a false alarm with your anti-virus software, due to code obfuscation of HR.

It can be managed if you correctly setup your white list of anti-virus software.
Back to top
WWW
Forum Jump  
You cannot post new topics in this forum.
You cannot reply to topics in this forum.
You cannot delete your posts in this forum.
You cannot edit your posts in this forum.
You cannot create polls in this forum.
You cannot vote in polls in this forum.

Powered by YAF | YAF © 2003-2011, Yet Another Forum.NET
This page was generated in 0.148 seconds.