Sometimes antivirus scanner gets stuck on one file

[Guest]

[magnus71]

I have exactly the same problem, with the scan stopping at guard64.dll. Only a reboot helps. Guard64.dll is a Commodo file, so an update on how to fix this would be welcome.

[Ronny]

Can you put this file on the AV exclusion list and see if the scan finishes then ?

[magnus71]

I have now put it on the anti-virus exclusion list. Instead of excluding it from the scan, it now starts with Guard64.dll, and then locks up. It used to scan 58 files before stopping. 

EDIT: Part of the mystery is resolved, if not the problem. I added the "Commodo files" to the exclusion list, which excludes "C:\Windows\System32\guard64.dll" among other things. This is obviously scanned first, so excluding this took away the first 57 objects to be scanned. When this did not help I added "C:\Windows\system32\guard64.dll" to the list (manually, note the lower case on system32), this made made it skip the file where it crashed. The scan proceeded very slowly to a random file and crashed again. This was object number 328, and it took about a minute to get there.

[Ronny]

That it starts with guard64 is because memory scanning is active, can you untick that from a manual scan ?
It will first scan all drivers etc loaded in memory and guard64 is part of that in memory scan...

I assume you reboot after it crashes because when it crashes the engine goes "dead" ?

[magnus71]

I unticked the memory scan, now it crashes in at a new file. Total objects scanned: 59

This time when I tried to click "Stop Scan" It gave an error code: 0x800705aa Not enough system resources to stop the service. Stangely enough, it did shut down after that. No luck on the scanning, obviously.

It never did that before. I have had to hard reboot after Commodo locks up. I can move the mouse and continue to run any program that was already up and running, but not start any new ones, and not shut down the computer normaly.

I'm on Vista64, btw.

[Ronny]

Can you check the windows eventlog and post the crash error for cmdagent here ?

[magnus71]

Fel   08/09/2009 22:26:15   Application Error   1000   (100)
Händelsens XML-data:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2009-09-08T20:26:15.000Z" />
    <EventRecordID>6879</EventRecordID>
    <Channel>Application</Channel>
    <Computer>Vilma</Computer>
    <Security />
  </System>
  <EventData>
    <Data>cmdagent.exe</Data>
    <Data>3.10.36658.530</Data>
    <Data>4a4e128a</Data>
    <Data>pe.cav</Data>
    <Data>3.10.36265.529</Data>
    <Data>4a4c3e43</Data>
    <Data>c0000005</Data>
    <Data>0000000000002e2c</Data>
    <Data>3c8</Data>
    <Data>01ca30c1b0117edf</Data>
  </EventData>
</Event>



__________________________________

I hope this is what you wanted. I'm in Sweden, so a few words are in Swedish:

Fel = Error
Händelsens XML-data = Event XML-data

[Ronny]

Hi magnus71,

The version number in the crash suggests you are using CIS 3.10.x is that correct ?
If so please upgrade to 3.11 because a number of these crash causes have been fixed in that release.

[magnus71]

That fixed it! The scan completed with no crashes. As I am not the OP I can't change the thread title to "solved", but as everyone else who posted her had the same problem, they will likely have the same solution. Perhaps a mod can update?

Thanks a lot for all the help!

[Ronny]

I think I'll leave it like it is, there are so many people who replied, hard to say it's resolved for them all 
Glad to hear yours is fixed anyway 

[Just A Swede]

Same problem as the other ones had earlier for me.
Antivirus just hangs the computer when it gets stuck on a file.

The only thing I can do is press the power button for more than 5 seconds to force the computer to turn off abruptly (without quiting windows. Doing it  the really ugly hard and bad way!)
It also screwed a big download I was doing that should have been finished if it weren't for this unwelcome buggy virus scan.

I'm using version 3.12.111745.560, so when if you think you are safe if using version 3.11 or later you are just wrong!

This is really unacceptable.
No matter what, an antivirus shouldn't cause trouble for the OS, LIKE a virus. Worst case scenario could be that windows would be unbootable after this kind of hard reboot.
Changing to an update shouldn't be a quick fix, there should never be an issue with the program itself. Have never seen anything like it in any other antivirus program.
Comodo firewall is top notch, a really good app, but your antivirus is really, really something else.
Now I'm going to get back to Avira antivir, which I used before. Even if they have troubles sometimes with the updates (with an overloaded server), their version at least doesn't crash the computer...

When will you bring something to the table when it comes to an antivirus that is resembling something of a non beta version, IE a program that doesn't hang randomly for a lot of people for no apparent reason?

[malva00]

I think mine just got stuck on a file with the new version of comodo, but then it finally continued lol

i'm thinking it didn't actually get stuck but just showed a certain filename for a long time cuz afterwards it was in a whole different folder when it shouldn't have been done with the folder yet <__<

[Ronny]

Probably a compressed archive... It seems the scanner has a tough time on them...

[elvenwood]

My scans freeze on the same file :/Windows/System32/guard64.dll and I have to reboot. Any suggestions are welcome.

What is guard64.dll ? Which process it belongs to?  Try to check it at virustotal.com

[RGold]

Same thing here. Scheduled scan is stuck on an audio file (.ogg). Running for 23+ hours.
(Core i7, 4GB, 3TB, CIS version 5.10)

[Tags:]