Welcome, Guest. Please login or register.
March 11, 2010, 11:40:31 PM

Login with username, password and session length

370143 Posts
40950 Topics
93346 Members

Latest Member: Raman

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Desktop Security Products & Services
| |-+  Comodo Internet Security - CIS
| | |-+  Bug Report - CIS
| | | |-+  Scan with SuperAntiSpyware Causes BSOD
« previous next »
Pages: [1] Go Down Print
Author Topic: Scan with SuperAntiSpyware Causes BSOD  (Read 1359 times)
Chiron494
Comodo's Hero
*****
Offline Offline

Posts: 322



« on: September 10, 2009, 10:03:13 AM »

Yesterday I ran a scan with SuperAntiSpyware Free Edition and my computer developed a BSOD. I ran WinDbg to analyze the mini-dump and it identified the probable cause to be cmdguard.sys. This is a Comodo file. I tried running the scan with SuperAntiSpyware again and once again I got a BSOD with the same file being identified as the problem. I am unsure whether this is a bug on my computer or a compatibility problem between Comodo and SuperAntiSpyware. I am attaching both mini-dump files. I have also attached a picture that shows the Defense+ Event of the SuperAntiSpyware scan.

I am using:
    32 bit CPU
    Windows XP 32 SP3
    My only real time security program is CIS 3.11.108364.552.
    Defense Plus is set to Safe Mode. AV is set to stateful.
    Administrator Account.

If you require any more information please let me know.
« Last Edit: September 10, 2009, 10:11:09 AM by Chiron494 » Logged

Windows 7 64 bit
CIS 4.0.133118.719 BETA, Comodo Cloud Scanner, Windows Defender, A-squared Free, Malwarebytes (No Real-Time), MSE (No Real-Time), SUPERAntiSpyware Free
Comodo System Cleaner
Intel Core 2 Duo at 2.13GHz
2 GB RAM at 400MHz
EricJH
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 5677



« Reply #1 on: September 10, 2009, 06:24:47 PM »

This is a memory access problem that can easily resolved.

To resolve the memory access problem:

Select Defense+ -->Advanced --> Computer Security Policy. 
Scroll down to Comodo Internet Security, select Edit --> Protection Settings.
Interprocess memory Access (Active Yes) select Modify --> Add -->Now use Running Processes or Browse to point to the concerned file(s) .
Then just "Apply" to each window as you exit.

Does this do the trick here?

I have had a BSOD of the saskutil.sys from SAS on Win 7 Beta that if I recall correctly may be related to compatibility with with CIS.
Logged

Please read: Introduction to the Sandbox (Under construction)

Using CIS v4 and always the latest snapshot of Opera browser.

AMD Phenom 925 quad core with 4 GB RAM
Dch48
Comodo's Hero
*****
Offline Offline

Posts: 1048



« Reply #2 on: September 27, 2009, 04:54:33 PM »

My system is very similar to the OP's and I never had a BSOD from this but it did show SAS as accessing the memory space of CIS in my D+ log. I took the steps suggested above and it stopped. The same thing happens with Malwarebytes. It's because the scanners scan the processes in memory and CIS sees it as a possible attempt to modify it's operation.
« Last Edit: September 27, 2009, 04:59:46 PM by Dch48 » Logged

HP dv5215us Laptop
Turion64 ML-34 1.8ghz single core, 2g RAM, 10 meg cable connection
XP Professional SP3, IE8 & Outlook Express
CIS 4.0 full (Firewall:Safe - D+:Clean PC - AV:Stateful - Sandbox:disabled)
MBAM & SAS On Demand
Chiron494
Comodo's Hero
*****
Offline Offline

Posts: 322



« Reply #3 on: October 09, 2009, 09:17:43 AM »

I followed your advice and it does solve my problem, but I am wondering if it makes me more vulnerable to viruses. Does this mean that Comodo will not defend one of its critical files if under attack? How does this work?
Logged

Windows 7 64 bit
CIS 4.0.133118.719 BETA, Comodo Cloud Scanner, Windows Defender, A-squared Free, Malwarebytes (No Real-Time), MSE (No Real-Time), SUPERAntiSpyware Free
Comodo System Cleaner
Intel Core 2 Duo at 2.13GHz
2 GB RAM at 400MHz
EricJH
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 5677



« Reply #4 on: October 09, 2009, 09:23:32 AM »

Comodo will only allow Super Antispyware to access CIS files in memory. That does not make your system more vulnerable to viruses. Only if Super Antispyware would get compromised CIS could get under attack. But Defense + or Buffer overflow protection would have alerted you something was happening to Super Antispyware.
Logged

Please read: Introduction to the Sandbox (Under construction)

Using CIS v4 and always the latest snapshot of Opera browser.

AMD Phenom 925 quad core with 4 GB RAM
Tags: BSOD  crash  CIS 3.11.552 Bug 
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.191 seconds with 21 queries.
Powered by SMF 1.1.11 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com