BSODs Please add your minidump files here

[Guest]

[232fax]

I get BSOD Not_Less_or_Equal using Comodo Firewall 2.4 and it is caused by the XP screensaver.
If I disable the screensaver, I don't get BSOD.
Please let me know if this fixes anyones BSOD?

I'm new here so this is my second try.

I think Sparky has a good point. I get the same BSOD after my computer has been idle for a couple of hours.

Analysis of minidump with Debug identifies cmdmon.sys as the cause for the crash. My computer has been on for hours now with Windows Screen Saver turned off.

Any ideas about what's happening?

Update: I jumped in too soon. Computer still crashes with Win Screen Saver off. Will post again if I discover the conflict or cause.

Dell 8300
Pent 4, 2.6
1GB DDR 400
Win XP Pro, SP2
Intel Pro/100

[Casketizer]

I recently tried CFP_Setup_English_German_2.4.18.184.exe in search for a new Firewall. I have a free license to the Symantec Client Security Corporate (AV and PFW) through my company, but i dont really like the firewall. So I tried Comodo, but i get Reboots/BSOD about every 24h with cdmon.sys being the culprit. I cant provide minidump because my swapfile is on a µSSD and there is not enough room on the Sysdrive for the required swapfilesize of memory+1MB.
I also use µtorrent, though it doesn't run all the time.
I also have a dedicated Router/Firewall (IPCop Linux) on a separate PC.
My NIC is intel PRO/100 PCI, and there is a Realcrap 8139 Onboard NIC which is disabled in Windows.
Sysspecs: Intel P4 Northwood 2,6GHz, 4GB, EIDE HDDs, USB2 8GB µSSD as Swapdisk and Photoshop Scratchdisk. WinXP SP2 with all relevant updates.
System runs without reboots for MONTHS unless i install CFP_Setup_English_German_2.4.18.184.exe which makes it crash every day. Pls fix this, because Comodo is really good, apart from this show stopper.

Does anyone even check the minidumps still? The later ones all have 0 downloads. If it is REALLY of interest i can take out 3GB and move swap to C:\ for a day.

[tanveer.yasser]

Hi,

I have been having the same problem too. It has been driving me crazy coz recently I had re replace a pair of faulty RAM to get my PC stable. So when I started hitting BSOD randomly even after replacing, imagine my despair  .

I noticed that the BSOD was linked to

1. laptop sitting idle for more than 30mins and accesing local network

2. printing to my network printers (connected to another LAN PC)

3. Norton Ghost (version 12) network backup.

The problem was not there at the beginning, which was about 3-4 months back when I started using Comodo. It started at some point when updates were installed to the OS and WMP11 and IE7 was installed.

I am running WinXP SP2 Pro with complete current update as on Spetember 06, 2007. All drivers are current. Details of the system were collected (complete HW and SW inventory) usng HP Instant support Prof. ed. and attached.

I would be happy to provide more info.

Here is the debug info obtained using WinDbg (version 6.7.005.1):

*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

Use !analyze -v to get detailed debugging information.

BugCheck A, {16, 2, 0, 804e469a}

*** ERROR: Symbol file could not be found.  Defaulted to export symbols for tcpip.sys -
*** ERROR: Module load completed but symbols could not be loaded for cmdmon.sys
Probably caused by : cmdmon.sys ( cmdmon+7e2 )

Followup: MachineOwner
---------

kd> !analyze -v
*******************************************************************************
*                                                                             *
*                        Bugcheck Analysis                                    *
*                                                                             *
*******************************************************************************

IRQL_NOT_LESS_OR_EQUAL (a)
An attempt was made to access a pageable (or completely invalid) address at an
interrupt request level (IRQL) that is too high.  This is usually
caused by drivers using improper addresses.
If a kernel debugger is available get the stack backtrace.
Arguments:
Arg1: 00000016, memory referenced
Arg2: 00000002, IRQL
Arg3: 00000000, bitfield :
   bit 0 : value 0 = read operation, 1 = write operation
   bit 3 : value 0 = not an execute operation, 1 = execute operation (only on chips which support this level of status)
Arg4: 804e469a, address which referenced memory

Debugging Details:
------------------


READ_ADDRESS:  00000016

CURRENT_IRQL:  2

FAULTING_IP:
nt!KeSetEvent+30
804e469a 66394616        cmp     word ptr [esi+16h],ax

DEFAULT_BUCKET_ID:  DRIVER_FAULT

BUGCHECK_STR:  0xA

PROCESS_NAME:  System

TRAP_FRAME:  f7274c24 -- (.trap 0xfffffffff7274c24)
ErrCode = 00000000
eax=00000001 ebx=c0000100 ecx=850ba484 edx=f0c40600 esi=00000000 edi=00000000
eip=804e469a esp=f7274c98 ebp=f7274ca4 iopl=0         nv up ei pl nz na pe nc
cs=0008  ss=0010  ds=0023  es=0023  fs=0030  gs=0000             efl=00010206
nt!KeSetEvent+0x30:
804e469a 66394616        cmp     word ptr [esi+16h],ax    ds:0023:00000016=?
Resetting default scope

LAST_CONTROL_TRANSFER:  from 804e469a to 804e187f

STACK_TEXT: 
f7274c24 804e469a badb0d00 f0c40600 0000003a nt!KiTrap0E+0x233
f7274ca4 f0c2af89 850ba484 00000000 00000000 nt!KeSetEvent+0x30
WARNING: Stack unwind information not available. Following frames may be wrong.
f7274cc8 f0c2b0bd 84d92c18 c000023a 00000000 tcpip!tcpxsum+0xcea1
f7274cf8 f0c0723d 84d92c18 850ba49c 84d92cc8 tcpip!tcpxsum+0xcfd5
f7274d14 804e37f7 84ec8308 84d92c18 84d92cec tcpip!ARPRcv+0xdca
f7274d24 f0bee7e2 f0bfde90 84eacd74 84eacd74 nt!IopfCallDriver+0x31
f7274d38 f0bf5299 84ec8308 84d92c18 00000000 cmdmon+0x7e2
f7274dac 8057cfce 00000000 00000000 00000000 cmdmon+0x7299
f7274ddc 804f88fa f0bf4c80 00000000 00000000 nt!PspSystemThreadStartup+0x34
00000000 00000000 00000000 00000000 00000000 nt!KiThreadStartup+0x16


STACK_COMMAND:  kb

FOLLOWUP_IP:
cmdmon+7e2
f0bee7e2 5f              pop     edi

SYMBOL_STACK_INDEX:  6

FOLLOWUP_NAME:  MachineOwner

MODULE_NAME: cmdmon

IMAGE_NAME:  cmdmon.sys

DEBUG_FLR_IMAGE_TIMESTAMP:  45bc9111

SYMBOL_NAME:  cmdmon+7e2

FAILURE_BUCKET_ID:  0xA_cmdmon+7e2

BUCKET_ID:  0xA_cmdmon+7e2

Followup: MachineOwner
---------


Dear Heroes, Help me! I have already switched to ZoneAlarm (which I dont like at all, but what choice do i have until the issue is resolved?)

Tanveer

[yandos]

Hi all,

I've been using comodo for about a year without any problems, it's a great piece of software. BUT... Now I have changed my pc hardware (format + reinstall of windows xp) and I had anything but trouble. I found that comodo was behind that :-(

Cause: comodo causes BSOD with some message about inspect.sys and DRIVER_IRQL_NOT_LESS_OR_EQUAL. It shows up only when many outgoing connections are made (about 400 or so - I've tested with utorrent and proxyhunter, I have patched tcpip.sys to allow unlimited connections)

My MB is Asus P5B-VM, intel g965 chipset, realtek 8168/8111 gbit NIC

I found another thread here and found someone had similar issue with some other mainboard, but drivers update for the NIC had not solved the problem him, not for me. I have downloaded latest drivers for that NIC and it's still the same :-(

With the last mainboard I had comodo worked fine (original Intel with 915g chipset).

So I have uninstalled comodo and installed sunbelt/kerio, which works fine, at least I have 30 days... So this appears to be a problem of comodo :-(

Could you guys please look at that? I'd like to use comodo again, but it's unuseable for me now.

Y.

[rdcarson]

I've got an Intel Celeron 2.66 Mhz w/ 1Gig of memory, running XP w/ SP 2 and latest updates.

Receive very random BSOD. I have unistalled Commodo so can't give version but it should have been the latest.

[1031982]

This happened out of no ware too... It looks like it has something to do with inspect.sys and cmdmon.sys as well, as they are both counted in the dumb file as you will see

Comondo version : 2.4.18.184

PC :
Windows XP Pro
AMD AthlonXP 2700
ASUS A7N8X DELUXE - using onboard NVidia NIC with latest driver from 2004.
Here are the driver specs :
Driver pack 5.10
Ethernet driver 4.42 (WHQL)

1GB Dial channel RAM - Tested with Memtest 86

Forgot to note, I recently installed WMP11 and the Zune software, before they were installed I never got a single crash.

[disinter1]

avast home
superantispyware

windows pro xp2
intel 4
radeon x300 se 128mb hypermemory

[mattmyc]

OS: Windows XP Professional
CPU: Intel D 805
RAM: 3 GB
MOBO: Gigabyte
Network Card: Marvell Yukon 88E8056 PCI-E Gigabit Ethernet Controller

Other programs running: AVG Anti-Spyware, AntiVir Free, Comodo Firewall 2.4.18.84

[Goran]

CPF ver. 2.4.18.184.
OS:WinXP Professional SP2
Hardware: Intel C2D E2160, 1Gb Transcend DDR2 800MHz, TP Link WN551G Wireless Network Adapter

Received 2 BSOD in last 35 minutes. The BSOD message:

Error: DRIVER_IRQL_NOT_LESS_OR_EQUAL

STOP: 0x000000D1 (0X0000001C, 0X00000002, 0X00000000, 0XAED8E33BB)

cmdmon.sys - ADDRESS AED8E3BB BASE AT AED88000, DATESTAMP 45bc9111

EDIT:
It seems that BSOD is somewhat related to using uTorrent, since when it is turned off, I don't have any problems.

[breakfastchef]

BSOD's several times a day on my Dell laptop. When it became intolerable, I spent one week digging deep into the dump and error files using multiple tools including Debugging Tools For Windows. In the end, on a hunch, I uninstalled Comodo Personal Firewall and all BSOD's stopped. Don't believe I will ever install this app again.

[Almar]

The firewall worked great for a couple  of day's but after installing VMWare Workstations my laptop crashes on shutdown. Uninstalling VMWare was not the solution. So I took a look at the minidump and found that cmdmon.sys was the cause of the problem....
I've attached the minidump. Could somebody from Comodo please state if they are working on this promblem? If they're not, I'm gone.

I did find a work-around for my problem; I can logoff and than shutdown the machine without a BSOD.

[KJeffcoat]

I get these too. They happen during network operations, generally either when my PC that's responsible for backing up my Windows computers does its thing and touches this one over the network, or during log-on or log-off/closure of Remote Desktop Connection. It even happens though when I use TightVNC instead...and today I learned how to analyze a Bugcheck - and unfortunately it was Comodo. This probably has to do with the amount of memory my computer has (2 GB) - does anyone have not that much memory but still gets this? I have NEVER gotten it on my other computer that uses CPF, but only has 1 GB.

This is a shame since I'll have to uninstall Comodo Firewall for now (at least the problem wasn't BOClean...maybe I'll reinstall that...) Oh, I've attached zipped minidumps too. Not all were for Comodo, but most were, so other ones might be related since minidumps tell you what they think the cause is.

Good luck with fixing this!
Kevin

[c2k]

I found a different thread first so I posted my info there, but this thread sounded related so.... here is a link to the other thread where I posted my minidump files.

http://forums.comodo.com/help/cmdmonsys_causing_bsod_irqllessthanornotequal_0x804e469a-t1060.0.html;msg99319#msg99319

[c2k]

Attached is a new minidump from a BSOD today.  Looks like I'm going to have to uninstall my firewall.  I just can't continue dealing with these. 

[niking]

Windows XP SP2
AMD Athlon 64 X2 4000+
2GB RAM
TP Link WN551G Wireless Network Adapter

[Tags:]