CFP V3.5.55810.432 program crash [Vista x64]

[Guest]

[J-Pro]

Good afternoon.

The first thing which made me think about continue using CFP happened today - I've logged in, hovered my mouse above CFP icon and it disappeared, what tells me that the program was crashed. I think it's should NOT EVER happen with such soft which defends your computer...    Now I should turn my windows firewall on again... just to have some insurance.

Here is windows crash event log:

Code:

Log Name:      Application
Source:        Application Error
Date:          29.11.2008 20:45:08
Event ID:      1000
Task Category: (100)
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      J-PRIX
Description:
Faulting application cfp.exe, version 3.5.55470.430, time stamp 0x491b1d33, faulting module unknown, version 0.0.0.0, time stamp 0x00000000, exception code 0xc0000005, fault offset 0x00000000000004f4, process id 0xc8c, application start time 0x01c9522f4ee2294f.
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Application Error" />
    <EventID Qualifiers="0">1000</EventID>
    <Level>2</Level>
    <Task>100</Task>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2008-11-29T18:45:08.000Z" />
    <EventRecordID>892</EventRecordID>
    <Channel>Application</Channel>
    <Computer>J-PRIX</Computer>
    <Security />
  </System>
  <EventData>
    <Data>cfp.exe</Data>
    <Data>3.5.55470.430</Data>
    <Data>491b1d33</Data>
    <Data>unknown</Data>
    <Data>0.0.0.0</Data>
    <Data>00000000</Data>
    <Data>c0000005</Data>
    <Data>00000000000004f4</Data>
    <Data>c8c</Data>
    <Data>01c9522f4ee2294f</Data>
  </EventData>
</Event>

My computer config:

    * Windows Vista Ultimate x64 SP1 with UAC enabled
    * COMODO Firewall version 3.5.55810.432
    * Avira antivirus installed
    * 8 RAM DDR2
    * AMD Athlon 64 X2 6000+ CPU on ASUS M2N-E

[J-Pro]

Does anyone have any suggestions? If so - please, speak to me

[John Buchanan]

Just a question, but when the icon disappeared, was CmdAgent still running in the background?
If so, you still  have protection, just the GUI disappeared (this is what has happened to me, why I am asking you).
Just something to check.
Simply restarting CIS restarts the GUI, does not double CmdAgent in memory, your system remains secure.

[J-Pro]

Just a question, but when the icon disappeared, was CmdAgent still running in the background?
If so, you still  have protection, just the GUI disappeared (this is what has happened to me, why I am asking you).
Just something to check.
Simply restarting CIS restarts the GUI, does not double CmdAgent in memory, your system remains secure.

I understand what are you talking about, I've thought about it too, but only after restarted the computer. So  didn't look at processes.

But I tell you how it all happened. I had my uTorrent client turned OFF in that moment and felt internet to be very slow(like utorrent is fully on and opened a lot of connections). I thought that it's strange and wanted to see a list of connections in CFP, so put my mouse over the tray icon and it disappeared. For sure I should have looked into services, but I just was a little afraid of my computer be fully open to all internet(windows firewall was turned off, because I was fully relied on CFP).

Can I see if it was running by reading some txt-logs or modified txt-files? If it were changed that day, I can look for appropriate records. I exclude CFP logs, because due to THIS problem I always have in my logs only one last record, no matter if it's Month log, or Week log.

[John Buchanan]

I have never seen anything in the logs when I looked (the icon disappeared 3 times), each time something different was happening (there is a post on here about it).  But I did check running applications (both in a utility tool and taskManager/services. 
This may be a Vista issue as it has not been reported on any other platform.  I have had minor issues like this with Vista since installing it (have been running Comodo only since August).
I have uTorrent and bitTorrent.  If they are running slow, check (also) to see what is eating up the CPU.  For me, it was an unfinished Ask install utility (included with the Torrent install programs) hiding in the background.  Ending the process resolved that issue.  (I really hate Ask.com).
I have also experienced the issue you describe in the above link, although I have not seen it in  a month (knock on wood).
If I am right, this is a Vista display bug and you are protected when the GUI disappears.
Let me know, please, what you find.

[J-Pro]

Thanks for your suggestions.

I see that it's nothing to do with the subj, but to wait for another crash and check if the core is running Isn't the best solution, but it's better than none

I'll be in touch.

[J-Pro]

Here we go. Today I've logged in via RDP and saw that there is a window, which tells me about cfp.exe crash(see attachment cfp1.jpg).

Here is the same info in txt format:

Code:

Problem signature:
  Problem Event Name: BEX64
  Application Name: cfp.exe
  Application Version: 3.5.55470.430
  Application Timestamp: 491b1d33
  Fault Module Name: StackHash_c845
  Fault Module Version: 0.0.0.0
  Fault Module Timestamp: 00000000
  Exception Offset: 00000000000004f4
  Exception Code: c0000005
  Exception Data: 0000000000000008
  OS Version: 6.0.6001.2.1.0.256.1
  Locale ID: 1049
  Additional Information 1: c845
  Additional Information 2: 844b96dd7ca3cdac239e55c3c9fed47f
  Additional Information 3: ac2c
  Additional Information 4: 987bb6c369f855f1f57e14ea21c27ecb

Read our privacy statement:
  http://go.microsoft.com/fwlink/?linkid=50163&clcid=0x0409

Now I'm wondering:

1. Why does it happen?
2. Is there any protection running after cfp.exe crashed?

All running services and applications are in attachments as screenshots. Please, answer me. Thank you in advance!


P.S.: I see in services "COMODO Internet Security Helper Service", but it isn't one, which protects the system using all the defined rules, isn't it?

[John Buchanan]

"COMODO Internet Security Helper Service" is CmdAgent.exe, and it appears to be running, although you don't include a screenshot of TaskManager/Services (see attached image).

A quote from http://forums.comodo.com/empty-t30201.0.html

i only see cfp.exe running in the task manager. is that all that should be running?

You should have cmdagent.exe as well, which is the real CIS that protects you (cfp.exe is just the GUI).

LA

So yes, you are still protected (with your defined rules) if cfp.exe crashes.  And best I can make out at this time it is quite possibly a Vista issue.

[J-Pro]

"COMODO Internet Security Helper Service" is CmdAgent.exe, and it appears to be running, although you don't include a screenshot of TaskManager/Services (see attached image).

Ok, I see now, thanks for your answer! I'm a lot more calm now

One more question - in such situation(when only CmdAgent is running), is the logging mechanism active? (I assume - yes, but would hear your opition)

And best I can make out at this time it is quite possibly a Vista issue.

Can you(or anybody else) please tell me, if there already is such issue created in the Bugs section? If no - I'll create it for sure! Because I'm interested in it very much.

[John Buchanan]

One more question - in such situation(when only CmdAgent is running), is the logging mechanism active? (I assume - yes, but would hear your opition)

Can you(or anybody else) please tell me, if there already is such issue created in the Bugs section? If no - I'll create it for sure! Because I'm interested in it very much.

To the best of my knowledge the logging system is still active. Since this is a rare situation only a few have experienced, I doubt any one else can confirm this (if they can, let me know, please).
To answer the second question, No, there are several other GUI bug reports generated, but not this one in particular.

[J-Pro]

To the best of my knowledge the logging system is still active. Since this is a rare situation only a few have experienced, I doubt any one else can confirm this (if they can, let me know, please).

Thanks. For sure, I'll post here if get know anything related to this issue.

To answer the second question, No, there are several other GUI bug reports generated, but not this one in particular.

Thanks again. Then, I'll just make a bug post there! (and for sure I'll give here a link)

[John Buchanan]

I'll keep checking this thread if you have any follow-up issues.

Mods, you can mark this closed unless J-Pro requires it open again.
Thank you

[J-Pro]

As I've promised, here is the link to newly created bug report: GUI(cfp.exe) crashes i.e. "stops working" (V3.5.55810.432 on VISTA X64)

[3xist]

I'll keep checking this thread if you have any follow-up issues.

Mods, you can mark this closed unless J-Pro requires it open again.
Thank you

Okay...

Cheers,
Josh

[Tags:]