Welcome, Guest. Please login or register.
November 21, 2009, 01:09:03 AM

Login with username, password and session length

336428 Posts
37221 Topics
84383 Members

Latest Member: sysfocus

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Desktop Security Products
| |-+  Comodo Internet Security - CIS
| | |-+  Bug Report - CIS
| | | |-+  Other - General - GUI etc Bugs
| | | | |-+  BSOD - INSPECT.sys CIS 3.12.111745.560 (XP 32bit)
« previous next »
Pages: 1 [2] Go Down Print
Author Topic: BSOD - INSPECT.sys CIS 3.12.111745.560 (XP 32bit)  (Read 1056 times)
I-0
Newbie
*
Offline Offline

Posts: 3


« Reply #15 on: November 11, 2009, 07:15:37 PM »

This is probably the inspect.sys; however, by turning off the automatic reboot, you should know for certain the next time it BSODs on you.
Done and understood...

Quote
...you want to Purge your D+ rules.  Go to Defense+ tab, Advanced, then Computer Security Policy, and click the Purge button.  Before you let it clear everything, review what it's showing you to see if there are any related to your scenario, which might be limited in what is Allowed.  Once you're satisfied, let it finish.  Click Apply when it's complete.
Done and understood...

Quote
THe CIS logs are found from either Firewall or Defense + tabs under Common Tasks/View () Events.  From there, click the More button.  This will open the full log interface, where you can select to see Firewall, Defense +, or Antivirus logs.  You're probably going to want to look at the D+ as the most likely target.  I'd focus on your USB WiFi, but keep your eye open for anything driver-related that was blocked.
Done and understood,... but, I checked all of the logs (firewall, d+, av) for today, this week and this month and there were no entries. There were a bunch for all time.

Quote
...I'm hoping that you had a temporary block rule (ie, inadvertently selected Block w/o Remember), which would automatically be flushed with the next session, and that you're now free and clear.  The troubleshooting steps will help determine that.
Dunce cap on,... I have no idea as to what you are referring to...

BTW - Is the anything to the correlation of the COMODO incident(s) and Windows Update occurring at the same time? Ever heard of it before?

Thanks again, I do appreciate your attention.
« Last Edit: November 11, 2009, 07:17:15 PM by I-0 » Logged

Current Projects:
Spinosaurus.com - http://spinosaurus.com
TerribleLizards.com - http://terriblelizards.com
DeadAddress.com - http://deadaddress.com
Paascode.com - http://paascode.com
Little Mac
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 6254



« Reply #16 on: November 12, 2009, 07:01:04 PM »

Temporary Rule scenario: 
1.  popup occurs, user selects Block but does not check the "Remember" box
2.  popup occurs, user does not respond within default timeframe, popup goes away

In either of those two, the application from the popup will be blocked for that session.  In other words, the next new event for that application, or especially after a reboot, will cause a new popup to occur.  In other words, the "rule" will not show up in Computer Security Policy; it is temporary only and will be automatically flushed.

With default CIS install, it should self-configure to Allow Windows Updates processes and such.  However, I have seen a few cases (on my systems) where with tighter settings, there may be some alerts requiring a response.  If one of these were missed and thus blocked, you could end up with a malfunctioning driver (at least temporarily), and could result in a BSOD.

svchost.exe is the main system process behind Windows Updates, and is known to consume considerable resources in that scenario.  This can cause CIS to consume a lot of resources if everything is not working properly; however, that should not cause BSODs.

LM
Logged

You read my sig block.  That's enough personal interaction for one day. Kewl
Tags: inspect.sys  BSOD  0x0000008E  
Pages: 1 [2] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.029 seconds with 18 queries.
Powered by SMF 1.1.10 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com