COMODO Internet Security 3.10.102363.531 Bug Reports

[Guest]

[hullboy]

I'm am on a Windows XP Home SP3 PC (see details in my signature)

OK, I'm using emule... ok I'm using utorrent... but I see that the number of inbound & outbound connections keeps rising from this morning (when I installed .530)

Normally, in similar cases, I had about 60/70 connections

I think that the counter is no more periodically reset 

[Chiron494]

Hi, I have noticed ever since I upgraded to CIS 3.10.102194.530 that when CIS catches a bad file it says that it has quarantined it, but it never appears in the quarantine. The file is deleted though. This happens with either the real time scanner or on demand. To make this even stranger some files are properly quarantined. With the high number of false positives that CIS currently has, this is a huge problem that needs to be addressed.

-I am using Windows XP SP3  (32 bit)
-The only security application that I am using is CIS 3.10.102194.530
-Both the D+ and firewall are set to safe mode
-The exact same thing happened to me with CIS 3.10.102194.529
-I am always logged in as an administrator

Edit: I no longer am experiencing this problem. If it appears I will re-post. If anyone else experiences it please feel free to post it on the forums.

[iroc9555]

XP pro Spk 3 32 bit.
Avast 3.8. 4.8, SpySweeper 6.1 (No antivirus). WinPatrol Plus.
CIS 3.10.102194.530 Firewall and proactive Security installed clean with no other security app on at the time of installment.
Spy Sweeper scans usually takes 7 minutes on my PC. After installing 3.10 the scan times vary from 22 to 27 minutes, it stays on different .exe, .dll files for a while and then it keeps going. Also HHD is making an awful sound.
I have not done anything to solve this problem because this happened before with CIS 3.8.
Thank you for reading.

Edit: Upps Avast 4.8

[viper]

Windows Vista 32 bit

I also get a major jump in outbound connections.  With 3.9 i get 30-60.  With 3.10 i get 330.  I am not the only one seeing this jump.  

3.10 also stopped blocking the following network traffic

Application: windows Operating system
Protocal:  UDP
Source IP:  10.118.220.1
Source Port:  67

3.9 blocks it fine.  In fact in one hour it blocked 320 intrusion attempts. 

[JJasper]

1. Your Operating System (32 or 64 bit) and Service Pack revision XP Home SP2 32 bit
2. Other Security Software Installed None
3. Step by step description to reproduce the issue After clean install of 3.10 all worked fine except I could not access my 16 bit Quicken application.  Got an error message that it cannot run. ("Attempt to access invalid address").
4. How you tried to resolve the problem Tried a system restore - did not work. Did a paragon image restore and went back to 3.9
5. Upload Memory Dumps on crash if you encounter any None
6. Attach screenshots to your posts to clarify the issue further None
7. Please put any False Positive Reporting here
8. Any other information you can think of

John

See here as well https://forums.comodo.com/other_general_gui_etc_bugs/310102194530_major_problem_kills_dos_programs-t42092.0.html;msg305222#msg305222

[imanewuser]

Using XPHome SP-3 with all critical updates installed on a x32 CPU.
  
Was using CIS 3.9......507 without problem (Firewall and D+ only installed, both set to "safe" mode).  

Updated yesterday to 3.10......529 (x32) as a clean installation (after first exporting my configuration), without apparent problem.  Installed only Firewall and D+ and imported my previously exported configuration. Today I tried to open MS Works Database Ver 7.0 and received the dreaded "Application Failed to Initialize, error code: 0xc0000018".  First tried to repair database program, then uninstalled and re-installed works.  No deal.  

Did a system restore to yesterday (prior to CIS update) and MS Works Database opened, but CIS was hosed with bizarre colors, no theme or language options on setup, and no product version visible in the "about" window.  I didn't trust the CIS to protect me, uninstalled it, and did another clean installation of 3.10....529.  Again, database program wouldn't open.  

Uninstalled CIS and with no CIS installed (not doing any further system restores) database worked perfectly.  Reinstalled 3.9.....507, reimported my configuration, and database is still working.

Clearly there is some code in CIS 9.10 that is causing the problem.

[Chiron494]

Another bug that still exists is discussed here

http://forums.comodo.com/other_general_gui_etc_bugs/gui_cant_see_close_button_on_about_window-t41413.0.html

[PegHorse]

1. Your Operating System (32 or 64 bit) and Service Pack revision (Instructions for XP and Vista)
Win 7 RC 7100 x64

2. Other Security and Utility Software Installed
Microsoft Essentials Security ( and i have uninstalled AV of Comodo )

3. Step by step description to reproduce the issue
Since this latest version is installed, when i try to connect to Battle.Net server with Starcraft BroodWar, i know its very old game but worked before... then Starcraft can't recognize its own version so it refuse me to enter Battle Net. If Comodo is completely uninstalled, then it works. I tried to use training mode of Defense+ and Firewall but, this doesn't help to solve the issue. I don't know how to diagnose  because Comodo doesn't show any alert.

4. How you tried to resolve the problem
I tried to Disable Defense+ and Firewall, and uninstalled Comodo. Only when Comodo is removed then my game works normally. Please note, with 3.9 version i don't have any issue of this kind.

5. Upload Memory Dumps on crash if you encounter any
None

6. Attach screenshots to your posts to clarify the issue further
None

[OmeletParty]

1. Windows XP Professional SP3 32-bit
2. Malwarebytes Anti-malware 1.38 free (on demand)
3. AV shows no message that eicar has been detected/quarantined if Automatically quarantine threats found during scanning is checked.
4. Only uncheking it will work.
5. N/A
8. This problem has happen with some malware in 3.9 it now happens with 3.10 with the eicar test file.

Thx.

[iroc9555]

Hi guys.

My system is my signature.

Related to CIS 3.10 and Spy Sweeper 6.1 (only antispyware) slow sweeps or hang ups.

I excluded all SS processes from Buffer overflow protection as advised by OmeletGuy early on. Still got hung up at 27 minutes into the sweep. Deactivated D+ completely; However, SS still took almost 20 minutes to finish. Exited CIS 3.10 from sys tray and it took SS 17 minutes to finish the full scan.

So I reinstalled CIS 3.9 again and SS is back to normal with full sweeps at 7 minutes.

Please see attachments.

[Frogshock]

Got also a Bug!

First of all, sorry for my Bad english.

I use CIS 3.x for a long time, whitout the AV Modul.
Since the Update from Today (to Version 3.10.xxxx), i got 2 probs.
If i start the IE8 and afte the surfing i shut them down, after i have in the Taskmanger 3 Entries from a aktive IE and the CPU is to 99% in use, permanently. I have to terminate this 3 tasks by hand, after this, the System works normal. Whith the FireFox 3 it is exactly the same problem. only the Opera has no problems and work fine like always. After Uninstalling Comodo 3.10 and Comodo Safer Surf, the problem has gone and all works fine again. After Re-Installing CIS 3.10 (whitout AV Modul) the Problem is back again. My System: AMD Athlon 64 3200+, 1Gig DDR400, Asus A8N-SLI SE nForce4 Chipset, nVidia GeForce 9800GT 512MB, Creative Labs Audigy 2ZS, WinXP pro 32bit Service Pack 3, Avira AntiVir Personal, a2 free. All with the newest Drivers

[kawaii]

Windows XP SP3 (English, 32 bit)
CIS 3.10 Firewall, NOD32 v4.0 Antivirus

Several MMORPGs use a program called gameguard for security. It's a very aggressive piece of software which requires high privilidiges to work.
In CIS 3.9 (and lower) there were problems with gameguard and the Defense+ part. With D+ turned on, and gameguard started all the "user name" disappeared in the task manager (see sceenshot) and it proved impossible to login to Windows Live Messenger. Turning D+ off (completly/reboot) solved these problems.

CIS 3.10 is however a greater problem. Even with D+ already fully disabled, and just the firewalll running the "user name" still disappears on the task manager (crtl+shift+esc when gameguard (rev 1352) is running) But now it is impossible to start ANY program at all. So when gameguard is active, i can't launch any other program. Programs already open can be used normally.

Turning D+ on or off makes no change. Running in "proactive defense" or "internet security" or "firewall security" doesn't make any changes.

An old topic runs here (of the previous problem) http://forums.comodo.com/defense_bugs/gameguard_and_comodo-t35104.0.html


UPDATE:
After a clean install of CIS 3.10 (rather than the upgrade from 3.9) the problem is changed a bit
With D+ enabled the taskamanger user names disappear, and i fail to start any program. But with D+ turned off everything works again.
How could it be that a clean install of CIS helped, and that the upgrade processes caused new problems?

[NeilG]

G'day,

Windows XP Pro, SP3
CIS 3.10 Firewall, NOD32 v4.0 Antivirus

I put in a bug report because of the similar problem in running "16 bit" applications (after installing COMODO 3.10.102194.530),  I can run cmd and get to virtual DOS window.  When running old dos files, they come back with "the system cannot execute the specified program".  Running them in windows results in ""attempt to access invalid address." error message.

I noticed that ntvdm.exe becomes a task, but wowexec.exe & opware16.exe do not start.

Also, when running FireFox I would have more than one instance in processes (task manager) and after closing the browser, firefox.exe remained as a running task.  Even happens if FireFox is opened in safemode with all add-ons and plug-ins disabled. (It hogs about 95% of CPU time, requiring manual stopping of all firefox tasks).  Same when using IE8.

I did shutdown COMODO, then stopped its services (Task Manager), but the faults remained.  Next I went to msconfig and stopped the comodo services from starting, rebooted and still had the same problems.

Last step was uninstalling Comodo, reboot, and try opening, closing browsers, try running 16 bit applications.  Guess what, they all work as should be. (and no more processes having to be stopped).

Neil.

[wmcelhon]

Ok.  Since I have to register to post on this forum, this is another thing that is pissing me off.  See, my problem is likely a little different from other people's and only started when I updated the Comodo Firewall to the newest version, yesterday (Friday night) or earlier today (Saturday morning).  My problem is that I can no longer use my virtual drive program when Comodo Firewall is active.  The details and specifics are below:

Today when I tried to use my virtual drive program, that being DaemonTools, to load up and use an image file with my computer for viewing, it wouldn't work.  The virtual drive program wouldn't even load up.  When I try to open up the virtual drive program now, with all the settings set (Firewall and Defense+ set to "Safe Mode"), I get a pop-up window as shown in the accompanying attachment (daemontools.jpg).  Because I recently (Friday) also updated my isobuster program, I uninstalled that to see if that was the problem.  The problem still persisted.

When I finally disabled the Firewall and Defense+ options on Comodo Firewall, I was able to re-install the virtual drive program of DaemonTools with no problems, and even use it.  For reference, I am using version 4.08HE (32-bit) of DaemonTools which is available through daemon-tools.cc.  Besides the program, it also installs a .sys file called sptd.sys, which stands for SCSI Pass Through Direct (SPTD) layer.  This is required for the program to work.  Of note, the program installed the file to the directory of c:\Windows\system32\drivers\.

As I do want to mention, before this lastest update to the newest version of Comodo Firewall, the virtual drive program worked with NO problems.  And even though the version I use for the virtual drive program is a little older, as there are a few updates since I got my version, this should not be an issue since when the new version of Comodo Firewall came within the last day or two, only after it was updated did this problem occur.

Now since I became aware that Comodo was the problem, I tried testing it with reactivating the firewall.  When I reactivate the Firewall portion and set it back to "Safe Mode", the virtual drive program still worked with no problems.  When I reactivated the Defense+ option back to "Safe Mode", the virtual drive program did not work.  Even when I set the Defense+ option to "Training Mode", it still did not work.  So something new in the Defense+ engine has to be conflicting with the virtual drive program and/or driver installed to use it properly.

Now, for the numbers thingie to post:

1. Your Operating System (32 or 64 bit) and Service Pack revision (Instructions for XP and Vista):

   I use Windows XP Home with Service Pack 3 installed, 32-bit

2. Other Security and Utility Software Installed

   Although none of the other security software has created a conflict like this, I do use Avast Home Edition 4.8, a-squared free (lastest version although it is only on demand use, not active use), and I use Windows Defender.

3. Step by step description to reproduce the issue

   Well, the easiest way to reproduce this issue is to go to daemon-tools.cc and download any version I guess of daemon-tools and try to install it, as it will first try to install the sptd.sys file and after that, ask you to reboot your computer and then it will try to install the daemon-tools program.  It should install the sptd.sys file with no problems but it will then fail on the daemon-tools program install.  Even with the newer version available online, that is the free version, that failed to install also while the firewall's defense+ setting was active.

4. How you tried to resolve the problem

   Read above.  I was able to test the installation by deactivating the Defense+ settings and with that deactivated, the virtual drive program was then able to be installed and also used.  The Firewall settings did not affect the virtual drive program it seems.  When the Defense+ settings were reset to anything like "Safe Mode", the virtual drive program was no longer working.

5. Upload Memory Dumps on crash if you encounter any

   None are available.

6. Attach screenshots to your posts to clarify the issue further

   See the attached photo for the result of when you try to run the program while the Defense+ settings are active and set, like to "Safe Mode".

   Just in case the photo can't be seen, it says the following:
   "Initialization error 0.
    This program requires at least Windows 2000 with SPTD 1.37 or higher.
    Kernel debugger must be deactivated."

7. Please put any False Positive Reporting here

   None are available.

8. Any other information you can think of

   Why this issue has arisen with this new release, I have no idea.  Although there is a work around, I do like having my Defense+ settings active while on my computer and connected to the Internet.  And also, having to disable and reboot my computer each time I want to use the virtual drive program is kind of annoying.  I just hope you are able to resolve this issue so that I can use the virtual drive program without any problems while also using Comodo Firewall with all the settings active.  As I said, this issue just started a day ago after updating Comodo to the new version and never was a problem before.

[cerebrus]

Same problem as NeilG

When trying to run 'command' , I get 'attempt to access invalid address'.  'ntvdm.exe' runs as a task, I am unable to kill the process.  Browsing via Firefox (3.5) is slow, I can close it without problems though.

Win XP Pro SP3 (32 bit)
COMODO 3.10.102194.530
Avast 4.8.1335

[Tags:]