Author Topic: CIS and BSOD at boot only  (Read 2302 times)

Offline anuswara

  • Comodo Loves me
  • ****
  • Posts: 121
CIS and BSOD at boot only
« on: November 18, 2018, 07:30:50 AM »
Hi,

could you please verify if the bsod today was caused by comodo 10.2.0.6526 (the latest build available here) ? because just after the automatic reboot (after the bsod with automatic data collection) I saw on desktop the "comodo warning window" with "comodo has crashed, do you want to send a report. yes" (the minidump has been sent).
I add the usually requested infos here (event dumps too):
https://www108.zippyshare.com/v/RYQH29CQ/file.html

thanks a lot, Best regards

Offline PremJK

  • Comodo Staff
  • Comodo's Hero
  • *****
  • Posts: 501
  • Live and Let Live
Re: CIS and BSOD at boot only
« Reply #1 on: November 19, 2018, 04:32:56 AM »
Hi Anuswara,

Can you please try the latest CIS 6728 and provide the feedback.

Thanks in advance.

Kind Regards,
PremJK

Offline anuswara

  • Comodo Loves me
  • ****
  • Posts: 121
Re: CIS and BSOD at boot only
« Reply #2 on: November 19, 2018, 05:48:07 AM »
Why autoupdate tells me that 6526 is the latest build?
what driver is reported as problematic in my dump? thanks.

Offline anuswara

  • Comodo Loves me
  • ****
  • Posts: 121
Re: CIS and BSOD at boot only
« Reply #3 on: December 05, 2018, 06:43:01 PM »
11.0.0.6728 now.

1)After boot: do not check for AV defs update: all is ok.
2)After boot : do check for AV defs update: BSOD.
3) If after 2) all is ok, then the whole day is ok (with other manual updates search).

Thanks for analyzing the complete "full memory dump" (rar compressed) collected at the OS auto-reboot, after the BSOD that happens *during* the task "manual check for AV updates" (i.e. "NOT check for cis updates = no BSOD").
https://www9.zippyshare.com/v/G1hmnDCz/file.html
("one month" link)

Best,

Offline PremJK

  • Comodo Staff
  • Comodo's Hero
  • *****
  • Posts: 501
  • Live and Let Live
Re: CIS and BSOD at boot only
« Reply #4 on: December 11, 2018, 09:48:34 AM »
Hi Anuswara,

Thanks for reporting.

Please check your Inbox for private message and provide us the requested dump.

Thanks in advance.

Kind Regards,
PremJK

Offline anuswara

  • Comodo Loves me
  • ****
  • Posts: 121
Re: CIS and BSOD at boot only
« Reply #5 on: December 11, 2018, 10:14:19 AM »
Hi, thanks for your reply and for analysis.

The dump of 5.12.2018 (2.99GB) was generated with following settings (more complete than that it seems not possible here):
https://postimg.cc/HryC49f7

Addendum:
a "workaround" (working since 6.12.2018) to the BSOD during the first CIS update of the day:
after boot the small icons start to appear in systray, ok, you have now to wait 8-10 minutes before searching for CIS updates. The less minutes you wait, the bigger the possibility of BSOD (or OS total hang, without dump).


Offline PremJK

  • Comodo Staff
  • Comodo's Hero
  • *****
  • Posts: 501
  • Live and Let Live
Re: CIS and BSOD at boot only
« Reply #6 on: December 11, 2018, 10:36:16 AM »
Hi Anuswara,

Can you please share that dump in any online storage like mega.nz or dropbox and share us the download link.

Will forward those dumps to developers for investigation.

Thanks in advance.

Kind Regards,
PremJK

Offline anuswara

  • Comodo Loves me
  • ****
  • Posts: 121

Offline PremJK

  • Comodo Staff
  • Comodo's Hero
  • *****
  • Posts: 501
  • Live and Let Live
Re: CIS and BSOD at boot only
« Reply #8 on: December 13, 2018, 04:20:45 AM »
Hi Anuswara,

Thank you so much for taking time in providing the requested dump. Forwarded the dump to our developer for investigation. We will get back to you.

Kind Regards,
PremJK

Offline anuswara

  • Comodo Loves me
  • ****
  • Posts: 121
Re: CIS and BSOD at boot only
« Reply #9 on: December 25, 2018, 09:16:49 PM »
Hi PremJK,

here another, up to date, full BSOD dump (RAR compressed); I guess the same (still unknown) problem:
https://drive.google.com/open?id=1htDig80888use2nMltIgnFh2thiZGUox
https://drive.google.com/open?id=1506smykX5vF5cBfPcfPTHyhUq1e86YAI

thanks.
Best,



Offline anuswara

  • Comodo Loves me
  • ****
  • Posts: 121
Re: CIS and BSOD at boot only
« Reply #10 on: December 29, 2018, 07:26:39 AM »
ohhhhhhhhhhhhhh :(

Surely CIS is involved, see here the clear message:
https://postimg.cc/SjNd3XwC

CIS preduced exactly this log:
https://www22.zippyshare.com/v/1HEk9mpF/file.html
(I hope that CIS dump may be very helpful)

and needed to re-download 400MB defs!

I add other files (cmdinstall, eventviewer so you can see what happened, memory dump: for "full" memory dump please see the previous message with link to google drive, thanks):
https://www82.zippyshare.com/v/iUVWkCum/file.html
https://www105.zippyshare.com/v/26SdQ4an/file.html

I warmly hope that this very big problem (the FIRST "search for defs updates" after the boot) can be understood by engineers.
Thanks.
Links to zippyshare active for one month (!)

PS: running CMD as admin:
sfc /scannow
CBS.txt
ZERO ERRORS, nothing that need to be repaired on this system!

Happy new year! (with less BSOD and CIS crashes at boot?).

Offline futuretech

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 4294
Re: CIS and BSOD at boot only
« Reply #11 on: December 29, 2018, 10:43:13 AM »
Do you have Intel Matrix Storage Manager installed? Also can you run fltmc from an elevated command prompt and list the output of that command?

Offline anuswara

  • Comodo Loves me
  • ****
  • Posts: 121
Re: CIS and BSOD at boot only
« Reply #12 on: December 30, 2018, 12:55:37 PM »
Hi, your purpose sounds very interesting.
Yes, you are right, I see this Matrix https://postimg.cc/svFhJpZY
always ignored by me.

Here the requested output Matrix:
https://postimg.cc/GHksgHkZ

[[
and here, just as comparison, the same task from my Vista+CIS laptop without problems:
https://postimg.cc/cKSNG2hx
]]

Maybe this Matrix sw bothers CIS during the boot process?

Thanks, Best

Offline futuretech

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 4294
Re: CIS and BSOD at boot only
« Reply #13 on: December 30, 2018, 02:47:51 PM »
Hi, your purpose sounds very interesting.
Yes, you are right, I see this Matrix https://postimg.cc/svFhJpZY
always ignored by me.

Here the requested output Matrix:
https://postimg.cc/GHksgHkZ

[[
and here, just as comparison, the same task from my Vista+CIS laptop without problems:
https://postimg.cc/cKSNG2hx
]]

Maybe this Matrix sw bothers CIS during the boot process?

Thanks, Best
If you don't have any use for it, I would uninstall it and see if you can still cause BSOD, if no crash then keep it uninstalled if you don't use it. If it is required try to find an updated version from either your computer manufacture website or get the latest version from Intel. Another user has it installed that also causes BSOD on boot after performing an AV update of CIS. Is your OS Vista as well?

Offline anuswara

  • Comodo Loves me
  • ****
  • Posts: 121
Re: CIS and BSOD at boot only
« Reply #14 on: December 30, 2018, 05:49:56 PM »
Yes, Vista here.
The driver (even if I dont use Raid) cannot be unistalled, even as admin because it is a system driver "always in use".

https://downloadcenter.intel.com/product/55005/Intel-Rapid-Storage-Technology-Intel-RST-
here I see 2007 and 2009 driver (i.e. not updated), the problem with CIS update after boot arised, I guess, 2015...it was the 8th december (2015?) update, when you introduced support for w10, according to your official changelog.
How this driver interact with CIS is a mystery, another mistery is that this driver is on laptop too, without issues.

https://downloadcenter.intel.com/it/download/12528/Driver-RAID-Intel-Matrix-Storage-per-Windows-
https://downloadcenter.intel.com/it/download/18314/RAID-Intel-Matrix-Storage-Manager-Driver-per-Scheda-Intel-per-workstation-WX58BP
the exact name of my motherboard is not listed in dxdiag.exe hmmmm, I am a bit confused what to do.

It is strange that the driver is corrupted for some time, then it is not corrupted for 3 months.



« Last Edit: December 30, 2018, 05:52:11 PM by anuswara »

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek