Application Monitor Memory Read Error [Resolved]

Today, after about 2:00pm, every time I tried to post I received a popup from CFP 2.4.18.184 about a memory error while trying to read Application Monitor, I think it said the error was 0x817 or 0x718, I can’t remember now (I have it written down at work). At that point, everything became pretty much non-responsive. Couldn’t access any other applications. Outlook went offline (even though the connection was still active), and shut down on its own once. I tried to print something, OS said there was no printer installed. Couldn’t shut down, even, had to manually shut off via power button (didn’t have to unplug, though). Still had full mouse control, menus, etc (menus very slow, though).

During this same time, browsing was okay, but scrolling would hang and become non-responsive. Typing would hang for several seconds at a time, and sometimes stop altogether. Firefox updated yesterday, but it’s fine at home, where I am now. No changes were made to the system today; no installs or uninstalls, etc. No downloads, even. Well, that’s not entirely true; PeerGuardian2 did update its files, but not until after all this started. Several reboots did not resolve the issue. Windows said temp file was corrupted, and ran checkdisk; which found no errors.

I have not checked the Event Viewer to see if there’s any info there. I will do so in the morning. I got tired of messing with it, blocked all connection to the internet, set a utility to scan for problems and left for the day.

LM

Welcome to the forums! (:WAV)

Have you performed a search? Nevermind, I’ll do it for you. Some of these may not be exactly related, but might provide hints:
https://forums.comodo.com/index.php/topic,6379.0.html
https://forums.comodo.com/index.php/topic,6706.0.html
https://forums.comodo.com/index.php/topic,4200.0.html (–> Hey this one has you in it, too! :D)
https://forums.comodo.com/index.php/topic,6092.0.html
https://forums.comodo.com/index.php/topic,4202.0.html (–> There you are again, but…)
https://forums.comodo.com/index.php/topic,536.0.html
https://forums.comodo.com/index.php/topic,3671.0.html
https://forums.comodo.com/index.php/topic,5268.0.html
https://forums.comodo.com/index.php/topic,1462.0.html
https://forums.comodo.com/index.php/topic,5464.msg40740.html#msg40740
https://forums.comodo.com/index.php/topic,4068.msg31058.html#msg31058

Memory dump?

Soya, the search-miester extraordinaire : (:CLP)

Just wondered, are these error messages cpf specific? Because they are similar to the errors sometimes seen id BSOD…

Soya, yes I performed a search b4 I posted; no I didn’t find anything immediately relevant.

Toggie, the initial (and recurring) error is a CFP popup, from CFP, specific to CFP; I have never seen it before. It rose up from the bottom toolbar, near the systray area. The error was 0x718, and referred to a memory error while reading the application monitor.

There’s nothing immediately related to that in Event Viewer. There was no bsod, there is no minidump.

Here are the error and warning messages I found in Event Viewer, under System.

Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
Date: 3/27/2007
Time: 15:26:41
User: N/A
Computer: WCPLAPTOP
Description:
The System Restore filter encountered the unexpected error ‘0xC0000044’ while processing the file ‘Perflib_Perfdata_4a8.dat’ on the volume ‘HarddiskVolume1’. It has stopped monitoring the volume.

For more information, see Help and Support Center at Microsoft Support.
Data:
0000: 06 00 00 00 04 00 4e 00 …N.
0008: 00 00 00 00 01 00 00 c0 …À
0010: 00 00 00 00 00 00 00 00 …
0018: 00 00 00 00 00 00 00 00 …
0020: 00 00 00 00 00 00 00 00 …

Event Type: Warning
Event Source: Ntfs
Event Category: None
Event ID: 50
Date: 3/27/2007
Time: 15:28:45
User: N/A
Computer: WCPLAPTOP
Description:
{Delayed Write Failed} Windows was unable to save all the data for the file . The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere.

For more information, see Help and Support Center at Microsoft Support.
Data:
0000: 04 00 04 00 02 00 52 00 …R.
0008: 00 00 00 00 32 00 04 80 …2…€
0010: 00 00 00 00 9a 00 00 c0 …š…À
0018: 00 00 00 00 00 00 00 00 …
0020: 00 00 00 00 00 00 00 00 …
0028: 9a 00 00 c0 š…À

Event Type: Information
Event Source: Application Popup
Event Category: None
Event ID: 26
Date: 3/27/2007
Time: 15:28:45
User: N/A
Computer: WCPLAPTOP
Description:
Application popup: Windows - Delayed Write Failed : Windows was unable to save all the data for the file \Device\HarddiskVolume1\Documents and Settings\username\Application Data\Mozilla\Firefox\Profiles\52r6b1wd.default. The data has been lost. This error may be caused by a failure of your computer hardware or network connection. Please try to save this file elsewhere.

For more information, see Help and Support Center at Microsoft Support.

This comes after a reboot:

Event Type: Error
Event Source: Ntfs
Event Category: Disk
Event ID: 55
Date: 3/27/2007
Time: 15:31:09
User: N/A
Computer: WCPLAPTOP
Description:
The file system structure on the disk is corrupt and unusable. Please run the chkdsk utility on the volume C:.

For more information, see Help and Support Center at Microsoft Support.
Data:
0000: 0c 00 00 00 02 00 4e 00 …N.
0008: 02 00 00 00 37 00 04 c0 …7…À
0010: 00 00 00 00 32 00 00 c0 …2…À
0018: 18 00 00 00 00 00 00 00 …
0020: 00 00 00 00 00 00 00 00 …

Event Type: Information
Event Source: Application Popup
Event Category: None
Event ID: 26
Date: 3/27/2007
Time: 15:31:10
User: N/A
Computer: WCPLAPTOP
Description:
Application popup: Windows - Corrupt File : The file or directory C:\Documents and Settings\username\Local Settings\Temp is corrupt and unreadable. Please run the Chkdsk utility.

For more information, see Help and Support Center at Microsoft Support.

Event Type: Error
Event Source: sr
Event Category: None
Event ID: 1
Date: 3/27/2007
Time: 16:07:56
User: N/A
Computer: WCPLAPTOP
Description:
The System Restore filter encountered the unexpected error ‘0xC0000044’ while processing the file ‘EMS_C00E.RHC’ on the volume ‘HarddiskVolume1’. It has stopped monitoring the volume.

For more information, see Help and Support Center at Microsoft Support.
Data:
0000: 04 00 00 00 04 00 4e 00 …N.
0008: 00 00 00 00 01 00 00 c0 …À
0010: 00 00 00 00 00 00 00 00 …
0018: 00 00 00 00 00 00 00 00 …
0020: 00 00 00 00 00 00 00 00 …

Event Type: Warning
Event Source: atapi
Event Category: None
Event ID: 56
Date: 3/27/2007
Time: 16:12:21
User: N/A
Computer: WCPLAPTOP
Description:
The driver failed to allocate memory.

For more information, see Help and Support Center at Microsoft Support.
Data:
0000: 00 00 10 00 01 00 64 00 …d.
0008: 00 00 00 00 38 00 04 80 …8…€
0010: 10 00 00 00 9a 00 00 c0 …š…À
0018: 00 00 00 00 00 00 00 00 …
0020: 00 00 00 00 00 00 00 00 …
0028: 00 00 00 00 80 00 00 00 …€…
0030: 20 02 00 00 49 64 65 50 …IdeP

I haven’t followed the MS link yet, as I figured it would be useless anyway… :wink:

Still haven’t figured out what’s with all these lags while typing on line; still getting those, but not at home, so that’s weird, if it were software-related seems like I would…

LM

Ouchie. The last time I had a corrupt profile it had something to do with spyware or one of MS exploits that weren’t patched years ago. >:(

What about restoring from a backup image or something?

While there could be some malware, I’m doubtful. All downloads are scanned, regular scans have come up with nothing. I’m going thru some system analyzers now just to make sure nothing’s out of place. And I have backups, just in case…

LM

It looks like a hardware issue to me.

For what ever reason the data stored in the NTFS transaction logs failed to get written to the disk and that caused a number of files to become corrupted.

Perflib_Perfdata_xxx.dat is only a temporary file that is created by the Performance subsystem in Windows based OS. normally its deleted when you shut down.

It’s really a question of what caused the initial failure. My guess would be a driver/memory/disk conflict/ allocation problem. Maybe a one off, but could be a sign that something is wrong.

Not an easy one to troubleshoot :frowning:

Toggie

I hadn’t paid too much attention to it, because this entry goes back as far as I can see in Event Viewer, and I simply chalked it up to one of the services I’ve disabled, but this entry happens every day, shortly after bootup (after every boot)

Event Type: Error
Event Source: Service Control Manager
Event Category: None
Event ID: 7023
Date: 3/21/2007
Time: 08:13:12
User: N/A
Computer: WCPLAPTOP
Description:
The IPSEC Services service terminated with the following error:
An invalid argument was supplied.

For more information, see Help and Support Center at Microsoft Support.

Perhaps related? But if it were (thinking out loud), why wouldn’t the events of yesterday not occurred previously?

LM

I’m not sure the IPSEC error is related, unless you are using IPSEC over a VPN/ATAPI device?

I actually don’t use IPSEC, so I have the services disabled without any problems or events being generated.

Toggie.

Hmmm… I wonder if there is a database of cfp error messages somewhere…

Not using IPSEC. Obviously something’s trying to run, though… Didn’t seem to me like it’d be related, but it is Windows, after all; anything’s possible (except that it works flawlessly!).

Couldn’t find a CFP error file; I looked. Maybe search-maestro Soya can…

LM

CFP error file? It should be located in your Documents & Settings profile directory where the temp files are stored, like during updates. The problem is even if you do find it, it’s temporary, so it’s probably gone by now.

I just experienced (yesterday) the same thing on my home computer. Same memory error while trying to read application monitor. Same occurrence, while trying to post to the forums. Reboot restored system to normalcy. But I noted one thing that I didn’t previously. (error 0x718, by the way)

On internet (only), there was extreme lagging for pageloading, links, typing text, etc. Mouse moves okay, but nothing would highlight for several seconds sometimes. Very draggy/jerky; lots of delay. Text sometimes gets out of order due to cursor position not updating when moved.

I’ve been having this for a while (ever since original occurrence) on my work machine. I didn’t relate it the CFP memory issue, and have been seeking assistance elsewhere on that (without any solution thus far). I’ve kept Comodo Support updated on recurring memory errors, and also ran MemTest +, which returned no errors. When I reported this happening at home, they closed the case and told me to reinstall (and to seek BETA support in the Forums - kinda confused about that one…). Ticket XXW-800705.

I will reinstall now and see what happens.

LM

Have you informed them that you’re a mod in this forum? ^|^

I did then! ;D

Now, moving on. Per their direction, I have uninstalled and reinstalled CFP. This did not resolve the issue in any way. Back to the drawing board, again.

LM

Edit: Looking back thru this thread, I see that I did tie the browsing lag together with the memory error. Hmm; wonder why I didn’t keep that train of thought going? Instead, my personal memory reset (maybe I rebooted?) and I moved in a different direction, deciding they weren’t connected. Ahh, full circle.

PS Edit: If it were a hardware failure, it seems odd that I would see it on two disparate systems:
WinXPProSP2. Version 5.1.2600.2180, WinXPProSP2. Version 5.1.2600.2622,
IBM PC 300PL, 50G HD, 640M RAM, Dell Inspiron 6000, 60G HD, 512M RAM,
Intel Pentium 3 500MHz, 850 MHz max CPU Intel Pentium M 1.6GHz, 1800 MHz max CPU

This is an old info (text) file I have; I know both Versions have updated (last four digits); at any rate, you can see other than OS they’re very different…

So no common denoniminator in sight that’s relevant. There must be something on both computers that you did or didn’t do.

The System Restore filter encountered the unexpected error
. I wonder what System Restore has anything to do with this. Mine's disabled. I assume you already ran scandisk or chkdsk. The chance of being a dying harddrive is low considering how it's happened to 2 different computers.

You would think so, and that’s certainly possible. Hopefully Support will give some wonderful feedback (now that I’m in the forums, LOL) and ask specific questions about installed software, etc. Or Egemen (nope, not with v3 still in the works…).

Both systems are relatively fresh installs. Late last year at home, due to XP deciding I’d made too many hardware changes over the last 5 years and locking me out due to a faulty module, I reinstalled there. Then at work, I got bit by the winlogon escapade with CAVS; couldn’t get the file to copy back into the system, so I reformatted and reinstalled there before more time was lost.

I’m very doubtful of malware involvement. Although anything’s possible…

System Restore is not enabled at work; I don’t think it is at home either (but I’ll have to double-check).

LM

As of today, this issue is resolved (for me). I have informed Support; hopefully they will continue to investigate, to find out whether the ‘fault’ is with Firefox or CFP. The issue was apparently a corrupt profile in FF; it must have occurred at the point of the error. I don’t know whether FF got corrupted and caused the CFP error, or CFP errored and caused the corruption to the profile. I do know that in both scenarios it occurred while posting to the forums here.

Deleting and rebuilding the profile has done the trick. Now it’s almost too fast, Whoash! I’ve gotten so used to lags and retyping, that I don’t know what to do now… :wink:

LM

PS: I’ve locked the topic and marked it resolved. If I need to reopen it, I’ll PM a Mod (and include a link) so that they will be so happy to reopen it for me… (:NRD)