BSODs: Please add your minidump files here(v3)

Comodo Internet Security - CIS Resolved/Outdated Issues - CIS
141

Hello,
when I install CIS 3.9.95478.509_XP_Vista_x32 I get an BSOD after rebooting. The referred file is tcpip.sys. I had to uninstall CIS in safe mode to solve this problem.

Installed setup file: CIS_Setup_3.9.95478.509_XP_Vista_x32.exe
Options during installation: Antivirus: no, Firewall: yes, Defense+: yes

Operating system: XP Media Center, SP3

Antivius software: Avira Antivir Personal - Free Antivirus, Version 9.0.0.403

The minidump file is attached.

Any help?

Thank you very much.

kylie

[attachment deleted by admin]

142

Hi Comodo team,

I’ve installed the personal firewall a few days ago, after some years of using Zone Alarm. I’ve made a switch due to ZA problems with internet connection sharing. I couldn’t get it to work unless I set the firewall;s security to “medium”. I don’t have that problem with Comodo but there’s another (serious) problem. I use my comp with the internet connection sharing turned on to connect via ad-hoc wireless network with Ipod touch. And a few minutes after connecting to internet I get BSOD which indicates inspect.sys as a possible problem. I’ve downloaded the latest drivers for my wlan card, but it didn’t help. Could you help me solve this problem? My specs below and the minidump attached.

Thanks,
Brazer

  • Windows XP SP2
  • Avast 4.8 antivirus
  • Realtek RT2500 wlan card (driver version 3.2.0.10 from 9 Feb 09)

[attachment deleted by admin]

143

Windows Version/Bit and Service Packs
Windows XP Pro/32 SP3

Your realtime Antivirus/version,Spyware remover/Version, other Security Software/Version
CIS 3.8.65951.477 XP_Vista_x32
no spyware remover
no other security software

Affected Driver/Software and Version (if the bug doesn’t affect window itself)
n/a

Brief description of the problem (Attach Diagnostic report or crash dumps)
[b]IRQL_NOT_LESS_OR_EQUAL
BSOD when instructing Windows to Stand By
(crash dump attached)

CIS also slows down Windows logon via IBM/Lenovo Client Security[/b]

Steps to reproduce the bug (if applicable)
1. install CIS
2. Start > Turn off computer > Stand By

[b]All problems resolved by uninstalling CIS :-\

[/b]

[attachment deleted by admin]

144

Tech support,

Having read positive things about the newest version I decided to try it out having used zone alarm pro and AVG for years but I’m getting constant BSODs. This is a completely clean, new install. I installed vista 32b once and then installed nvidia drivers followed by CIS. Then my modem driver (this is a belkin G wireless USB). CIS correctly identified the network but as soon as the virus definition tried to update itself it blue screened (30% download to be precise). I assumed the windows install was faulty so I formatted HD and re-installed, didn’t install the video drivers, installed CIS and then the modem driver. This time I opted for the trial version of liveexpert and it asked me to download Java. I said yes and BSOD again. Definitely a problem between the PC and CIS. Can you help? I need to get this computer up and running quickly so any help that you can offer on this would be great.

  • Windows Version/Bit and Service Packs

Vista 32, no updates or SPs (see attached WER-82930-0.sysdata.xml for more details)

* Your realtime Antivirus/version,Spyware remover/Version, other Security Software/Version

CIS 3.9.95478.509 (no other security - or any other software - installed)

* Affected Driver/Software and Version (if the bug doesn't affect window itself)

See attached

* Brief description of the problem (Attach Diagnostic report or crash dumps if needed)

as above

* Steps to reproduce the bug (if applicable)

as above

* Gmer report (download) Only for 32bit platforms

Not applicable as no rootkits installed.

[attachment deleted by admin]

145

no change since last time, only update to latest build
CIS_Setup_3.10.101801.529 (x64)

[attachment deleted by admin]

146

CIS_Setup_3.10.102363.531_XP_Vista_x64

[attachment deleted by admin]

147

BSOD

[attachment deleted by admin]

148

CONFIGURATION

Windows XP PRO x64 SP3 - v5.2, Build 3790 (up to date)

BIOS : Award ASUS P5N-E SLI ACPI BIOS Revision 0901
BIOS Type : Award Phoenix - AwardBIOS v6.00PG

Motherboard : ASUS P5N-E SLI
Motherboard Chipsets :

  • North Bridge: nVIDIA nForce 650i SLI (C55)
  • South Bridge: nVIDIA nForce 430i (MCP51)
    CPU : Intel QuadCore 6600 CPU 2.40Ghz
    RAM : 4090MB RAM
    GFX : GeForce 8800 GTX
    GFX Driver : NVIDIA GeForce-ION Driver Release 186.18
    Soundcard : built-in Realtek ALC883 @ nVIDIA nForce 430i (MCP51) - High Definition Audio Controller PCI
    Soundcard Driver : Realtek High Definition Audio Codecs R2.28
    DirectX : v9.0c (4.09.0000.0904)

DirectVobSub 2.39
K-Lite Codec Pack 64-bit 2.4.5
K-Lite Codec Pack 32-bit 5.0.0

Comodo Internet Security
Antivirus : Disabled
Defense : Disabled
Firewall : Custom

[attachment deleted by admin]

149

another BSOD

i lost my work again because of Comodo !

why release a public version that is not stable at all ?

BSOD * CRASHES * LOGS * …

CONFIGURATION

Windows XP PRO x64 SP3 - v5.2, Build 3790 (up to date)

BIOS : Award ASUS P5N-E SLI ACPI BIOS Revision 0901
BIOS Type : Award Phoenix - AwardBIOS v6.00PG

Motherboard : ASUS P5N-E SLI
Motherboard Chipsets :

  • North Bridge: nVIDIA nForce 650i SLI (C55)
  • South Bridge: nVIDIA nForce 430i (MCP51)
    CPU : Intel QuadCore 6600 CPU 2.40Ghz
    RAM : 4090MB RAM
    GFX : GeForce 8800 GTX
    GFX Driver : NVIDIA GeForce-ION Driver Release 186.18
    Soundcard : built-in Realtek ALC883 [at] nVIDIA nForce 430i (MCP51) - High Definition Audio Controller PCI
    Soundcard Driver : Realtek High Definition Audio Codecs R2.28
    DirectX : v9.0c (4.09.0000.0904)

DirectVobSub 2.39
K-Lite Codec Pack 64-bit 2.4.5
K-Lite Codec Pack 32-bit 5.0.0

Comodo Internet Security
Antivirus : Disabled
Defense : Disabled
Firewall : Custom

[attachment deleted by admin]

150
[b][u]Please DO remember to add those informations to all BSODs you post [/u].[/b]

[ol]- Windows Version/Bit and Service Packs

  • Your realtime Antivirus/version,Spyware remover/Version, other Security Software/Version
  • Affected Driver/Software and Version (if the bug doesn’t affect window itself)
  • Brief description of the problem (Attach Diagnostic report or crash dumps)
  • Steps to reproduce the bug (if applicable)
  • Gmer report (download) Only for 32bit platforms[/ol]

[ol]- Windows XP 32 bit SP2

  • none
  • COMODO Firewall Pro 3.0.25.378
  • Random BSoD from different processes RtlIpv4StringToAddressA system service calls. Image connected with is cmdguard.sys. Please, take a look into attached minidumps.
  • not sure
  • SSDT spcm.sys ZwEnumerateKey [0xBA6C7CA2]
    SSDT spcm.sys ZwEnumerateValueKey [0xBA6C8030]

---- Devices - GMER 1.0.14 ----

Device \FileSystem\Ntfs \Ntfs 8A5D11F8

AttachedDevice \Driver\Tcpip \Device\Ip cmdhlp.sys (COMODO Firewall Pro Helper Driver/COMODO)
AttachedDevice \Driver\Tcpip \Device\Tcp cmdhlp.sys (COMODO Firewall Pro Helper Driver/COMODO)
AttachedDevice \Driver\Tcpip \Device\Udp cmdhlp.sys (COMODO Firewall Pro Helper Driver/COMODO)
AttachedDevice \Driver\Tcpip \Device\RawIp cmdhlp.sys (COMODO Firewall Pro Helper Driver/COMODO)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass0 VMkbd.sys (VMware keyboard filter driver (32-bit)/VMware, Inc.)
AttachedDevice \Driver\Kbdclass \Device\KeyboardClass1 VMkbd.sys (VMware keyboard filter driver (32-bit)/VMware, Inc.)[/ol]

ps. Why wont you allow to upload .dmp files directly?

[attachment deleted by admin]

151

Hello shd,

CFP 3.0.x is no longer updated, it will be best to uninstall this version and download CIS 3.10.x.531 you can chose to install FW only if you like then those bugs are probably fixed.

152

I’ve been getting BSOD once a month for a while and recently installed Cisco VPN client 5.0.05.0290. 99% of the time I connected to VPN (dozens of tries), I received a BSOD within a few seconds. This problem occured even when I had all of my anti-virus/anti-spyware/firewall software in disabled mode.

After an entire day of troubleshooting, I decided to try uninstalling all of my security software and vpn, deleting associated registry keys, and then installing vpn first.

VPN magically worked. I was able to install all of my other security programs (Avast Anti-virus, Spybot Search & Destroy, Spyware Blaster) without any problems. Then if I reinstalled Comodo Firewall the problem reoccured, deinstalling it fixed my problem.

I am not sure if Comodo had anything to do with my monthly BSOD, but it is somehow related to my problem with Cisco VPN.

[attachment deleted by admin]

153

Hello bearsfankorea,

This is most probably caused by the ZoneAlarm drivers Cisco ships with check this FAQ and see if that helps you out here

154

Hello
I’ve been getting BSOD on booting ramdisk.
Its working correcly with previous CIS(3.10.xxx).

OS: Windows 7 x64 Ultimate RTM build7600
CIS: ver 3.11.108364.552 (no AV/ no secure DNS/ no surf)
Ramdisk: Dataram Ramdisk Version3.5.130RC3 (http://www.dataram.com/products-and-services/ramdisk)

Thanks

[attachment deleted by admin]

155

Hello Nyaa,

I think you have to report this issue with Ramdisk, dump analysis for both dumps point to Ramdisk:

BugCheck 1000007E, {ffffffffc0000005, fffff88006a82eab, fffff880039f4978, fffff880039f41d0}

Probably caused by : RAMDiskVE.sys ( RAMDiskVE+9eab )

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
This is a very common bugcheck. Usually the exception address pinpoints
the driver/function that caused the problem. Always note this address
as well as the link date of the driver/image that contains this address.
Some common problems are exception code 0x80000003. This means a hard
coded breakpoint or assertion was hit, but this system was booted
/NODEBUG. This is not supposed to happen as developers should never have
hardcoded breakpoints in retail code, but …
If this happens, make sure a debugger gets connected, and the
system is booted /DEBUG. This will let us see why this breakpoint is
happening.
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff88006a82eab, The address that the exception occurred at
Arg3: fffff880039f4978, Exception Record Address
Arg4: fffff880039f41d0, Context Record Address

156

could you give a check to my minidump files?
I update comodo firewall some days ago, and from then, I receive a BSOD
during the shutdown process.
Everything seems to work fine, but when I try to shutdown the PC a BSOD appears.

Never had a problem before this update.

At the moment the version installed is 3.11.108364.552

My system has XP SP3 installed.

[attachment deleted by admin]

157

Alll 3 point to:

BugCheck 1000007E, {c0000005, 80657277, f7be5bc8, f7be58c4}
Probably caused by : ntoskrnl.exe ( nt!HvShiftCell+10 )

Can you check the windows eventlog to see if there is additional information recorded there ?

Are the latest security fixes installed also ?
You can try to export the configuration (so you can quickly import after reinstall) and uninstall CIS and see if this “removes” the issue.

158

Nothing in the system event.

However I uninstalled comodo and the problem was still there.

Pretty strange. The problem came up after the updating, but uninstalling it doesn’t resolve the issue.

I tried to use windbg with the symbols installed but I can’t identify the driver causing the problem.

is it a way to identify the driver causing the problem? Remote debugging with windbg could give me additional info?

159

There are some references on technet.microsoft.com about the 100007E being related to usb drivers but those point to the "probably caused by : usb…sys

Did you by any chance install a new usb device, hooked up a pen drive / webcam what ever usb thingy ?

Does it also BSOD if you put it to standby and/or hibernate ?

160

No new USB device.
Standby works correctly.

The overall system works correctly.

No virus/malware/rootkit present: I have ESET NOD32 on my system and comodo internet security suite, I check the system for rootkit with gmer and combobox (if you know it …), I have a windows live cd with various antivirus/spyware like avira and avast, I made a scan from the live cd (so nothing can hide) and they found nothing.

It’s absolutely a driver problem. This week I did just two things: update comodo and turn off a couple of services … but no trace of error regarding services is found in event log.

My money is on a driver.

When I uninstalled temporarily comodo, did comodo uninstall all the drivers? Is it not possible it left something on the system?

However, did you know if with remote debugging, windbg can identify a driver it wasn’t able to detect win minidump?