A. CIS 126.96.36.19944 causes System process Handle Leak Can you reproduce the problem & if so how reliably?:
After updating to the version 188.8.131.5244 CIS is causing a Handle Leak in System process.
The leak always happens during time. If you can, exact steps to reproduce. If not, exactly what you did & what happened:
1:After turning on the PC the Handle count of System process keeps increasing steadily.
After 12h of having the computer on doing mainly RDP to other computer and browsing the Handle count exceeds 30000. One or two sentences explaining what actually happened:
Elevated Handle count are know to create problems.
Nevertheless none happened so far.
I confirmed that it was CIS by using Process Explorer. See attached image. One or two sentences explaining what you expected to happen:
CIS should not affect, at least, not massively the handle count of System process. Any software except CIS/OS involved? If so - name, & exact version:
No. Any other information, eg your guess at the cause, how you tried to fix it etc:
The Diagnostics functionality doesn’t report any error.
Restart the computer helps but the handle count goes up again.
Using Process Explorer the System process reports thousands of Handles to the following reg key:
B. YOUR SETUP Exact CIS version & configuration:
Comodo Internet Security Active. Modules enabled & level. D+/HIPS, Autosandbox/BBlocker, Firewall, & AV:
Firewall Safe Mode
Have you made any other changes to the default config? (egs here.):
No. Have you updated (without uninstall) from CIS 5 or CIS6?:
No, updated from 7 using the update feature of the app. if so, have you tried a a a clean reinstall - if not please do?:
Didn’t tried to reinstall or clean install. Have you imported a config from a previous version of CIS:
Yes, from CIS 7. if so, have you tried a standard config - if not please do:
Changed now to the firewall config. the Handle count didn’t dropped. Didn’t restarted to see if gets better. I’ll follow up on that info later. OS version, SP, 32/64 bit, UAC setting, account type, V.Machine used:
7 ultimate SP1 64bit
Can you force a full dump of the system process that is experiencing the leak? It would be most beneficial to take the dump when the handle count is very high. This will help the developers figure out whats going on.
Process Explorer complains with a message “Error opening process: Access Denied” when selecting full dump.
Even running Process Explorer with Administrator rights (that checkbox on the Compability tab) and with the right click option the same message appears.
Thank you very much for your report in standard format, with all information supplied. The care you have taken is much appreciated by Comodo, and will increase the likelihood that this bug can be fixed.
Developers may or may not communicate with you in the forum or by PM/IM, depending on time availability and need. Because you have supplied complete information they may be able to replicate and fix the bug without doing so.
The problem seems to have lessen for me “only” 43,514 handles on the system process after 17 days. Unfortunately I’m not sure what happened to change that. Except of course the 184.108.40.20691 Comodo update as well as the various Windows system updates released since my last post.