Memory Access to "System" freezes whole PC

Comodo Internet Security - CIS Defense+ / Sandbox Help - CIS
#1

Hi, I’ve been using Comodo D+ for many years now and there is one thing that has been annoying me greatly ever since:
A program does a memory access to “System” - whatever that is supposed to be - and in doing so, the whole system freezes. Mouse freezes, clock freezes and thus no Comodo warning popus up. This memory access is repeated a few times, so I have to wait like 1-2 minutes until I can use the PC again.

Questions:

  • What causes this, and what is this “System” process?
  • How can I prevent this?
  • If there is no good way, how do I remove the protection on the “System” process for memory access. I do not want to allow it separately for every process, I know I can do that, but that is not what I need.
CIS HIPS - Freezes Windows 10 when an alert for System Memory Access is about to be thrown
#2

When HIPS starts firing SYSTEM pop-up alerts at you (normally it should not do that at all) then most likely your D+ / HIPS rules got deleted or corrupted by a known bug.
Importing a clean CIS configuration file resolves this behavior but you will lose all your settings and your own created rules.
It is a nasty bug unfortunately.

#3

What is this known bug?

Perhaps I can export all my config, and remove the bug there, then import it as a new ruleset?

I’ve had my config corrupted twice during a system crash/freeze but been able to restore a previous backup and continue with that.

#4

Hi k1k2k3,

Thank you for reporting.
May i know your cis version and HIPS setting whether it is in safemode/paranoidmode/traningmode ?

Thanks
C.O.M.O.D.O RT

#5

12.2.2.8012 @ Windows 7.
I only run Paranoid Mode.
I cannot really reproduce it. It just happens from time to time when starting some software mostly. But I can start a program several times without issues and then it happens some other time.

#6

Hi frilm,

Thank you for providing the requested information.
We will check and report this to the team.
For the time being set hips to safemode and use CIS.

Thanks
C.O.M.O.D.O RT