Possible problem with driver: cmdGuard.sys [NBZ]

Comodo Internet Security - CIS Resolved/Outdated Issues - CIS
1

Bug/Issue report is at the bottom.

I’m hoping there is just some setting I can change, Anyway here goes:

Description of what is happening:
Daily(don’t remember how long), I’ve been having to shutdown/restart my laptop and after it starting to really bother me :P, I started researching it using memsnap/poolmon tools.

This is the event I’m seeing when I believe the system gets confused:

Type      Date Time      Source Category Event User Computer
Error 3/3/2011 5:32:23 AM Srv     None    2019 N/A  TMR
Description:
The server was unable to allocate from the system nonpaged pool because the pool was empty.

If I’m correct, The driver symbol for the driver(cmdGuard.sys) is: Rptr

Using poolmon I’ve been able to determine that driver(cmdGuard.sys) is steadily using more bytes of nonpaged memory without freeing any, Example:

 Tag  Type Allocs Frees  Diff   Bytes Per Alloc
 Rptr Nonp  14940 13   14927  9409272     630  -- 4:05pm
 Rptr Nonp  27735 13   27722 17171656     619  -- 5:05pm
 Rptr Nonp  39321 13   39308 24228048     616  -- 6:05pm
 Rptr Nonp  50539 13   50526 31050272     614  -- 7:05pm
 Rptr Nonp  61571 13   61558 37759408     613  -- 8:05pm

The bug/issue

  1. What you did: Research
  2. What actually happened or you actually saw: Have to restart system because no applications will start and sometimes system will hang.
  3. What you expected to happen or see: N/A
  4. How you tried to fix it & what happened: No
  5. If it’s an application compatibility problem have you tried the application fixes here?: No
  6. Details & exact version of any application (except CIS) involved with download link: None
  7. Whether you can make the problem happen again, and if so precise steps to make it happen: Yes. a) Leave system alone with or without any applications running for about 12 hours.
  8. Any other information (eg your guess regarding the cause, with reasons): See above research and problem description at top.

Files appended

  1. Screenshots illustrating the bug: N/A
  2. Screenshots of related CIS event logs or the Defense+ Active Processes List: N/A
  3. A CIS config. report or file: None
  4. Crash or freeze dump file: Not applicable

Your set-up

  1. CIS version, AV database version & configuration used:
    From about screen: COMODO Firewall Product Version: 5.3.181415.1237
    Name=“COMODO - Proactive Security” Version=“50422421” ProductVersion=“5.3.181415.1237”
  2. a) Have you updated (without uninstall) from CIS 3 or 4: This version was allowed to be downloaded/installed when prompted by software.
    b) if so, have you tried reinstalling (if not please do)?: No
  3. a) Have you imported a config from a previous version of CIS: No
    b) if so, have U tried a preset config (if not please do)?: No
  4. Ave you made any other major changes to the default config (eg ticked ‘block all unknown requests’, other egs here.): No
  5. Defense+, Sandbox, Firewall & AV security level: D+=Safe, Sandbox=Enabled, Firewall=Safe, AV=N/A
  6. OS version, service pack, number of bits, UAC setting, & account type: Windows XP, SP3, 32 bit, None in XP, Admin account.
  7. Other security and utility software installed: Antivirus-NOD32
  8. Virtual machine used: None

Let me know if more information is needed.

2

I have moved you post to Bug reports, and I have similar issues on one system.

3

Just an additional update from last night showing the poolmon log entries for 12 hours:

 Tag  Type Allocs Frees   Diff   Bytes   Per Alloc
 Rptr Nonp   7544  13     7531   4895664       650 <-  9:05PM 3/3/11
 Rptr Nonp  20287  13    20274  12643448       623 <- 10:05PM 3/3/11
 Rptr Nonp  33749  13    33736  20828344       617 <- 11:05PM 3/3/11
 Rptr Nonp  47294  13    47281  29014600       613 <- 12:05am 3/4/11
 Rptr Nonp  59933  13    59920  36690696       612 <-  1:05am 3/4/11
 Rptr Nonp  73835  13    73822  45143112       611 <-  2:05am 3/4/11
 Rptr Nonp  87805  13    87792  53636872       610 <-  3:05am 3/4/11
 Rptr Nonp 101283  13   101270  61831496       610 <-  4:05am 3/4/11
 Rptr Nonp 114445  13   114432  69833992       610 <-  5:05am 3/4/11
 Rptr Nonp 127217  13   127204  77599368       610 <-  6:05am 3/4/11
 Rptr Nonp 140713  13   140700  85804936       609 <-  7:05am 3/4/11
 Rptr Nonp 154182  13   154169  93994088       609 <-  8:05am 3/4/11
 Rptr Nonp 167620  13   167607 102164392       609 <-  9:05am 3/4/11

Then this system event occurs and no applications will run:

Type      Date Time      Source Category Event User Computer
Error 9:25:49 AM Srv     None    2019 N/A  TMR
Description:
The server was unable to allocate from the system nonpaged pool because the pool was empty.