BSOD after Comodo Firewall update, SYSTEM_SERVICE_EXCEPTION

FredyC · 13 Jul 2013

Not sure if it's really caused by Comodo, but it's last thing that was changing the system from what I remember. Update was installed yesterday and when I went to sleep, I had shutdown computer. Today it booted, it was looking ok and after like 1-2 minute without even touching mouse/keyboard it turned blue. So far it didn't happened again.

Arc · 13 Jul 2013

Hi FredyC.

The BSODs are pointing out to some third party system monitoring stuff.

avast! File System Minifilter Driver

Code:

fffff880`0af1bf68  fffff880`042bea98Unable to load image \??\C:\Windows\system32\drivers\aswMonFlt.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswMonFlt.sys
*** ERROR: Module load completed but symbols could not be loaded for aswMonFlt.sys
 aswMonFlt+0x8a98

avast! Self Protection Driver

Code:

fffff880`0af1b7c8  fffff880`049253cbUnable to load image \SystemRoot\System32\Drivers\aswSP.SYS, Win32 error 0n2
*** WARNING: Unable to verify timestamp for aswSP.SYS
*** ERROR: Module load completed but symbols could not be loaded for aswSP.SYS
 aswSP+0x2c3cb

COMODO Firewall Pro Sandbox Driver

Code:

fffff880`0af1b678  fffff880`046c417eUnable to load image \SystemRoot\system32\DRIVERS\cmdguard.sys, Win32 error 0n2
*** WARNING: Unable to verify timestamp for cmdguard.sys
*** ERROR: Module load completed but symbols could not be loaded for cmdguard.sys
 cmdguard+0x4317e

If it does not happen any more, sit tight there. But if the BSOD recurs, Uninstall Comodo. Uninstall Avast using Avast Uninstall Utility. Use Microsoft Security Essentials as your antivirus with windows inbuilt firewall, and free MBAM as the on demand scanner.
Download, install and update those, and then run full system scans with both of them, one by one.

So, let us know if it is crashing any more or not, after a few days.

FredyC · 13 Jul 2013

Ok thank you. I was thinking about getting rid of Avast for a long time and this gave me the right incentive :) So it's gone and MSE scanned the system fully, nothing found. Later I will add MBAM to the mix. However Comodo Firewall probably stay in here for now, as I find it more intuitive than Windows Firewall. I am not using HIPS component it in, just IP filter essentially.

I will keep this thread open for a week and mark it as solved if there will be no blue freaks anymore.