Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

SYSTEM_THREAD_EXCEPTION_NOT_HANDLED during uninstallation of comodo firewall


  • Please log in to reply
2 replies to this topic

#1 Kondou-Shinichi

Kondou-Shinichi

  • Members
  • 42 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:35 PM

Posted 08 January 2018 - 02:04 AM

I'm really unsure if this belongs to the BSOD forum, but since a BSOD is included so I guess I'll just post it here

 

After taking my pc to be repaired, when I started the pc I noticed comodo firewall not being to launch properly. The internet shows its connecting fine, but no application really connects to the internet at all except google chrome. I think it's either a virus or firewall acting weird

 

The first time I tried uninstalling (through the control panel), it seems fine, but i was suddenly hit with a bsod error, which is the SYSTEM_THREAD_EXCEPTION_NOT_HANDLED one

I tried using comodo's official removal tool, the bsod appeared again while getting to the uninstalling drivers part.

Which led me to believe to confirm it's indeed the cause of bsod.

 

I have tried enabling and disabling the windows firewall for 2 uninstallation attempt, and the bsod didnt go away

 

if I went into the wrong forum (or subforum), please direct me to the right place.

thanks for the help.

Attached Files



BC AdBot (Login to Remove)

 


#2 usasma

usasma

    Still visually handicapped (avatar is memory developed by my Dad


  • BSOD Kernel Dump Expert
  • 25,090 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:Southeastern CT, USA
  • Local time:06:35 AM

Posted 08 January 2018 - 08:43 AM

Your UEFI/BIOS (version 80.06) dates from 2015.  Please check at the manufacturer's website to see if there are any UEFI/BIOS updates available for your system.  If you are able to install the update through Windows (without booting from an external drive), then go ahead and update it.  WARNING - if the computer might shut down during this procedure, please don't do it, as this may physically damage the computer and prevent it from booting.
FYI - W8 and W10 communicate more with the UEFI/BIOS than previous versions of Windows, so it's important to ensure that the UEFI/BIOS is kept up to date (and the outdated UEFI/BIOS' may be the cause of some compatibility issues).

Although you appear to have a reasonable number of Windows Update hotfixes for this version of your OS, please double check for any new Windows Updates.  It only takes one update to cause a problem, so it's essential that you have all of them.  The actual number is not important.  Rather it's important that you checked manually, installed any available updates, and didn't experience any errors when checking or updating.

These devices are disabled in Device Manager:

 

LogMeIn Hamachi Virtual Ethernet Adapter #2    ROOT\NET\0000    This device is disabled.
LogMeIn Hamachi Virtual Ethernet Adapter #3    ROOT\NET\0002    This device is disabled.
VMware Virtual Ethernet Adapter for VMnet1    ROOT\VMWARE\0000    This device is disabled.
VMware Virtual Ethernet Adapter for VMnet8    ROOT\VMWARE\0001    This device is disabled.

These can cause symptoms similar to what you're experiencing.
I suggest:

- reenable the devices

- reboot

- uninstall the software for these devices (temporarily) and see if that helps.

If it doesn't help, feel free to reinstall the software AFTER we're finished troubleshooting

 

Comodo seems to still be installed on your system.
Try installing a fresh download from the Comodo website - then try uninstalling that.

 

Also try uninstalling Kaspersky Secure Connection (just a guess on my part) in case it's interfering with the Comodo

Maybe try uninstalling MalwareBytes also.

 

Finally, if none of this helps, please run Driver Verifier according to these instructions:  http://www.carrona.org/verifier.html

And, while waiting for a reply, please run these free hardware diagnostics (in case of a hardware problem):  http://www.carrona.org/hwdiag.html

 

If none of this helps, I'd suggest trying over in the Firewall forums for more expert suggestions:  https://www.bleepingcomputer.com/forums/f/222/firewall-software-and-hardware/

 

Analysis:
The following is for information purposes only.
The following information contains the relevant information from the blue screen analysis:
**************************Mon Jan  8 01:12:36.709 2018 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\010818-40859-01.dmp]
Windows 10 Kernel Version 16299 MP (4 procs) Free x64
Built by: 16299.15.amd64fre.rs3_release.170928-1534
System Uptime:0 days 0:08:37.403
*** WARNING: Unable to verify timestamp for inspect.sys
*** ERROR: Module load completed but symbols could not be loaded for inspect.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :memory_corruption
BugCheck 1000007E, {ffffffffc0000005, fffff800e0f69ad0, ffff9608c00ae388, ffff9608c00adbd0}
BugCheck Info: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff800e0f69ad0, The address that the exception occurred at
Arg3: ffff9608c00ae388, Exception Record Address
Arg4: ffff9608c00adbd0, Context Record Address
PROCESS_NAME:  System
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  CODE_CORRUPTION
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
CPUID:        "Intel® Core™ i5-4460  CPU @ 3.20GHz"
MaxSpeed:     3200
CurrentSpeed: 3193
  BIOS Version                  80.06
  BIOS Release Date             04/01/2015
  Manufacturer                  Hewlett-Packard
  Product Name                  400-588hk
  Baseboard Product             2B2C
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Jan  8 01:03:28.846 2018 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\010818-40046-01.dmp]
Windows 10 Kernel Version 16299 MP (4 procs) Free x64
Built by: 16299.15.amd64fre.rs3_release.170928-1534
System Uptime:0 days 0:16:47.540
*** WARNING: Unable to verify timestamp for inspect.sys
*** ERROR: Module load completed but symbols could not be loaded for inspect.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :memory_corruption
BugCheck 1000007E, {ffffffffc0000005, fffff801050f1ad0, ffff840357030388, ffff84035702fbd0}
BugCheck Info: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff801050f1ad0, The address that the exception occurred at
Arg3: ffff840357030388, Exception Record Address
Arg4: ffff84035702fbd0, Context Record Address
PROCESS_NAME:  System
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  CODE_CORRUPTION
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
CPUID:        "Intel® Core™ i5-4460  CPU @ 3.20GHz"
MaxSpeed:     3200
CurrentSpeed: 3193
  BIOS Version                  80.06
  BIOS Release Date             04/01/2015
  Manufacturer                  Hewlett-Packard
  Product Name                  400-588hk
  Baseboard Product             2B2C
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Jan  8 00:46:06.897 2018 (UTC - 5:00)**************************
Loading Dump File [C:\Users\john\SysnativeBSODApps\010818-41156-01.dmp]
Windows 10 Kernel Version 16299 MP (4 procs) Free x64
Built by: 16299.15.amd64fre.rs3_release.170928-1534
System Uptime:0 days 0:38:12.591
*** WARNING: Unable to verify timestamp for inspect.sys
*** ERROR: Module load completed but symbols could not be loaded for inspect.sys
*** WARNING: Unable to verify timestamp for win32k.sys
*** ERROR: Module load completed but symbols could not be loaded for win32k.sys
Probably caused by :memory_corruption
BugCheck 1000007E, {ffffffffc0000005, fffff803ad36bad0, ffff800c4948b388, ffff800c4948abd0}
BugCheck Info: SYSTEM_THREAD_EXCEPTION_NOT_HANDLED_M (1000007e)
Arguments:
Arg1: ffffffffc0000005, The exception code that was not handled
Arg2: fffff803ad36bad0, The address that the exception occurred at
Arg3: ffff800c4948b388, Exception Record Address
Arg4: ffff800c4948abd0, Context Record Address
PROCESS_NAME:  System
BUGCHECK_STR:  AV
DEFAULT_BUCKET_ID:  CODE_CORRUPTION
FAILURE_BUCKET_ID: MEMORY_CORRUPTION_LARGE
CPUID:        "Intel® Core™ i5-4460  CPU @ 3.20GHz"
MaxSpeed:     3200
CurrentSpeed: 3193
  BIOS Version                  80.06
  BIOS Release Date             04/01/2015
  Manufacturer                  Hewlett-Packard
  Product Name                  400-588hk
  Baseboard Product             2B2C
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``


3rd Party Drivers:
The following is for information purposes only.
My recommendations were given above. The drivers that follow belong to software or devices that were not developed by Microsoft.  You can find links to the driver information and where to update the drivers in the section after the code box:

**************************Mon Jan  8 01:12:36.709 2018 (UTC - 5:00)**************************
MpKsl0cb6e413.sys                             Mon Feb 27 20:54:41 1989 (2409FBE1)
intelppm.sys                                  Thu Sep 22 06:43:11 2011 (4E7B113F)
bcbtums.sys                                   Mon Mar 23 17:31:26 2015 (5510862E)
rt640x64.sys                                  Thu Jul 23 04:53:50 2015 (55B0AB9E)
RTKVHD64.sys                                  Tue Nov 24 07:41:57 2015 (56545B15)
kldisk.sys                                    Fri Dec 25 02:47:51 2015 (567CF4A7)
bcmwl63a.sys                                  Wed Jan 27 01:36:15 2016 (56A8655F)
TeeDriverW8x64.sys                            Wed Feb  3 17:41:13 2016 (56B28209)
kl1.sys                                       Fri Apr  1 10:20:28 2016 (56FE83AC)
kltap.sys                                     Mon May 16 17:04:28 2016 (573A35DC)
vmci.sys                                      Sat Jun  4 04:08:00 2016 (57528C60)
vsock.sys                                     Wed Jun 22 04:09:14 2016 (576A47AA)
hcmon.sys                                     Thu Aug 18 01:43:53 2016 (57B54B19)
vmkbd.sys                                     Thu Aug 18 01:50:55 2016 (57B54CBF)
klim6.sys                                     Fri Sep 30 09:35:20 2016 (57EE6A18)
epp.sys                                       Fri Nov 18 14:31:52 2016 (582F5728)
klmouflt.sys                                  Wed Nov 30 02:58:40 2016 (583E86B0)
cm_km.sys                                     Thu Dec 15 02:43:48 2016 (585249B4)
klkbdflt.sys                                  Tue Dec 20 17:06:18 2016 (5859AB5A)
VMNET.SYS                                     Tue Dec 20 23:20:48 2016 (585A0320)
vmnetuserif.sys                               Tue Dec 20 23:20:52 2016 (585A0324)
klupd_klif_kimul.sys                          Mon Feb  6 06:09:33 2017 (5898596D)
klpd.sys                                      Fri Mar 24 09:44:30 2017 (58D522BE)
cmdcss.sys                                    Tue Mar 28 22:53:50 2017 (58DB21BE)
VBoxNetLwf.sys                                Fri Apr 28 11:36:57 2017 (59036199)
VBoxUSBMon.sys                                Fri Apr 28 11:36:57 2017 (59036199)
VBoxDrv.sys                                   Fri Apr 28 11:36:57 2017 (59036199)
vstor2-mntapi20-shared.sys                    Fri May  5 03:31:04 2017 (590C2A38)
nvhda64v.sys                                  Tue May 16 09:02:27 2017 (591AF863)
inspect.sys                                   Wed Jun  7 08:11:38 2017 (5937ED7A)
vmx86.sys                                     Tue Jun 13 23:37:50 2017 (5940AF8E)
rzpnk.sys                                     Sun Jul 16 15:12:07 2017 (596BBA87)
rzpmgrk.sys                                   Tue Jul 18 17:15:21 2017 (596E7A69)
klflt.sys                                     Wed Jul 19 08:00:58 2017 (596F49FA)
nvlddmkm.sys                                  Fri Aug 25 17:51:10 2017 (59A09BCE)
klhk.sys                                      Sat Sep 30 06:01:33 2017 (59CF6B7D)
klwtp.sys                                     Fri Oct 20 12:06:35 2017 (59EA1F0B)
klupd_klif_klbg.sys                           Mon Oct 23 10:50:36 2017 (59EE01BC)
klupd_klif_mark.sys                           Mon Oct 23 11:03:14 2017 (59EE04B2)
klupd_klif_arkmon.sys                         Mon Oct 23 11:08:37 2017 (59EE05F5)
klbackupdisk.sys                              Thu Nov  9 13:22:49 2017 (5A049CF9)
klbackupflt.sys                               Thu Nov  9 13:30:48 2017 (5A049ED8)
cmderd.sys                                    Thu Nov 16 08:07:45 2017 (5A0D8DA1)
cmdhlp.sys                                    Thu Nov 16 08:07:57 2017 (5A0D8DAD)
cmdguard.sys                                  Thu Nov 16 08:09:32 2017 (5A0D8E0C)
kneps.sys                                     Fri Nov 17 02:39:39 2017 (5A0E923B)
klif.sys                                      Tue Nov 28 11:01:37 2017 (5A1D8861)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Jan  8 01:03:28.846 2018 (UTC - 5:00)**************************
klupd_klif_klark.sys                          Mon Oct 23 10:50:34 2017 (59EE01BA)
¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨¨``
**************************Mon Jan  8 00:46:06.897 2018 (UTC - 5:00)**************************
mbamswissarmy.sys                             Fri Oct 13 14:58:51 2017 (59E10CEB)


MpKsl0cb6e413.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=intelppm.sys
http://www.carrona.org/drivers/driver.php?id=bcbtums.sys
http://www.carrona.org/drivers/driver.php?id=rt640x64.sys
http://www.carrona.org/drivers/driver.php?id=RTKVHD64.sys
http://www.carrona.org/drivers/driver.php?id=kldisk.sys
http://www.carrona.org/drivers/driver.php?id=bcmwl63a.sys
http://www.carrona.org/drivers/driver.php?id=TeeDriverW8x64.sys
http://www.carrona.org/drivers/driver.php?id=kl1.sys
kltap.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=vmci.sys
http://www.carrona.org/drivers/driver.php?id=vsock.sys
http://www.carrona.org/drivers/driver.php?id=hcmon.sys
http://www.carrona.org/drivers/driver.php?id=vmkbd.sys
http://www.carrona.org/drivers/driver.php?id=klim6.sys
epp.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=klmouflt.sys
http://www.carrona.org/drivers/driver.php?id=cm_km.sys
http://www.carrona.org/drivers/driver.php?id=klkbdflt.sys
http://www.carrona.org/drivers/driver.php?id=VMNET.SYS
http://www.carrona.org/drivers/driver.php?id=vmnetuserif.sys
klupd_klif_kimul.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=klpd.sys
cmdcss.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=VBoxNetLwf.sys
http://www.carrona.org/drivers/driver.php?id=VBoxUSBMon.sys
http://www.carrona.org/drivers/driver.php?id=VBoxDrv.sys
http://www.carrona.org/drivers/driver.php?id=vstor2-mntapi20-shared.sys
http://www.carrona.org/drivers/driver.php?id=nvhda64v.sys
http://www.carrona.org/drivers/driver.php?id=inspect.sys
http://www.carrona.org/drivers/driver.php?id=vmx86.sys
http://www.carrona.org/drivers/driver.php?id=rzpnk.sys
http://www.carrona.org/drivers/driver.php?id=rzpmgrk.sys
http://www.carrona.org/drivers/driver.php?id=klflt.sys
http://www.carrona.org/drivers/driver.php?id=nvlddmkm.sys
http://www.carrona.org/drivers/driver.php?id=klhk.sys
http://www.carrona.org/drivers/driver.php?id=klwtp.sys
klupd_klif_klbg.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
klupd_klif_mark.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
klupd_klif_arkmon.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=klbackupdisk.sys
http://www.carrona.org/drivers/driver.php?id=klbackupflt.sys
http://www.carrona.org/drivers/driver.php?id=cmderd.sys
http://www.carrona.org/drivers/driver.php?id=cmdhlp.sys
http://www.carrona.org/drivers/driver.php?id=cmdguard.sys
http://www.carrona.org/drivers/driver.php?id=kneps.sys
http://www.carrona.org/drivers/driver.php?id=klif.sys
klupd_klif_klark.sys - this driver hasn't been added to the DRT as of this run. Please search Google/Bing for the driver if additional information is needed.
http://www.carrona.org/drivers/driver.php?id=mbamswissarmy.sys
 
My browser caused a flood of traffic, sio my IP address was banned. Hope to fix it soon. Will get back to posting as soon as Im able.

- John  (my website: http://www.carrona.org/ )**If you need a more detailed explanation, please ask for it. I have the Knack. **  If I haven't replied in 48 hours, please send me a message. My eye problems have recently increased and I'm having difficult reading posts. (23 Nov 2017)FYI - I am completely blind in the right eye and ~30% blind in the left eye.<p>If the eye problems get worse suddenly, I may not be able to respond.If that's the case and help is needed, please PM a staff member for assistance.

#3 Kondou-Shinichi

Kondou-Shinichi
  • Topic Starter

  • Members
  • 42 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:06:35 PM

Posted 08 January 2018 - 05:44 PM

out of pure luck, i tried out the custom uninstaller once more time, and no BSOD happened.
and the problem seems to have solved itsef for now.my internet is back to normal.

thanks for the help anyway, ill reply back if any more problem appears.




0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users