Jump to content

Recommended Posts

Hello,

I think (but not 100% sure) that since I installed the latest Windows 10 update, which brings the version to 1703 and OS build to 15063.138 MBARW BETA sometimes, for no apparent reason (no message, nothing in Quarantine) start to use 1 of my CPU core (i7-4720HQ) at 100%. When that happens, I can not STOP/START protection, after which I try to stop/restart the service. It takes several minutes, before Windows generates a message that it can not be done, but it actually stops it and it closes the GUI as well. After restarting the service, MBARW behaves OK - no high CPU usage, I can START/STOP protection. MBARW version is 0.9.17.661, Comp.Upd.Pack. 1.1.46 from 18.04.2017 9:04GMT.

I also run MB Anti-Exploit BETA 1.09.1.1384, Comodo Internet Security Premium 10.0.1.6223, Zemana Anti Logger 2.72.204.388. All of them seem to work OK, with no consistent high CPU usage and/or irresponsive GUI.

Any idea why this happen and what can be done?

Greetings

Share this post


Link to post
Share on other sites

Hi Jong Purisima,

I hope you find some useful information in the zip/logs I sent, meanwhile I think I found some pattern. Today MBARW exibited this behavior twice within 1 hour! Both times right After Comodo Internet Security HIPS/Sandbox modules stopped for a while some programs (false positives) which I promptly allowed, and then Comodo let them run, but both times MBARW is left stuck - GUI is not responsive plus 100% usage of 1 of the cores as described above and it goes on until killed by either Services or Task manager after several unsuccessful attempts... After that I start MBARW and it seems to work OK, as the GUI Start/Stop works and CPU usage is normal again...

Regards,

Hristo

Edited by fishowl
removed Bold font everywhere

Share this post


Link to post
Share on other sites

Thanks, @fishowl,

If you don't mind, can you let me know the Comodo IS version you were using and the applications that triggered their HIPS functionality?  This would help us reproduce the problem and potentially pinpoint the problem much sooner.

Appreciate the kind help here

regards,

jong

Share this post


Link to post
Share on other sites

Hi Jong,

The version of Comodo (and all other security stuff) I am using is described in my first post - Comodo Internet Security Premium 10.0.1.6223, the latest one available, but the MBARW locks might have started with the previous build 10.0.1.6209, the one that was supposed to be compatible with the latest version of Windows 10 1703. Despite the name, this is the FREE version.

I don't remember exactly what triggered the HIPS/Sandbox of Comodo, but it is VERY easily triggered by most benign applications, especially installers.

The MBARW problem happens on EVERY Comodo HIPS/Sandbox alert (allowed within seconds manually from me), regardless of application/installer. Yesterday/Today it happened with some Windows Store Apps for Lenovo laptop - Lenovo Companion and or Lenovo Settings METRO apps. It does happen with desktop applicatons/installers as well.

Regards,

Hristo

 

Share this post


Link to post
Share on other sites

Hi Jong,

Any news on pinpointing the problem? Just happened again...

Regards,

Hristo

Share this post


Link to post
Share on other sites

Hi Hristo,

We are still looking into it.  We were able to partially see what you are seeing - but we only observed up to 50% CPU utilization.  So we are trying to see based on this data.

-jong

Share this post


Link to post
Share on other sites

Hi Jong,

Thanks for the info. In my case it is 100% usage of 1 core, NOT CPU! Your 50% CPU could be the same thing, depending on your CPU core count!

Regards,

Hristo

Share this post


Link to post
Share on other sites

Correct.  50% CPU of 2 cores is what we saw.  how many cores do you have on the affected system?

Share this post


Link to post
Share on other sites

4 real (8 with Hyperthreading) - i7-4720HQ CPU, so in Task manager it is around 12.5%.

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.

×
×
  • Create New...

Important Information

This site uses cookies - We have placed cookies on your device to help make this website better. You can adjust your cookie settings, otherwise we'll assume you're okay to continue.