Welcome, Guest. Please login or register.
December 24, 2009, 05:21:07 PM

Login with username, password and session length

345004 Posts
38085 Topics
86491 Members

Latest Member: solbuck

Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Desktop Security Products
| |-+  Comodo Internet Security - CIS
| | |-+  Feedback/Comments/Announcements/News - CIS
| | | |-+  How to write this rule?
« previous next »
Pages: [1] Go Down Print
Author Topic: How to write this rule?  (Read 605 times)
cgzn
Newbie
*
Offline Offline

Posts: 22


« on: January 25, 2009, 12:20:57 PM »

Excuse me, I have a question.
To make it easy, for example, if I allow pp.exe to execute C:\* except  cmd.exe, how to set this rule?
I tried a rule like "allow c:\*, block cmd.exe", but it's a failure to do so.
Logged
EricJH
Global Moderator
Comodo's Hero
*****
Offline Offline

Posts: 4260



« Reply #1 on: January 25, 2009, 01:03:54 PM »

When you set D+ to Safe mode you will get pop ups for when an application starts another application. You can then decide to allow or block and to remember the answer or not.
Logged

Triple boot: XP SP3, Vista Ultimate 32 SP2 and Win7 RTM (default) , Always the latest CIS or CIS Beta (too lazy to update my sig) Athlon XP 2600 1 GB RAM. Opera Browser always using the latest snapshots; Opera 10.10 as of now
commanding the celsius
Product Translator
Comodo's Hero
*****
Offline Offline

Posts: 1272


^^^^


« Reply #2 on: January 25, 2009, 01:05:48 PM »

DEFENSE+ > Advanced > Computer Security Policy  *CLICK*
Now scroll down in the "application name" list to the file called ((path) + "pp.exe")

Press EDIT.
Chose "Use a Custom Policy".

Next Click "Access Rights".
At "Run an executable" chose "default action = ASK".

And click at modify under settings, click blocked applications.
Click Add> Browse.. and find the cmd.exe file and add it here.

And under allowed applications chose add> File Groups > All Applications!

Should work now.  Bounce Hopefully.  Love


EDIT:: didn't see EricJH's post, That way could be simpler! Anyway, hope you solve it.. If you already have a allow rule or deny rules for this "pp.exe" file you might however want to remove them first and then run the program in safe mode/paranoid mode.
« Last Edit: January 25, 2009, 01:10:41 PM by Monkey_Boy=) » Logged
Tags:
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.032 seconds with 19 queries.
Powered by SMF 1.1.11 | SMF © 2006, Simple Machines LLC
Seo4Smf v0.2 © Webmaster's Talks
Design by 7dana.com