Thanx for the response [at] #3 Woop-de-doo,
I mispoke, the firewall was indeed set to 'safe'. I've changed that to custom policy now. The configuration has always been set to proactive.
Defense + Security policy
Only one entry present, the one I deliberately created with all options checked 'ask'. After that resulted in 60/340, I tried setting all options to 'blocked'. The latter allowed a 90/340 result. Don't see how that's relevent in particular to the raw disk access test: in the latter case it was specifically was set to 'block' and CLT still failed on that account. In the former case: no notification. I delete the rule entirely, and the same result: 80/340.
FWIW, Image Execution has been set to aggressive w/no exclusions.
Firewall Security policy
No entries are present.
My pending files
Yeah, there was one CLT entry in there. I deleted it.
My own safe files list
No CLT entries.
Despite internet temp files clearing on browser close setting, I manually cleared the temp & cache and re-ran CLT. I scored 80/340. I stand by my original assessment: there's something seriously flawed with CLT.
First off, when CLT is initially executed, it warns that it isn't digitally signed and presents the option to either sandbox, allow or block. This is unusual behavior for Comodo in that anytime it encounters something its never seen before: it sandboxes as a matter of course. Normally this requires checking 'don't sandbox the application again', terminate the app, and then relaunch it and everything works fine. If I sandbox CLT I score 340/340.
I've been warned by Comodo that apps are taking direct control of the keyboard, monitor, HDD, etc. I get warned about none of that when running CLT.
I notice in the plugins folder there's a runnerexe.exe, guess what? I never get notified that EXE is being launched by CLT. That is so totally bizarre, I wonder if I should reinstall CIS. Its possible it got wacked a couple weeks ago when I upgraded the mobo and there were issues w/memory configuration. I ended up having to reinstall several applications because they weren't workin' right. Furthermore, dunno what I did, but it doesn't even notify me that CLT isn't digitally signed anymore.