COMODO Internet Security 3.5.52396.411 BETA 3 Bug Reports [CLOSED]

[system]

@fOrTy_7 post:39

The ‘Reminder’ popup window which reminds a user about switching back to Previous Mode from Instalation Mode now has a long delay time. In CFP 3.0.x it was shown every few minutes which was kind of annoying but now you can wait an hour or something before it will be shown. I think 10 or 15 minutes is a maximum period of time before it should be shown, which is sufficient in most cases.

Yes, been reported a few times.

Josh

[system]

Same bug as in BETA 2.

XP SP3, CIS. I have to reboot when removing on-access malware. Screen Shot attached.

Josh

[attachment deleted by admin]

[m0ng0d]

As reported in Beta2 bug report thread, the following issue still exists…

@m0ng0d post:150

1. Your Operating System (32 or 64 bit) and Service Pack revision - WinXP Pro x64 SP2
2. Other Security and Utility Software Installed - None
3. Step by step description to reproduce the issue -
   *fresh install
   *try change D+ to Safe mode, interface/GUI hangs
   *log off and back on to force shutdown/restart of froze GUI
   *move into D+ settings, policy… GUI froze again
   *uninstalled CIS
4. How you tried to resolve the problem - N/A
5. Upload Memory Dumps on crash if you encounter any - N/A
6. Attach screenshots to your posts to clarify the issue further - N/A
7. Please put any False Positive Reporting here - N/A
8. Any other information you can think of - N/A

I found however that if I use the tray context menu to adjust the D+ mode, I have no issue… only while adjusting the D+ slider in the GUI does it “hang”.

[system]

@Mohan post:18

Same old issue - no logs !! - Disable AV logging option unchecked

Windows XP SP3 32 bit English (installed to C: - FAT32)

CIS - (installed to D: - FAT32)

Avast antivirus 4.8, PeerGuardian2 (Others - but services / monitoring / shield / runtime protection disabled - Spybot S & D, Spywareblaster, Adware, Spware terminator, AVG Anti-Spyware 7.5, SUPERAntiSpyware, Advanced Spyware Remover)

Disable CIS - CAVS3 antivirus monitoring, and updates download. Run manual scan
There were 16 objects identified - no security breaches but passwords revealers, debuggers, security related … - (Good work).

On the actions list, did the needful used ignore, remove options. Exited, went to view antivirus logs - no details

Please act on this as an important action for new releases.

Having same issue. XP SP3.

It is pretty old… Hope it gets fixed.

Josh

[system]

@3xist post:28

Just following up.

I made a comparison between CFP 3.0.25.378 & This beta. CFP 3.0.25.378 Alerts for all programs. To give you an idea, Beta 3 did NOT alert for:
-Utorrent
-Foxit Reader
-SUPERAntispyware

3.0.25.378 did. And all other programs were OK. Installation Mode still takes a while to switch back. Yes I put all Defense+ Settings on.

XP SP3.

Josh

Never mind about this.

I switched from ‘safe mode’ to ‘paranoid mode’ and the Alerts for those programs came up, And Defense+ came up clean saying I could safely allow those programs, So it’s Comodo’s Whitelist.

Though ‘Installation Mode’ still takes a while to switch back.

Josh

[system]

@3xist post:4

1. Windows XP Home Edition SP3.
2. SUPERAntispyware & Avira (Only on-demand they don’t load on startup).
3. Just boot up your PC and cmdagent.exe is 20,000MB-24,000MB but goes down to normal after 5-10 mins, Or after the database has been updated (message).
4. n/a
5. n/a
6. Attached Screen Shot
7. n/a

I am guessing because the AV Updater runs on startup.

Josh

I have a similar issue to your beta 2 bug, except mine is about cfp.exe. It takes almost 5 minutes after booting up to decrease from about 13,000 KB to 2,600 KB Mem Usage.

1. 32 Bit | Windows XP | Pro Service Pack 2
2. Comodo Firewall 3.5.52396.411 Beta only security program
3. Monitor with Task Manager on cpf.exe
4. Do nothing except wait

[system]

I classify this to be an old bug that potentially affects security: when the Remember my answer option is enabled, the next time I receieve either a Firewall / Defense+ alert, that option remains enabled. It should be disabled all the time. If this is by design then it’s flawed!

[attachment deleted by admin]

[IamGullible]

@Soyabeaner post:47

I classify this to be an old bug that potentially affects security: when the Remember my answer option is enabled, the next time I receieve either a Firewall / Defense+ alert, that option remains enabled. It should be disabled all the time. If this is by design then it’s flawed!

Is it flawed? Oh well, opinions vary on that. Jury is out… Personally I think it is very useful. Most of the time I have to instruct CIS to “Remember”. Very occasionally I issue a one off, where I would tick the “Remember” off. Oh well, horses for courses…

[fOrTy_7]

I would prefer that ‘Remember my answer’ status would be saved separately for Firewall Alerts and Defense+ Alerts. But it is more like feature request than a bug report .

[jimbell]

I classify this to be an old bug that potentially affects security: when the Remember my answer option is enabled, the next time I receieve either a Firewall / Defense+ alert, that option remains enabled. It should be disabled all the time. If this is by design then it's flawed!

I agree, maybe there is another way to do this in the GUI (seperate button for remembering for example).

Jim

[jmalon]

This is basically an updated post from the previous Beta releases.

I’m still having issues with Microsoft Word not being able to save documents to our Novell server. I had this issue in the 1st and 2nd Betas and it is still occurring in the 3rd Beta.

I receive the error message ‘Word cannot save due to a file permission error’ when saving Word documents to a network drive (Novell).

1. Your Operating System (32 or 64 bit) and Service Pack revision (Instructions for XP and Vista)
   Windows XP Professional, SP3, 32 bit

2. Security and Utility Software Installed
   a-squared Free 3.5.27
   Spybot Search and Destroy 1.6.0
   SpywareBlaster 4.1
   Windows Defender (latest updates)
   RealVNC

3. Step by step description to reproduce the issue
   Open the Word document from the network.
   Make changes.
   Save document.
   Error message occurs.
   Original file is deleted.
   MS Word tries to save a temp version of the document.
   See attached screen shots.

4. How you tried to resolve the problem
   Saved Word documents to my desktop without any problem and then copied that file to the network drive without any problems.

5. Upload Memory Dumps on crash if you encounter any
   None created.

6. Attach screenshots to your posts to clarify the issue further
   See attachments.

7. Any other information you can think of
   Using MS Office Word 2003 (11.8227.8221) SP3.

When installing Comodo CIS 3.5 Beta (CIS_Setup_3.5.52396.411_XP_Vista_x32_BETA.exe), I only installed the anti-virus, I did NOT install Comodo firewall or SafeSurf. I also did not make Comodo my default search provider or make Comodo my home page.

8. Please put any False Positive Reporting here
   None.

[attachment deleted by admin]

[rhgtyink]

On VISTA the exclusion for ?:\Recycle?* is incorrect, the Recycler for VISTA should be ?:$Recycle.Bin*
This would exclude detection in the Recycle Bin, now this does not work for VISTA systems.

1. Vista SP1, Enterprise, UAC, x32
2. CMF, BOClean, Winpatrol
3. N/A
4. Yes, put the exclusion in the list by hand.
5. N/A
6. Done

[attachment deleted by admin]

[rhgtyink]

AV Exclusions still conflict with BOClean Exclusions on system startup.
Have Netcat (nc.exe) put it on the BOClean exclusion list, and put it on the CIS Exclusion list.
Reboot and you get an alert that BOClean thinks the exe has changed !!
Now Reboot with AV Disabled, no problem.

1. Vista SP1, Enterprise, UAC, x32 / Windows XP SP3, x32.
2. CMF, BOClean, Winpatrol
3. N/A
4. Yes, tried delaying BOClean startup but then you always get the Virus Alert for CIS on startup.
5. N/A
6. Done

First shot is with normal boot BOClean active, CIS AV Enabled.
Second show BOClean is on the startup delay from Winpatrol, now you get the AV Alert even though it’s on the Exclusion list. So it’s not working because BOClean is loading it to check the hash for Exclusion and AV get’s triggered at that moment. After that RealTime does not trigger again and Manual scan does not also.

So it fails only on system startup !!

Now if i chose to Ignore Permanent it appears multiple times in the exclusion list.

[attachment deleted by admin]

[rhgtyink]

If you get an AV alert and you chose “Ignore Once” you have to repeatedly click on the Ignore Once before the Alert window disappears. This should be clicked only once for the specific malware in the same folder.

1. Vista SP1, Enterprise, UAC, x32 / Windows XP SP3, x32.
2. CMF, BOClean, Winpatrol
3. N/A
4. N/A
5. N/A
6. N/A

[rhgtyink]

Sometimes the GUI doesn’t paint the whole screen.

1. Vista SP1, Enterprise, UAC, x32.
2. CMF, BOClean, Winpatrol
3. Seen multiple times, no pattern.
4. N/A
5. N/A
6. Done

[attachment deleted by admin]

[rhgtyink]

Launchy Indexing takes 6 minutes with Real-Time scan active and only 20 seconds with Real-Time Disabled, cmdagent.exe it taking 10% to 20% cpu.

1. Vista SP1, Enterprise, UAC, x32
2. CMF, BOClean, Winpatrol
3. Just do a manual index using Launchy with RealTime AV enabled and disabled
4. N/A
5. N/A
6. Done

Also reported for BETA2:
https://forums.comodo.com/beta_corner_cis/comodo_internet_security_beta2_bug_reports-t27344.0.html;msg202394#msg202394

[rhgtyink]

If you have a manual scan window on top of an other application and you minimize the Manual Scan window the MAIN GUI pops up !! you would expect to see the application that was behind the Manuals Scan window not the CIS Main GUI to pop up ! Can this be changed so that the main GUI also minimizes or at least does not “pull up”.

1. Vista SP1, Enterprise, UAC, x32 / Windows XP SP3, x32
2. CMF, BOClean, Winpatrol
3. Start a manual scan and click on the application that is full screen behind the scan window, the manual scan window stays on top of the application, now if you try to minimize the scan window the MAIN GUI pops up…
   So you need to also minimize the main GUI on this action.
4. N/A
5. N/A

Also reported for BETA1:
https://forums.comodo.com/beta_corner_cis/comodo_internet_security_35_beta_bug_reports_closed-t26982.0.html;msg197703#msg197703

[rhgtyink]

Firewall log export to HTML Loses the protocol information data !! so it renders the data useless

1. Vista SP1, Enterprise, UAC, x32 / Windows XP SP3, x32
2. CMF, BOClean, Winpatrol
3. FW log export to HTML and the protocol information is lost.
4. N/A
5. N/A

Also reported for BETA1:
https://forums.comodo.com/beta_corner_cis/comodo_internet_security_35_beta_bug_reports_closed-t26982.0.html;msg197996%23msg197996

Also reported for BETA2:
https://forums.comodo.com/beta_corner_cis/comodo_internet_security_beta2_bug_reports-t27344.0.html;msg200024#msg200024

[attachment deleted by admin]

[rhgtyink]

Defence+ logging text contains a space at the beginning so it looks like

Firewall logs
Defence+ logs
AntiVirus logs

1. Vista SP1, Enterprise, UAC, x32 / Windows XP SP3, x32
2. CMF, BOClean, Winpatrol
3. N/A
4. N/A
5. N/A
6. Done

[attachment deleted by admin]

[system]

1. Windows XP Home Edition SP3.
2. SUPERAntispyware & Malwarebytes’ Anti-Malware on-demand.
3. Just manually updating, under some circumstances it can fail.
4. n/a
5. n/a
6. I can’t reproduce it everytime to show a SH.
7. n/a
8. Many users are having this issue on various operating systems. Aren’t there suppose to be hourly updates as well? Because it’s not happening, I don’t expect it too with a beta though.

Josh