Author Topic: component control rules learn mode  (Read 9751 times)

Offline AOwL

  • Comodo SuperHero
  • Comodo's Hero
  • *****
  • Posts: 2349
  • Comodo Firewall Pro - Be safe, use protection...
    • NordicNatureMedia
Re: component control rules learn mode
« Reply #15 on: November 21, 2006, 08:33:12 PM »
Same time here... I also need to go to bed...  ::)

Offline kail

  • Randomly Appearing
  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 11361
  • The future is much like the present, only longer.
    • COMODO's free software!
Re: component control rules learn mode
« Reply #16 on: November 21, 2006, 08:46:55 PM »
whimps
My System Details: W10Px64 with CIS 10 Beta, Firefox & Becky!
Forum Policy.
____
The problem is not the problems, the problem is people's attitude towards those problems.

Offline AOwL

  • Comodo SuperHero
  • Comodo's Hero
  • *****
  • Posts: 2349
  • Comodo Firewall Pro - Be safe, use protection...
    • NordicNatureMedia
Re: component control rules learn mode
« Reply #17 on: November 21, 2006, 08:48:08 PM »

Offline kail

  • Randomly Appearing
  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 11361
  • The future is much like the present, only longer.
    • COMODO's free software!
Re: component control rules learn mode
« Reply #18 on: November 22, 2006, 03:36:41 AM »
I've been running with the Component Monitor in ON mode for about 6 or 7 hours. Saw some understandable alerts when I used MSIE6 to perform a Windows Update. Did another Windows Update. Rebooted, another Windows Update, browsed some safe sites with MSIE got a few more alerts (flash & things like that). Used Firefox extensively. No repeated alerts as yet.

What's the time frame on these repeated alerts apache?

Edit: I can confirm that 2.4.0.89 does not save the Logs between reboots, unless it is manually stopped prior to rebooting.
« Last Edit: November 22, 2006, 03:45:43 AM by kail »
My System Details: W10Px64 with CIS 10 Beta, Firefox & Becky!
Forum Policy.
____
The problem is not the problems, the problem is people's attitude towards those problems.

apache255

  • Guest
Re: component control rules learn mode
« Reply #19 on: November 22, 2006, 05:10:50 AM »

 (:WAV)

hi guys!

I'm pleased to see that you keep taking care of the issue, here are my log and screenshots. Hope it brings something. I've noticed in the log that things seem to be related to dns 53...

[attachment deleted by admin]

apache255

  • Guest
Re: component control rules learn mode
« Reply #20 on: November 22, 2006, 05:16:10 AM »
sorry, I forgot to answer your question: the timeframe on these repeated alerts is EVERYTIME. I mean each time I launch the same applications, and each time I check the "remember" box...but it comes again.

apache255

  • Guest
Re: component control rules learn mode
« Reply #21 on: November 22, 2006, 05:42:37 AM »
just wanted to add that I did not get notified about your last replies. I had to browse the topic to find them.But I'm still beeing normaly notified about another topic in the forum.

Offline AOwL

  • Comodo SuperHero
  • Comodo's Hero
  • *****
  • Posts: 2349
  • Comodo Firewall Pro - Be safe, use protection...
    • NordicNatureMedia
Re: component control rules learn mode
« Reply #22 on: November 22, 2006, 07:04:27 AM »
just wanted to add that I did not get notified about your last replies. I had to browse the topic to find them.But I'm still beeing normaly notified about another topic in the forum.

An easy way to find replies on your posts is to click the little "triangle" top left, to the left of the "home" button. That will reveal a couple of more options. I say this just if you didn't know...

sorry, I forgot to answer your question: the timeframe on these repeated alerts is EVERYTIME. I mean each time I launch the same applications, and each time I check the "remember" box...but it comes again.

Have you clicked the "view" button on the pop up? What does it say?


apache255

  • Guest
Re: component control rules learn mode
« Reply #23 on: November 22, 2006, 07:12:09 AM »
hi!

yes I clicked the view button on the popups, and you can read that cause I already posted my log file with screenshots in this topic here earlier this morning. It's still viewable now.

apache255

  • Guest
Re: component control rules learn mode
« Reply #24 on: November 22, 2006, 07:23:46 AM »
here is a more complete log (everything that concerns multicast does not matter), take a look at Internet Explorer. I just discovered that now because I normaly never use Internet Explorer, except for Windows Update. The popups are still worse than with firefox (more popups).

[attachment deleted by admin]

Offline AOwL

  • Comodo SuperHero
  • Comodo's Hero
  • *****
  • Posts: 2349
  • Comodo Firewall Pro - Be safe, use protection...
    • NordicNatureMedia
Re: component control rules learn mode
« Reply #25 on: November 22, 2006, 07:58:21 AM »
I did have a look at IE, but I couldn't find a single dll that was the same. It was normal what i could see.

Details: C:\Program Files\Internet Explorer\iexplore.exe contains 1 components to be approved
Components: C:\WINDOWS\system32\LegitCheckControl.DLL

Details: C:\Program Files\Internet Explorer\iexplore.exe contains 1 components to be approved
Components: C:\WINDOWS\system32\dispex.dll

Details: C:\Program Files\Internet Explorer\iexplore.exe contains 1 components to be approved
Components: C:\WINDOWS\system32\wuweb.dll

Details: C:\Program Files\Internet Explorer\iexplore.exe contains 6 components to be approved
Components: C:\WINDOWS\system32\dxtrans.dll
C:\WINDOWS\system32\ddrawex.dll
C:\WINDOWS\system32\ddraw.dll
C:\WINDOWS\system32\dciman32.dll
C:\WINDOWS\system32\dxtmsft.dll
C:\WINDOWS\system32\mshtmled.dll

Details: C:\Program Files\Internet Explorer\iexplore.exe contains 3 components to be approved
Components: C:\WINDOWS\system32\ieapfltr.dll
C:\WINDOWS\system32\iepeers.dll
C:\WINDOWS\system32\muweb.dll




Thunderbird and Firefox, on the other hand, seemed to repeat the pop ups about the same dll's. It shouldn't be like that if you check remember.
You can temporarily solve this by turning learning on. You should have it like that anyway.

If you want to go to support, you have to install the stable version, and get some logs from there, so they can see the problem. Both Kail and I have tried to reproduce, but we couldn't, so it can be something in your system that conflicts in some kind of weired way...


Offline kail

  • Randomly Appearing
  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 11361
  • The future is much like the present, only longer.
    • COMODO's free software!
Re: component control rules learn mode
« Reply #26 on: November 22, 2006, 08:31:31 AM »
Hang on.. apache's repeating DLLs have something in common. All the directory paths contain a nested single quote ('). I bet this is what is causing CFW to trip up & keep repeating the alerts for those DLLs.
My System Details: W10Px64 with CIS 10 Beta, Firefox & Becky!
Forum Policy.
____
The problem is not the problems, the problem is people's attitude towards those problems.

Offline AOwL

  • Comodo SuperHero
  • Comodo's Hero
  • *****
  • Posts: 2349
  • Comodo Firewall Pro - Be safe, use protection...
    • NordicNatureMedia
Re: component control rules learn mode
« Reply #27 on: November 22, 2006, 08:35:09 AM »
Do you mean in his folder name? F:\apache's folder

Offline kail

  • Randomly Appearing
  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 11361
  • The future is much like the present, only longer.
    • COMODO's free software!
Re: component control rules learn mode
« Reply #28 on: November 22, 2006, 08:47:09 AM »
Yes.
My System Details: W10Px64 with CIS 10 Beta, Firefox & Becky!
Forum Policy.
____
The problem is not the problems, the problem is people's attitude towards those problems.

apache255

  • Guest
Re: component control rules learn mode
« Reply #29 on: November 22, 2006, 08:56:34 AM »
hi again!

that thing about ' sounds incredible...but well this could well be the cause, as the repeated popups always concern files from that same folder.Maybe I should rename it, and that would solve the issue with cpf.It's just that renaming that folder involves many other changes on my computer, but i'll do it if it's necessary. Well I like this firewall...

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek