Author Topic: CCE x64 in Winpe 64 bit native  (Read 3203 times)

Offline ezheku

  • Newbie
  • *
  • Posts: 11
CCE x64 in Winpe 64 bit native
« on: March 21, 2017, 07:39:55 AM »
We have a client who has a native 64 bit environment. Trying to run CCE x64 in Winpe 10 x64 native (no WoW) but all I get is Loading Engine, and stuck there. Killswitch and Autoruns work no problems.
Can you advise what am I missing here?
CCE latest version 10.0.0.6111
Same file works fine in x64 env with WoW.

Offline ezheku

  • Newbie
  • *
  • Posts: 11
Re: CCE x64 in Winpe 64 bit native
« Reply #1 on: March 22, 2017, 09:19:45 AM »
Nobody?

Bump

Offline futuretech

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 3943
Re: CCE x64 in Winpe 64 bit native
« Reply #2 on: March 22, 2017, 09:41:54 AM »
Hey ezheku and welcome to the forums. I want to ask is if you are trying to run CCE under an admin account? And have you tried to execute CCE with admin via the right-click run as administrator context menu?

Offline ezheku

  • Newbie
  • *
  • Posts: 11
Re: CCE x64 in Winpe 64 bit native
« Reply #3 on: March 22, 2017, 10:01:25 AM »
Yes, it runs as Administrator

Offline futuretech

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 3943
Re: CCE x64 in Winpe 64 bit native
« Reply #4 on: March 22, 2017, 10:11:58 AM »
Ok my best bet is that the CCE kernel driver is not being loaded or CCE can't open a handle to the ccekrnl device object. To test open killswitch and then double-click the killswitch process in the KS process list, then select the handles tab. Sort the tab by name and see if you can find \Device\CCEKrnl. See screenshot.
« Last Edit: March 22, 2017, 10:15:33 AM by futuretech »

Offline ezheku

  • Newbie
  • *
  • Posts: 11
Re: CCE x64 in Winpe 64 bit native
« Reply #5 on: March 22, 2017, 10:30:53 AM »
Yes, \Device\CCEKrnl handle is there
I now also notice that buttons are blank in CCE, no text on them. I automatically selected the middle button (Accept), then get Loading engine and collecting system information...
Not sure if related, but thought I'll mention it anyway.

Offline futuretech

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 3943
Re: CCE x64 in Winpe 64 bit native
« Reply #6 on: March 22, 2017, 10:43:59 AM »
hmm is the Windows version an insider preview build or a regular stable build? When it stays stuck at a screen is their any hard drive activity? Does task manager show any CPU usage for CCE or does it remain idle?

Offline ezheku

  • Newbie
  • *
  • Posts: 11
Re: CCE x64 in Winpe 64 bit native
« Reply #7 on: March 22, 2017, 10:49:42 AM »
No CPU/RAM/disk activity, just stays there. Process is there loaded.
As per the title, this is a WINPE x64 native, pure 64 bit environment. Built with Windows 10 ADK.

Offline futuretech

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 3943
Re: CCE x64 in Winpe 64 bit native
« Reply #8 on: March 22, 2017, 11:03:58 AM »
I guess it may not be compatible with that type of Windows. Can you just gather dumps by using task manger create dump file when CCE hangs and then upload to a file sharing site and share link here. This is so I can report the issue and also save the output of msinfo32. Thanks.

Edit: It would also be helpful to provide screenshots showcasing the issues. For missing text and when it gets stuck at a particular phase of loading or scanning.
« Last Edit: March 22, 2017, 11:10:41 AM by futuretech »

Offline ezheku

  • Newbie
  • *
  • Posts: 11
Re: CCE x64 in Winpe 64 bit native
« Reply #9 on: March 22, 2017, 11:58:18 AM »
Uploaded here http://www91.zippyshare.com/v/cjJBJBiu/file.html

Contents:
CCE.DMP
CCE-firstScreen.jpg
CCE-loadingStuck.jpg
Windows-version.jpg

Thanks.

Offline futuretech

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 3943
Re: CCE x64 in Winpe 64 bit native
« Reply #10 on: March 22, 2017, 01:40:53 PM »
Thanks I have submitted a report linking this topic and provided your file share link. A Comodo staff member may contact you via PM if they need more info.

bug 2183

Offline ezheku

  • Newbie
  • *
  • Posts: 11
Re: CCE x64 in Winpe 64 bit native
« Reply #11 on: March 22, 2017, 01:44:00 PM »
futuretech

Thank you
« Last Edit: March 22, 2017, 02:02:10 PM by ezheku »

Offline qmarius

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 3841
  • making simple things complicated
Re: CCE x64 in Winpe 64 bit native
« Reply #12 on: March 31, 2017, 07:12:53 AM »
We were informed that WinPE is not supported.

Offline ezheku

  • Newbie
  • *
  • Posts: 11
Re: CCE x64 in Winpe 64 bit native
« Reply #13 on: March 31, 2017, 08:15:26 AM »
That's unfortunate. Usually when virus hits, many like myself would want to scan the system offline to clean the virus. WinPE is one of those tools, that allows you to do it.
CCE main app is not working in WinPE, but Killswitch and Autoruns do work.
I guess I will need to find some software that does work. I liked the CCE though, works great in Windows.
Thanks for trying.

Offline qmarius

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 3841
  • making simple things complicated
Re: CCE x64 in Winpe 64 bit native
« Reply #14 on: March 31, 2017, 08:24:18 AM »
I assume they designed CRD for such cases.

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek