Author Topic: CIS 8 create Junk ADS streams on your new executables  (Read 3295 times)

Offline BBeat

  • Comodo Loves me
  • ****
  • Posts: 119
CIS 8 create Junk ADS streams on your new executables
« on: November 24, 2014, 10:28:56 AM »
CIS 8.0.0.4337 create Junk ADS streams ($CmdTcID) on your new executables (ie. .sys .exe .dll .js)

Copy executable file from same
Download new executables
Install new executables, new drivers, new windows updates

Stop your Junk ADS streams please
I unlike ADS streams, some people too. (ie. SaveZoneInformation)

When you copy files from a NTFS file system to a USB flash-drive (FAT),
You may receive the Easter egg "The file Setup.exe has properties that can't be copied to the new location. Do you wish to continue?"

Comodo Firewall 8.0.0.4337
HIPS Disabled, Auto-Sandbox Disabled, Viruscope Disabled, Cloud Disabled

Waste my time full scan on safe mode >:(

[attachment deleted by admin]
« Last Edit: November 25, 2014, 01:14:00 PM by mouse1 »
Win10x64, CFW 10.0.1.6294
        ~BFE Bug never fix :D~
CIS have firewall allow/block mixing rule bug started in CIS 5.12, new connection maybe identified as aother app initiate, trust me ;)

Offline Sixtyfour

  • Comodo Member
  • **
  • Posts: 31
Re: CIS 8 create Junk ADS streams on your new executables
« Reply #1 on: November 25, 2014, 02:55:24 AM »
I have created a bug report about this issue. Please add more information for the developers there.

Offline Averell

  • Newbie
  • *
  • Posts: 23
Re: CIS 8 create Junk ADS streams on your new executables
« Reply #2 on: November 25, 2014, 07:47:32 AM »
Hi,

Is it possible to remove these ADS ? I have tried to delete them with Pointstone ADS Scanner 2.0 and it doesn't work...

Thanks

Offline Sixtyfour

  • Comodo Member
  • **
  • Posts: 31
Re: CIS 8 create Junk ADS streams on your new executables
« Reply #3 on: November 25, 2014, 12:04:49 PM »
The only way I've been able to delete $CmdTcID is by first uninstalling CIS 8. Then I recommend installing CIS 7.

Looks like CIS 8 is protecting this ADS, or perhaps recreates it as soon as it is deleted ?

Offline mouse1

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 11862
Re: CIS 8 create Junk ADS streams on your new executables
« Reply #4 on: November 25, 2014, 01:15:44 PM »
Locked to prevent splitting content. Hope that is OK.

Please contribute in the bug report topic noted above, where you will find answers to your questions.

Kind regards

Mouse

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek