Hi!
Since installing Comodo, I keep getting an error onm the Microsoft Update Site.
The Comodo log says “Application Denied: svchost.exe”
I fully admit that I probably got into a tangle with all the prompts, and have somehow disallowed svchost.exe - but where do I reset this apps permissions? - It doesn’t appear in the Applications List, nor anywhere else that I can see - yet, when I turn off the Application Monitor - the MS Update site works fine!
Thanks!
Hi Nige, welcome to the forums.
svchost.exe doesn’t have user interface, so you’ll find it under the Component Monitor. You might also want to look for services.exe which is the parent of svchost.exe.
Wow! Thanks for the quick reply!
I did already look in components, but neither svchost nor services in that list either!
Also, in Component Monitor, every entry is set to Allow and there are no *.exe files in there at all - Mainly dlls and such.
I’ve tried adding services.exe and svchost.exe to the Application Monitor, but it has no effect. Only turning off Application Monitor (or shutting down the firewall completely) has any effect!
Can you post an example of CFPs Log block message… it is best to export the Log to an HTML file (right click on the Log page - Export HTML) and then use cut ‘n’ paste to post an entry from the HTML file on here. Thanks.
Thanks again!
here you go…
Date/Time :2007-02-03 19:24:26
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:207.46.253.125: :http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 207.46.253.125::http(80)
Date/Time :2007-02-03 19:24:26
Severity :High
Reporter :Application Monitor
Description: Application Access Denied (svchost.exe:207.46.211.126: :http(80))
Application: C:\WINDOWS\system32\svchost.exe
Parent: C:\WINDOWS\system32\services.exe
Protocol: TCP Out
Destination: 207.46.211.126::http(80)
Tidy-Up by Mod ;D
You need to have svchost as app and services as parent.
Hi, your svchost.exe is probably blocked by component or application behaviour control. A simple reboot might cure your problem so cfp will reset itself the temporary allowed or blocked rules. Svchost is included in the safe application database by comodo thus you should not see any application rule created.
You can go to security/advanced/misc, and uncheck “do not show alerts…” and also raise the alert frequency level slider to the top. (very high)
Now try to connect to win update. Click allow and remember on all popups.
Thanks all!
I had already tried increasing alerts to max and doing what AOwl suggested, with no luck, and also tried restarting Comodo.
Just rebooted the whole system, and tried again - and the Alert for svchost popped up on the MS site - This time I allowed and checked and all is well!
Thanks very much!
:SMLR
You’re welcome.
I will put resolved on this thread and lock it.