I use a program called PhraseExpress-- a text replacement program. Since updating Comodo, at every boot I get a dialog that “PhraseExpress failed to load/install?? (forget the verb) the keyboard hook.”
PhraseExpress exe is in the trusted programs list.
If your phraseexpress.exe is malware, then it is 100% dangerous.
If your phraseexpress.exe is part of the Bartels application, then it is 0% dangerous.
I don’e see how a file can be "40% dangerous.
All of this is immaterial; how do I solve this?
I do not understand “then i will add it to the program at start.” It is already a start-at-boot program, but is failing as it attempts to start, and this failing began when I installed CIS 7.
It is already a start-at-boot program & this failing began when I installed CIS 7._ i did not know it
I don’e see how a file can be "40% dangerous. cf the link : their opinions are their opinions and yours are yours.
another link can say 100% safe and another 100% dangerous : i do not know this program so i cannot judge the opinions of the users or of the sites … sorry.
have you done an update or installed cis 7 ?
if it is an update from old version it can be that, the problem.
if it is a new install , your program is listed in “survey” maybe but you told me that you have added in trust program yet ; so … try training mode (maybe your program need to download & install something from an internet connection) or safe mode.
ok_ on the site phraseexpress :
Make sure that no “security” program such “Antivirus/AntiSpyware”-software is blocking the keyboard hook of PhraseExpress.
Great. That is exactly what I would like to do [Make sure that no “security” program such “Antivirus/AntiSpyware”-software is blocking the keyboard hook].
OK, that seems easy enough to do, but a question comes to mind…
That process only relates to virusscans–commanded and real-time. I had really not pictured it being a virus-scan that was causing this. Wouldn’t the file just be quarantined (it isn’t) if it were virus detection in play?
I was thinking it would be something in D+/HIPS doing it, but I do not get any notification. Then again, it is during boot loadings when it happens, so maybe notifications are not active at that time.
;D
I had really not pictured it being a virus-scan that was causing this
and
That process only relates to virusscans–commanded and real-time.
it was on the official site of your program : phraseexpress
Wouldn’t the file just be quarantined (it isn’t) if it were virus detection in play?
you add an exclusion & add it as trust program = remember : it is your will.
so, that you can do now , it is to run a scan for this soft ; you will know if it is safe or not ; and then begin using it.
Now you know how to do : it is easy.
if you have any doubt about the security of your computer , you could try phraseexpress (and all you want) in virtual desk : none virus/malware will infect your pc : it is a protected area.
I do not get any notification
are you speaking about pop-up connection/alert ? level = down & you add it as trust & have you checked on alert (hips)
have you checked on (firewall /hide port) alert on incoming connections ?
boot loadings
do not forget that this trouble shooting is coming from your soft (phraseexpress) maybe some incompatibility with windows 8 or uefi or secure boot or the hot key of your keyboard or microsoft office could be the cause… it blocks all that it can sound “outside” of windows & as soon as windows “supposes” that there is a danger/risk for itself and protected file = remember : it is not a windows program.
are your problem and these “questions in mind” solved ?
I seen the title and couldn’t be bothered to actually read the thread. I just thought I’d just jump right in and post. 88)
But what I usually do is rely on the logs and incorporate the alerts into rule-sets manually. The reason being that it sometimes takes forever for CIS to update if the ‘remember this’ box is checked. In the meantime there are multiple alerts queued up, and depending how exception handling regarding resource access timeout is implemented by the application, it may abort the process. I’ve seen this to be the cause for duplicate entries for identical rules; sometimes you get an alert for the thing you just allowed with ‘remember this’ checked.
The other prollem that frequently occurs is if resource access name item is some arbitrary temp file, then that will change every single stinkin’ time. The rule created should utilize wild cardz, i.e., * or ? and then one rule rings 'em all.