CIS 2025 blocking some component of Logitech G Hub

[Adrosmart]

I’ve had this problem in the last couple of months, starting when I still had CIS 2020. It manifests itself this way:

I have a Logitech gaming mouse which is controlled by Logitech Gaming Hub software. The software is crucial to be running because I cannot use the special buttons on the mouse without it.

Now the issue with it is that after I wake up my computer from sleep the Logitech G hub won’t start, in the sense that it will be stuck to the Logitech logo spinning for ever.

A side effect to this is that if I go to a CMD started with admin rights and I type powercfg /requests I get the following prompt:

AWAYMODE:
[PROCESS] \Device\HarddiskVolume5\Program Files\LGHUB\lghub_agent.exe
G HUB is shutting down

EXECUTION:
[PROCESS] \Device\HarddiskVolume5\Program Files\LGHUB\lghub_agent.exe
G HUB is shutting down

Another symptom is that when this happens, some of the processes related to G Hub cannot be terminated in Task Manager while getting the “access denied” message.

This is not normal as Logitech Software comes from a trusted vendor that is in digitally signed and in Comodo’s database, but still I have created rules to mark it as safe and to exclude it from both HIPS and Containment.

The only way to make Logitech G Hub work again is by restarting the computer or by deactivating HIPS and Containment and running the mouse software with admin rights.

What am I missing?

[C.O.M.O.D.O_RT]

Hi Adrosmart,

Thank you for reporting.
Kindly share the Logitech Gaming Hub software in the below topic so that the team will check and whitelist it.

Submit Applications Here To Be Whitelisted 2024

Hello, on the date I sent this request, it was not going through containment. When I ran it today, it worked normally as a clean file, without needing to go into self-containment. Now it is working fine. I think Valkyrie is a bit slow for those who use CIS.

Thanks
C.O.M.O.D.O RT

[Adrosmart]

I submitted the software as instructed, but predictably it didn’t do anything as Logitech was already a trusted vendor.

I managed to catch the Comodo window when the Logitech G Hub starts malfunctioning after waking the computer up from sleep. For this to happen (Comodo to start asking questions) I need to turn off Auto-Containment and leave only HIPS turned on.

As I was saying Comodo seems to be blocking some termporary filles created by the Logitech software.

I want to reitarate that I already marked Logitec G hub as safe and made rules Auto-Containment to ignore it.

[DecimaTech]

You need to set ghub to either the windows system application or installer/updater hips ruleset. Also you should be checking the hips and auto-containment logs to see what is being blocked when facing issues.