CIS causes System Restore to fail [M2411]

Comodo Internet Security Pro causes System Restore to fail

Can you reproduce the problem & if so how reliably?:

Every time

If you can, exact steps to reproduce. If not, exactly what you did & what happened:

  1. Make sure that “Apply the selected action to unrecognized autorun entries related to new/modified registry items: Ignore” is checked (its default) found under “Advanced Protection/Miscellaneous”
  2. Create a system restore point.
  3. Install any application.
  4. Try to do a system restore.

One or two sentences explaining what actually happened:

System restore gets stuck on “System Restore is restoring the registry”

One or two sentences explaining what you expected to happen:

I expected System Restore to work.

If a software compatibility problem. Have you tried the advice to make programs work with CIS?:

Uninstalled CIS, solved the problem.

Any software except CIS/OS involved? If so - name, & exact version:

System Restore

Any other information, eg your guess at the cause, how you tried to fix it etc:

Uninstalled CIS, solved the problem. Then I spent 3 hours isolating what caused the problem. (So if for any reason this report is removed I will never again do a bug report!) Which is this option “Apply the selected action to unrecognized autorun entries related to new/modified registry items: Ignore”

B. YOUR SETUP

Exact CIS version & configuration:

12.0.0.6818 Default and Custom configuration

Modules enabled & level. D+/HIPS, Autosandbox/BBlocker, Firewall, & AV:

Don’t matter

Have you made any other changes to the default config? (egs here.):

Yes, but irrelevant as this happens on default config.

Have you updated (without uninstall) from CIS 5, 6 or 7?:

Yes

if so, have you tried a a a clean reinstall - if not please do?:

Yes

Have you imported a config from a previous version of CIS:

Irrelevant

if so, have you tried a standard config - if not please do:

Irrelevant

OS version, SP, 32/64 bit, UAC setting, account type, V.Machine used:

Win10 x64 Ver. 1903 Build 18362.145

Other security/s’box software a) currently installed b) installed since OS, including initial trial security software included with system:

No

Does restore still fail if you disable the option entirely?

Apparently writing it this way was just obvious for me

1. Make sure that “Apply the selected action to unrecognized autorun entries related to new/modified registry items: Ignore” is checked (its default) found under “Advanced Protection/Miscellaneous”

System restore works IF you disable that option 8)

Please check with v12.1.0.6914 RC to see if issue is fixed.

Hi,

if it works for you it probably work for the rest of us. I have no interest in installing a beta at this time, sorry.

I ran into the same issue recently. I didn’t connected the issue to Comodo Internet Security 12.
But it makes sense. I had version 12.0.0.6882 installed.

According to Comodo they say it is fixed in 12.2.1.6950 please check.

A. THE BUG/ISSUE (Varies from issue to issue)
Can you reproduce the problem & if so how reliably?:
Yes can reproduce reliably.
If you can, exact steps to reproduce. If not, exactly what you did & what happened:
1:Clean install of windows 110
2:Install latest CIS
3:Create new system restore point
4:Attempt to roll back to created system restore point
5:Windows 10 hangs at registry restore for indefinite period of time (hours).
6:Remove CIS
7:Attempt system restore
8:System restore completes in under 10 minutes
One or two sentences explaining what actually happened:
CIS seems to be blocking system restore from completing
One or two sentences explaining what you expected to happen:
I expected system restore to complete.
If a software compatibility problem have you tried the advice to make programs work with CIS?:
?
Any software except CIS/OS involved? If so - name, & exact version:
?
Any other information, eg your guess at the cause, how you tried to fix it etc:
?

B. YOUR SETUP
Exact CIS version & configuration:
Latest CIS and latest Windows 10 fully updated.
Modules enabled & level. D+/HIPS, Autosandbox/BBlocker, Firewall, & AV:
Antivirus on, Firewall safemode, Hips off, Autosandbox off.
Have you made any other changes to the default config? (egs here.):
?
Have you updated (without uninstall) from CIS 5, 6 or 7?:
?
if so, have you tried a a a clean reinstall - if not please do?:
?
Have you imported a config from a previous version of CIS:
No.
if so, have you tried a standard config - if not please do:
?
OS version, SP, 32/64 bit, UAC setting, account type, V.Machine used:
Windows 10 64bit
Other security/s’box software a) currently installed b) installed since OS, including initial trial security software included with system:
a=Malwarebytes antiransomware beta b=?

C. ATTACH REQUIRED FILES (delete this section (section C) after attaching required files)
Always attach the diagnostics file (instructions on how to do this provided here) and the KillSwitch Process List (instructions on how to do that provided here) and put the resulting file in a zip file. Both should then be attached to your post.
Note that additional information may be requested by the processing Moderator.

If you haven’t already, try it again with the setting as shown ie.“Apply the selected action to unrecognized autorun entries related to new/modified registry items: Ignore

I am pretty sure it is set like that by default.

Yep known issue, workaround is to disable ‘Apply the selected action to unrecognized autorun entries related to new / modified registry items’ option.

Excellent.
Thank you

Does it also need to be disabled when it is set to ignore?

Yes which is why it is such a bad issue, even when it is set to ignore you can’t get past the restoring registry phase.

Thanks. That is very unfortunate indeed.

Please check with 12.2.2.7062 thanks.

Fixed in 12.2.2.8012.