CIS on Windows 11 keeps blocking Task Manager

1

I noticed the following issue with CIS on Windows 11 that is not present on Windows 10 (and wasn’t present on Window 8.1, IIRC): When Task Manager is running, CIS HIPS keeps blocking it, and each block increases the count of Blocked Intrusions.

Comodo Task Manager HIPS
Comodo Task Manager HIPS1725×929 234 KB

This happens with both older CIS 12.2.2.8012 and the latest CIS 12.3.4.8162, with both free and paid versions.

I contacted Comodo support. One support rep tried to fix it, then told me I should wait for a new version which should resolve this issue. Another rep gave me this thread - Comodo blocks task manager and other sys32 files - which doesn’t explain why CIS behaves on Windows 11 in a different way than on Windows 10.

So, does anyone know what’s going on with CIS on Windows 11?

1 Like
2

I confirm, the same thing

3

The task manager is not the same on Windows 10 and Windows 11, didn’t you notice that?

5

What is the difference, and why is this difference causing blocks?

6

has more features, which requires more access to processes

1 Like
7

OK, and why is this causing blocks?

8

Comodo is just protecting itself.

1 Like
9

Protecting itself against what?

You know what? Don’t answer that. I’ll wait for someone who can explain things in layman’s terms and without having to be interrogated.

1 Like
10

Hi ComodoUser2025,

Thank you for reporting.
We will test and update you.

Thanks
C.O.M.O.D.O RT

1 Like
11

It is caused by HIPS, specifically by the rule that covers CIS files\folders.
You can allow taskmgr access to CIS processes to stop block logs, but it will cripple process protection a little.

12

How exactly do I do that?

13

Scroll to my text highlight:
Active HIPS Rules, Network Access, Internet Protection | Internet Security.
You need to allow taskmgr in Interprocess Memory Access
Example screenshot from help:

image
image602×547 39.2 KB

14

Still no luck. Did I do it wrong?

Comodo 1
Comodo 1603×552 55.5 KB

15

Comodo 2
Comodo 2606×552 50.2 KB

16

I switched Interprocess memory accesses to Allow, but still getting alerts.

17

explorer.exe is already set as Windows System Application and is allowed to access interprocess memory, but I am getting alerts about it, too. Not as often as with running Task Manager.

18

Hi ComodoUser2025,

We are checking on this.
We will keep you posted.

Thanks
C.O.M.O.D.O RT

1 Like
19

HI comodoUser2025,’

we have checked and found no issues.
Kindly uninstall the CIS & install again and check.

Thanks
C.O.M.O.D.O RT

20

I’ll try it this week and will update you, although I doubt it will help as I have this issue on 4 different computers, and even another Comodo user, @nik.luckin, reported this issue.

You sure you ran the test properly? On Windows 11, with HIPS set to Safe Mode, and with Task Manager open? Did you configure special settings?

1 Like
21

Is CIS blocking Windows components?

image