CIS wants restart, and a large background with the XML log appears

CIS wants restart because a virus was found, and a large background with the XML log appears behind the CIS messagebox

A. The bug/issue

  1. What you did: nothing :wink: It appears suddenly
  2. What actually happened or you actually saw: CIS wants to restart and a large background with a XML log appears behind the CIS message box (see attachement)
  3. What you expected to happen or see: Only the message box, not the background
  4. How you tried to fix it & what happened: I erased the virus found manually, and no message box appears anymore
  5. If its a software compatibility problem have you tried the compatibility fixes (link in format)?: No
  6. Details & exact version of any software (execpt CIS) involved (with download link unless malware): AdvancedDefrag.exe (located on a network drive), version unknown because it’s erased now
  7. Whether you can make the problem happen again, and if so precise steps to make it happen: no I can’t, because AdvancedDefrag.exe is erased. And I’ve no other bad file (I’ll hope . . . )
  8. Any other information (eg your guess regarding the cause, with reasons): I’m using three monitors with two MATROX graphic cards. The infected file was located on a network drive, and CIS could not erase it.

B. Files appended. (Please zip unless screenshots).

  1. Screenshots of the Defense plus Active Processes List (Required for all issues): not appended
  2. Screenshots illustrating the bug: see Attachement
  3. Screenshots of related CIS event logs: Appended
  4. A CIS config report or file. Not appended.
  5. Crash or freeze dump file: Not appended
  6. Screenshot of More~About page. Can be used instead of typed product and AV database version. Not appended.

C. Your set-up

  1. CIS version, AV database version & configuration used: 5.10.228257.2253, Internet Security
  2. a) Have you updated (without uninstall) from a previous version of CIS: No!
    b) if so, have you tried a clean reinstall (without losing settings - if not please do)?: Yes
  3. a) Have you imported a config from a previous version of CIS: No!
    b) if so, have U tried a standard config (without losing settings - if not please do)?: Yes
  4. Have you made any other major changes to the default config? (eg ticked ‘block all unknown requests’, other egs here.): No
  5. Defense+, Sandbox, Firewall & AV security levels: D+=Safe, Sandbox=Enabled, Firewall=Safe, AV=Stateful
  6. OS version, service pack, number of bits, UAC setting, & account type: W7pro 32, SP1, with UAC, Admin
  7. Other security and utility software currently installed: CAS only
  8. Other security software previously installed at any time since Windows was last installed: Avast
  9. Virtual machine used (Please do NOT use Virtual box):] No.

[attachment deleted by admin]

Thank you very much for your bug report in standard format. We very much appreciate the effort you have made to document this bug.

We are sorry to trouble you further but there are some items of information missing or unclear in your post

  • B.1Your active process list, so we can check for software incompatibilities etc.
  • B.5. The dump file created when CIS crashed. (Follow the red link in the format to find out how to locate this.

The reasons we need these items of information, though they may not seem directly relevant to the issue are explained here.

We would be very grateful if you would add these items of information so we can forward this post to the format verified board, where it is more likely to get fixed. You can find assistance using red links in the Format and here. If you need further help please ask a mod. If you do not add the information after a week we will forward this post to the non-format board. If this happens we will tell you how to rectify this if you wish to.

In the current process we will normally leave it up to you whether you want to make a report which includes all necessary information or not. We may remind you if we think a bug of particular importance.

Many thanks again


Dear Mouse,

thank you for your response.
Here are the missing items:

  • B1: see Attachement
  • B5: no crash report; CIS didn’t crash, and the designed cresh reports folder is emty

Hope it helps.

Kin regards,

[attachment deleted by admin]

I assume then that the German says CIS needs to restart the computer to clean the virus. Is this correct?

Best wishes


[QUOTE]I assume then that the German says CIS needs to restart the computer to clean the virus. Is this correct?
Yes, that’s correct!

Thank you very much for your report in standard format, with all information supplied. The care you have taken is much appreciated by Comodo, and will increase the likelihood that this bug can be fixed.

Developers may or may or may not communicate with you in the forum or by PM/IM, depending on time availability and need. Because you have supplied complete information they may be able to replicate and fix the bug without doing so.

Many thanks again