Comodo and batch file with powershell script

Comodo Internet Security - CIS
1

Hi,

Windows 10 Pro
Version 22H2
SO Compilation 19045.5131
Windows Feature Experience Pack 1000.19060.1000.0

Information CIS Version:
Comodo Version 12.2.2.8012
Database Version 37226

1 - I have a batch file with powershell commands that I have already defined in the Comodo list as Allowed Application.
****Note: Both my batch file and the powershell script within it are in the Allowed Applications list on Comodo.

2 - When I run the batch file, Comodo is warning me about a powershell script from Comodo itself.

3 - I put this script in the Comodo Allowed Applications list and my batch finishes executing without any problems.

When I run my batch file “again”, Comodo warns me about a powershell script “with another name” and I have to do everything again, allowing the script so that my batch file can run!!

My question:
Every time I run my batch file, will I have to keep allowing the script in Comodo, “which always appears with a different name”, so that I can run my batch file???

See image

Comodo blocking Batch with powershell Script
Comodo blocking Batch with powershell Script1107Ă—2924 246 KB

2

Those powershell scripts do not belong to CIS, they are embedded commands from your batch script that was detected and converted to separate powershell files.

Just change your batch script HIPS rule from allowed application to the installer/updater rule set, and make sure your batch script is set to trusted in the file list.

3 Likes
3

Hello DecimaTech !

I have the same problem.

The maneuvering to whitelist everything and avoid redundancy on the part of Comodo CIS is too complicated.

Comodo CIS needs to rethink its approach to this particular type of problem.

I’d roll out a red carpet like at the Cannes Film Festival if the devs would adapt the product a little more to the evolutions of use.

In the meantime, many sincere thanks for thinking of it :slight_smile:

4

Hi, Decima Tech

Your solution worked for me, thanks!.. but I think Comodo should handle this situation better. Allowed application to the installer/updater rule set to solve the problem, I don’t think it’s the best solution!

1 Like