have we got a poc for this when using CIS? We are always eager to improve. Is the hacker having unauthorized access to the session from a protected PC or from a website hosting the video (which is not protected by us)?
My comment was to find out if the CIS protects well against these two types of attacks!
we protect the PC!
2 Likes
Like in the last version (beta 3) the icon doesn´t show in the taskbar !
Hi Folks,
I uninstalled/used cleaner to remove CIS Beta3 and install and config CIS 2025 and so far the only issue I have is on Windows 11 23H2 is Windows Task Manager keeps being blocked in HIPS even though it is trusted, I launch it then it is blocked straight away.
Is this already known about or what else can I try ?.
update, in HIPS RuleSet I tried profiles windows system app and all other custom options and still blocked.
Thanks
Is this not your case? I had a problem with Task Manager on CIS 2024 Beta3:
I put a screenshot there.
And no one answered me… 
2 days ago I had Windows 10 22H2 and CIS Beta 3 installed and no issues with Task Manager.
Yesterday I replaced Windows 10 with Win 11 23H2 then install CIS 2025 and now I see a problem with Task Manager being constantly blocked.
Hello,
I tried to use ciscleanuptool_x64.exe v3.2.0.84 to remove CIS 2025 and it fails to run on Win 11 23H2, Is there a newer version that can.
This is what is in the log.
| 18:25:57 C:\Jenkins\workspace\CisCleanupTool2_vs19\CisCleanupTool2\CisCleanupTool2\RegTools.cpp:46 | >> Can’t open key (SOFTWARE\COMODO\CIS\Esm), error 2 |
|---|---|
| 18:25:57 C:\Jenkins\workspace\CisCleanupTool2_vs19\CisCleanupTool2\CisCleanupTool2\CleanupOnline\CisCleanupTool2.cpp:76 | >> ITSM Administrator password for Removal tool is not set, skip password verification, exiting… |
Thanks
The Uninstaller doesn’t remove the items I’ve mentioned in my post above
https://forums.comodo.com/t/comodo-internet-security-2025-premium/361220/64
I had to removed those manually in between beta testing versions to ensure it was a clean install. Worth a try.
This is not a task manager lock, only CIS protects its own processes from access.
Hello.
I use the portable Hibit Uninstaller to remove the residues to remove the residues (I need to configure)
Hi,
@ EricCryptid
I followed your suggestions and when I checked the registry I did not find any of the 2 reg keys.
I ran the DISM command and found 4 left over Comodo drivers and delete them.
Following a reboot I tried the comodo cleanup tool and fails to run in either windows full mode or safe mode and I tried all the compatibility mode settings for previous OS’s, the
tool is completely useless now, I hope comodo will create a new one.
Back to my original issue after manually uninstalling and removing left overs I reinstalled CIS 2025 only to find windows task manager still being blocked by HIPS and after unblocking it then launch t ask manager again only for it to be immediately blocked again
Okay. Thanks for trying.
Regarding Task Manager. If your Logs show the below, it’s CIS protecting itself and silently blocking Task manager only in the access of Comodo’s own files.
Does your task manager work as in you can open it and end a process?
Hi,
My HIPS rule after unblocking
My logs
I can open/close task manager no issues with ending processess there but HIPS keeps blocking it.
I did right click scan with comodo and nothing found the file version I have is C:\Windows\System32\Taskmgr.exe = 10.0.22621.3672 if anyone else has Win 11 23H2
Don’t look at this blocked apps list 
I already wrote about this in another topic:
If you can run it normally, then it is not blocked.
It appears in the list because CIS protects its own processes and therefore this event is visible in the log.
Hi,
I read the above so I did a bit of testing.
HIPS also triggers a block for sysinternals Procmon64 and Procexp64.
HIPS did not trigger when I ran resmon or killswitch when they all access processes in RAM.
This has never happened to me with any previous windows version or CIS after trusting it once then it did not come back but I don’t know what is or has changed in CIS 2025 to do this on Win11 or effectively my trust is being ignored.
Thanks
You see this event as blocked, but that does not mean it is blocked.
The situation is the same as I have already written. CIS protects its processes and that is why it is visible in the log.
Thanks for explaining I know I can still run it except now it appears in the block list even though you say CIS is protecting itself therefore it should not appear in the block list, you can see the process is appearing in the wrong box.
So what has changed to have this effect ?.
Previous versions did not do this do you know what has changed in CIS perhaps an increased level of self protection it did not have in previous versions if this were true then I would expect to see a new box to perhaps show current list active processes then you could see this list interactively for what ever someone launches, this would be easier instead of the current, anyone could get easily confused over what is really blocked vs a red herring.
1 Like
It can be confusing and I’d like to see some indication even in the logs whether it’s because of an application rule or just blocking while CF/CIS is loading. For example, I get firewall blocks for some apps that update on restart even though Firewall is in Safe mode and the application is trusted. For example with my backup software below but the application runs fine without blocks.
