COMODO Internet Security 5.8.210479.2111 RC2 Bug Reports

[L.A.R_Grizzly]

@loveboy_lion post:20

i too have 3 firefox now and i am even not on firefox beta see the screenshots

And, if you notice, you also get multiple entries of plugin-container.exe (it’s part of Firefox). I get multiple entries of that file too! After a couple of weeks, I have to delete trusted.db and start all over to get the list cleared.

[grantdb]

@Redstraw post:16

I find there is a minor bug in Trusted Files list.A application in the Trusted Files list,if I update the application,such as chrome.exe,then two same chrome.exe appear in the Trusted Files list and it can not be purged.
So,I suggest that when do purge,check that if there are two or more same files,then purge the redundant files

AFIK with Chrome the last version is kept as a backup on your system. So technically there is 2 versions of Chrome all the time.

[L.A.R_Grizzly]

@grantdb post:22

AFIK with Chrome the last version is kept as a backup on your system. So technically there is 2 versions of Chrome all the time.

Not the case with Firefox and Thunderbird, though. Trusted Files is duplicating the entries. It has always done this. But, I was always able to delete the duplicates, now I can’t.

[loveboy_lion]

@grantdb post:22

AFIK with Chrome the last version is kept as a backup on your system. So technically there is 2 versions of Chrome all the time.

this may be true with chrome but not all applications keep backup of their exe and dll etc
this is a small bug which comodo team will ultimately fix in the next beta or final release

Note :- Failures are stepping stones to success and comodo team has done the best to bring to us such amazing software which is only possible if users and comodo team work together if we wont disscuss and report the problem correctly then its difficult for them to fix so in order to make comodo the best please do test comodo to all maximum possible extent

thanks to all testers and comodo team and yeah melih for making comodo the best

[Redstraw]

@grantdb post:22

AFIK with Chrome the last version is kept as a backup on your system. So technically there is 2 versions of Chrome all the time.

It occurs in more than chrome.exe. You can browse the reply above mentioned by other guys.

[mouse1]

@mouse1 post:11

This problem still present in 2104:

This has been clarified as an interaction of the CIS scanner with Everything.exe downloadable from here. , which causes Everything.exe to crash, which causes OS instability and in turn the crashing of other progs inc sometimes the CIS scanner. Reported as such to Sergey.

NB This is still present in the current Beta (2064), and is not resolved by excluding the everything.exe data and program directories from the scan.

All of your problems is becuase of a file which is causing the engine to crash ans i am afraid we are unable to get any information from the dumps of reports.

It’s more that the CIS Scanner is causing other running apps to crash in this case. Two that I have been able to identify so far are:

• Everything.exe a third party utility (link previously supplied)
• CNMNSUT.exe a Canon inkjet network scan utility
  Mostly the CIS scanner runs to completion. However either the scanner or the app crashes caused by the scanner cause OS instability (symptom multiple dialogs with no text), which then on one occasion caused CIS to crash as well. Outlook sometimes locks displaying an hour glass, but does not crash.

My guess is if you install Everything.exe on an XP machine, then scan it with CIS you’ll be able to replicate it. But that’s only a guess.

I’ve tried AV scanning the Everything combined program and data directory, also the Canon program directory, but nothing happened.

[mouse1]

@mouse1 post:6

Problem: Update from 2075 gave error on reboot Error 0x800705aa “Insufficient system resources, update failed”. Cfp showed yellow shield and exclamation mark, as it does if cmdagent fails to start. However CMdagent was running. On restarting CFP.exe (using exit from the tray icon) however, all seemed OK. Actually the update seems to have succeeded to judge by the version number.

[ol]- Your Operating System (32 or 64 bit) and Service Pack revision: XP SP3 32 bit production machine.

• Other Security and Utility Software Installed: Actual Window manager (not active for CIS), no others likely to be relevant
• Step by step description to reproduce the issue:Updated using More ~ Check for Update, rebooted, got error message, OK’d dialog, saw warning on cfp tray icon, restarted cfp, checked version number under More ~ About.
• How you tried to resolve the problem: Restarted cfp.
• Upload Memory Dumps on crash if you encounter any: appended
• Attach screenshots to your posts to clarify the issue further. N/A machine would not start Faststone until after I’d OK’d the dialog and restarted cfp.exe
• Any other information you think that might be useful: THis bug is probably a combination of an update bug, and the previously and frequently reported bug in which cfp shows a yellow shield for no apparent reason on reboot and requires re-starting to resolve
• The CIS Security profile you are using, and if you imported a previous version of the config: proactive, updated from default proactive config, with a few app rules, in build 2075[/ol]

IMHO the problem with cfp showing a yellow tray icon with explanation mark, and complaining in the main interface that cmdagent is not running (even though it is) should if possible be solved before release. This is affecting a significant number of systems in the current public release, and seems to be worse in the 5.8 releases

All of your problems is becuase of a file which is causing the engine to crash ans i am afraid we are unable to get any information from the dumps of reports.

This problem dos not seem to be due to a scanner crash.

Best wishes

Mouse

[mouse1]

@mouse1 post:12

This problem still present in 2104:

Since found that this does not always happen when computer is rebooted with AV scan paused. And it has also occurred on occasions when scan is not paused. Previous link to this situation was thus apparently a co-incidence. Probably best therefore to check dump to determine the problem. It is happening fairly frequently on my PC - about a couple of times per week.

All of your problems is becuase of a file which is causing the engine to crash ans i am afraid we are unable to get any information from the dumps of reports.

Have now found this problem can happen when scanner has not been running. It appears that on occasions of abnormal termination or reboot cmdagent does not start, or complete it’s start-up process, promptly (? it’s doing some housekeeping?). CFP does not find it when it starts - thus displays ‘initialising’ for a while then gives an error. Incidentally CPMservice also crashes under these circumstances, complaining memory at an improbable address (0x00000?) cannot be read.

[mouse1]

Problem: Update from 2101 to 2111 would not display a progress windows when running, terminated silently and did not request a reboot. However CFP.exe silently stopped running (without error message) and needed to be restarted. On restart version number 111 was visible, but not change to enhanced protection settings.

[ol]- Your Operating System (32 or 64 bit) and Service Pack revision: XP SP3 32 bit production machine.

• Other Security and Utility Software Installed: Actual Window manager (not active for CIS), no others likely to be relevant
• Step by step description to reproduce the issue:Updated on promting by updater after reboot, observed no progress window, double and single clicked green updater icon - no progress dialog available, looked for CFP icon after a while - was not there - checked kilswitch - cfp process not there - restarted cfp, checked version number under More ~ About.
• How you tried to resolve the problem: Restarted cfp.
• Upload Memory Dumps on crash if you encounter any: N/A
• Attach screenshots to your posts to clarify the issue further. N/A
• Any other information you think that might be useful: N/A
• The CIS Security profile you are using, and if you imported a previous version of the config: proactive, updated from default proactive config, with a few app rules, from build 2075 then 2101[/ol]

[liosant]

1.Your Operating System (32 or 64 bit) and Service Pack review: XP SP3 32 bit machine production.
2.Security and other utility installed: N / A
3.Step by step description to reproduce the problem: CIS 5.8.210479.2111 not block clipboard, as in beta
4.How you tried to solve the problem: Clean reinstação
5.Upload Memory Dumps on crash if you find any: N / A
6.Attach images to your posts to clarify the issue further. N / A
7.Any other information you think might be useful: N / A
8.The CIS security profile you are using, and if you imported a previous version of the config: proactive, and execution control as restricted and untrusted

[ntoskrnl]

From my earlier reports.

Unrecognized, autosandboxed apps still able to access Internet by launching default browser when such browser is already running. - still not fixed in 5.8.210479.2111 RC2

Antivirus is unable to scan files when full path to those files exceeds MAX_PATH characters. - still not fixed in 5.8.210479.2111 RC2

CIS allows modification of Access Control Lists of protected registry keys for partially limited autosandboxed and for not sandboxed, but limited in write access to theses keys, applications. - still not fixed in 5.8.210479.2111 RC2

egemen, should I to repost these reports here or links are enough?

[Whoop-dee-doo]

See this issue reported by languy.

[mouse1]

@ntoskrnl post:31

From my earlier reports.

Unrecognized, autosandboxed apps still able to access Internet by launching default browser when such browser is already running. - still not fixed in 5.8.210479.2111 RC2

Antivirus is unable to scan files when full path to those files exceeds MAX_PATH characters. - still not fixed in 5.8.210479.2111 RC2

CIS allows modification of Access Control Lists of protected registry keys for partially limited autosandboxed and for not sandboxed, but limited in write access to theses keys, applications. - still not fixed in 5.8.210479.2111 RC2

egemen, should I to repost these reports here or links are enough?

I’ve observed the first of these, and behavior related to the second I think. Be good to know, if possible if these can be fixed for this or next release.

[mouse1]

@liosant post:30

1.Your Operating System (32 or 64 bit) and Service Pack review: XP SP3 32 bit machine production.
2.Security and other utility installed: N / A
3.Step by step description to reproduce the problem: CIS 5.8.210479.2111 not block clipboard, as in beta
4.How you tried to solve the problem: Clean reinstação
5.Upload Memory Dumps on crash if you find any: N / A
6.Attach images to your posts to clarify the issue further. N / A
7.Any other information you think might be useful: N / A
8.The CIS security profile you are using, and if you imported a previous version of the config: proactive, and execution control as restricted and untrusted

Was enhanced protection mode switched on (tick box in D+ settings then reboot)? Probably not make any difference, but it might.

[liosant]

@mouse1 post:34

Was enhanced protection mode switched on (tick box in D+ settings then reboot)? Probably not make any difference, but it might.

again?
I tried all settings.

sorry my english!

[egemen]

Thanks for feedback.

Issue #3, ACL editing on Windows XP, is fixed now.

Issue #1 is going to be investigated in the future releases.

Issue # 2, MAX_PATH is going to be fixed in future releases. Please note, it is possible only with ondemand scanning i.e. realtime scanning will block it no matter what.

@ntoskrnl post:31

From my earlier reports.

Unrecognized, autosandboxed apps still able to access Internet by launching default browser when such browser is already running. - still not fixed in 5.8.210479.2111 RC2

Antivirus is unable to scan files when full path to those files exceeds MAX_PATH characters. - still not fixed in 5.8.210479.2111 RC2

CIS allows modification of Access Control Lists of protected registry keys for partially limited autosandboxed and for not sandboxed, but limited in write access to theses keys, applications. - still not fixed in 5.8.210479.2111 RC2

egemen, should I to repost these reports here or links are enough?

[egemen]

Thanks. This is also fixed now. The enxt build should let you remove them one by one.

@loveboy_lion post:18

I too can conform the same bug

1. The full product and its version:COMODO Internet Security 5.8.210479.2111 RC2
2. Your Operating System (32 or 64 bit) and Service Pack revision:windows 7 sp1 64 bit
3. Other Security and Utility Software Installed:Panda cloud antivirus pro 1.5.1
4. Step by step description to reproduce the issue:a same file appears twice in Trusted List
5. How you tried to resolve the problem:Click the Purge buttom
6. Upload Memory Dumps on crash if you encounter any:N/A
7. Attach screenshots to your posts to clarify the issue further:Attached.
8. Any other information you think that might be useful:This mostly happens when the software is updated or reinstalled

[mouse1]

@egemen post:36

Thanks for feedback.

Issue #3, ACL editing on Windows XP, is fixed now.

Issue #1 is going to be investigated in the future releases.

Issue # 2, MAX_PATH is going to be fixed in future releases. Please note, it is possible only with ondemand scanning i.e. realtime scanning will block it no matter what.

Thanks Egemen feedback much appreciated

Mouse

[L.A.R_Grizzly]

@egemen post:37

Thanks. This is also fixed now. The enxt build should let you remove them one by one.

Just curious, why aren’t duplicates automatically removed? Why should I have to continually manually remove old versions of firefox.exe? Shouldn’t the purge button do this also? I always get “All the entries are valid” when older versions of firefox.exe are not.

[egemen]

Because they are valid. Multiple versions of the same file. There is no need to remove them.

@L.A.R. Grizzly post:39

Just curious, why aren’t duplicates automatically removed? Why should I have to continually manually remove old versions of firefox.exe? Shouldn’t the purge button do this also? I always get “All the entries are valid” when older versions of firefox.exe are not.