Has the problem of slow start-up for old PCs and the flickering of the icon been solved?
Hi,
Can you just confirm that you got my answer to your PM ? I’m not very familiar with it.
Thanks.
I’ve noticed in the v11 series of CIS that, when using HIPS, if I lower my shield from Safe to Training, that CIS “forgets” some previously saved Rules.
For example, I’ll drop to Training mode when I update Win7 using WSUS Offline Updater .When I go back to Safe mode, I have to re-approve quite a lot of Rules - mostly Window subsystem things.
Anyone else seeing this behavior?
I noticed a new Startup Entry (found with either CCleaner or Autoruns) in this version of CIS: ComodoWebStart.
I did a search for it, and found some old posts on the Net about how it has something to do with Dragon?
I didn’t install Dragon. So I disabled WebStart, without apparent incident.
But thought I would mention it here in the forum.
I have this same iussue and it’s been doing this for a couple of days .There must be something in the new updates that is causing this. When I set up rules in hips panel and set some processes to be safe instead of personal then after running the program they turn back to personal.
The consequence of this is that if the program works online like a game it stops working and logs you out.
I also tried to install again Comodo firewall thinking it was corrupted or something similar but nothing changed. At moment I am using Comodo plus avast free antivirus( so with all the antivirus features disabled there shouldn’t be any conflict).
Before I install comodo I always copletely deactivate windows firewall so I suppose that couldn’t be the problem either.
The issue of rules being gone when using training mode or enable create rules for trusted applications, is that at reboot when rules are being created it does not finish being saved in the registry so it gets erased. Also if you create your own rules then switch to training mode those rules will be overridden by training mode. So don’t keep training mode enabled when you shutdown or reboot the system.
Thanks Futurtech, I am trying this. I also forgot to mention another problem that I see. I see that if I install new programs now Comodo no more sends me the pop up requesting what to do with the process .I just installed again my office suite for an update and there was no request at all from hips.
Ahh. thanks. It is true that sometimes I leave HIPS set to Training Mode when I shut down Windows.
BUT - I do this because sometimes it seems that Comodo is preventing an orderly shutdown of Windows. That is, if I don’t let HIPS Train during a shutdown, then I get a very long “Logging Off” screen from Windows - with no spinning icon - and hardly any “Shutting Down” screen. (Although it does eventually shut down.)
If I let it train through a Shutdown, then it seems to shutdown normally after that, even when I’m back in Safe Mode.
Similarly, whenever I update my Nvidia Driver, there’s always a HIPS pop up just after shutdown starts. (Something about Nvidia’s context driver.) I can’t always click on Allow soon enough. So I’ve had to leave HIPS in Training Mode to allow that automatically.
In a way I can kind of see why things like this happens - there are processes that get called when Windows shuts down and a good Firewall tool has got to catch those, or else the bad guys will do all their attacks during shut down. So it’s kind of a Catch-22 situation. How can I get a clean shut down if HIPS asks whether to Allow some of the shutdown processes while shutting down?
Last, it seems to me that Training Mode ought to add to the Rules that the user has already Allowed, including changing any Blocked Rules to Allow in Training Mode. (As opposed to erasing all previous Rules created in Safe (or Paranoid).)
You shouldn’t in majority of cases ever get HIPS alerts from trusted applications if HIPS is set to safe mode.
What you need to do is make sure whatever is being blocked at shutdown, you check to make sure the file rating is trusted for that application. Or you check the HIPS event logs to see what was blocked and what it was blocked from doing, that way you can either just use the unblock application task, or you create the HIPS rule manually for the application being blocked.
Thanks! Probably what’s complicating this in my situation is that I’ve disabled the “Trust applications signed by Trusted Vendors.”
I’m not sure that the bad guys can’t forge signatures.
In the meantime, I’m looking for the “unblock application” task. (It would be nice if I could somehow unblock a task from the log file by clicking on something, as if it were a Rule.)
I found “Unblock Applications.” Right on the front screen. (I always go to Advanced Tasks. That’s why I didn’t see it.)
Looks it it’s exactly what I need.
Thanks!
To make entries in the HIPS logs about events (processes) that prevent the computer from shutting down, try this options:
Perform a few reboots, and after each of them, carefully study the HIPS logs. So I managed to solve the problem with a long shutdown.
Special attention to anti-virus processes.
CIS does not show correct traffic. On Windows 1803 and CIS 11.0.0.6710.
As seen in screenshot CIS shows 508KB/s traffic while it is doing 23.36MB/S.
Thanks! I don’t use an anti-virus, but it seems that Windows itself starts processes at shutdown that can hose things up. (For example, if you run Disk Cleanup, there is a “pending process” that has to complete on shutdown - and on the next startup. (Thanks to nuhi of ntlite for showing me that.))
I think this has been answered somewhere but do we get the latest update from the main comodo website or here?
For example, is .6710 the latest?
Thanks guys.
I do not see the file with the databases in the folder scanners
Only there is a default – bases.cav 9 879 kb.
Where can I see the database file? The latest update: - 29907
The installer has version number 6728. Comodo may be gearing up for an update. Keep an eye on this board to see if a new release topic is getting started.
And indeed we have the expected update to 6728. I am locking this topic now.