Windows XP Pro 32bit + SP2 + Security fixes
SpywareTerminator 2.01.224
ProcessGuard 3.410
Symantec Antivirus Corporate Edition 9.0.3.1000
Train with Safe mode has stopped working for me. When I lauch apps that I haven’t run before, I do not see any pop-ups and the application will not launch. All I see is an entry in the D+ log. I have to switch to Clean PC mode to be able to run the application. Any ideas how to get Train with Safe to start talking to me again?
If I do not use Clean PC Mode and manually add the application to the computer security policy, it still is not allowed to launch. Train with Safe states that “every action of the unknown executable files are alerted to the user”. It worked that way in the beginning, but has now become silent. I’m more or less forced to run in Clean PC mode.
It fails to me also. You can see the screenshot. Defence+ is set to Paranoid mode as seen in the screenshot also. I receive a pop-up that AKLT wants to access the keyboard, I choose Block but it fails.
I uninstalled and reinstalled the BETA. Train with Safe Mode is talking to me again. I’m afraid to change any of the entries in the D+ Computer Security Policy for fear that I will silence T&S again like I did the last time by changing a custom policy to a trusted application. I’ll let the testers see if they can break it like I did.
No reason, PG was there first. I will eventually uninstall it once D+ is up to par. I used to have HIPS enabled with SpywareTerminator, but I turned it off again because I didn’t think it was that great.
I have run into the same situation as Ragwing. At CFP startup, auto or manual, i get a virtual machine error. If I respond to the error, CFP shutsdown. If I ignore the error window, CFP continues to run and appears to function normally. I did not install CFP in Safe Mode and to the best of my knowledge I do not have any keyloggers running. Ragwing was not clear on which unnecesary Win sevices he turned off as part of his debugging process, but I have been running my Win with minimum services for years. I am running Windows XP Pro SP2 with Norton Antivirus. Disabling NAV does not appear to resolve the issue. I ran the CFP ‘Diagnostic’ tool (not yet sure what that is all about’, and it determined CFP was installed properly. Does the beta have a code logging feature that would identify its reason for concluding it’s running in virtual mode?
I want to report problems with the logging facility, I get an error that names problems with the SQLite
If I turn off logging, it stops.
Maybe this function is still anavailable?
System Pentium III - 512 RAM Windows XP SP2 NOD32 v2.70
Everything else, works perfect for me, with the exception of the Manual Update, but that it might be related to the updates server. Not the software itself.
I disabled all unnecessary PROCESSES, not SERVICES, but anwyays, here we go.
These were the only running processes:
alg.exe
svchost.exe
svchost.exe
svchost.exe
lsass.exe
services.exe
winlogon.exe
crss.exe
smss.exe
System
System Idle Process
A total of 11 processes.
I’ll list all services that I have set to automatically running(which was running at the installation of CPF3).
Application Layer Gateway
Cryptographic
DCOM Server Process Launcher
DHCP Client
Distributed Link Tracking Client
DNS Client
Event log
IMAPI CD-Burning COM
Logical Disk Manager
Plug and Play
Protected Storage
Remote Procedure Call(RPC)
Security Accounts Manager
Shell Hardware Detection
System Event Notification
System Restore Service
Task Scheduler
Themes
Windows Audio
Windows Firewall/Internet Connection Sharing(ICS)
Windows Management Instrumentation
Some programms can access Internet over System Idle Process and COMODO doesn’t asks about it. See Attachment #2
But it happens sometimes, I can’t reproduse it.
Bug with updating - see attachment #1
PS Sorry for my English
PSS where I can find FAQ for new testers like me ?
Just tried that test, passed easily. The developer of the test himself said comodo passed.
The 3 following software were passing all of the AKLT keylogging method before I contact any security vendor : System Safety Monitor 2.4.0.619 beta, Comodo Firewall 3.0.9.229 beta, and OnlineArmor 2.1.0.9.
The 3 following software were passing all of the AKLT keylogging method before I contact any security vendor : System Safety Monitor 2.4.0.619 beta, Comodo Firewall 3.0.[b]9.229[/b] beta, and OnlineArmor 2.1.0.9.
Current BETA is 3.0.10.238.
Also, I’ve done the test, and I failed some of the tests too.
That looks like a virtualization problem or something related to Vista UAC. Can you tell us more about your Vista settings so that we can try to reproduce here?
Thanks for the reply.
The distinction between process and service is significant, and for debugging this problem the list of processes running at the time is indeed most significant. I have been trying to compare your notes with mine to determine if the fact that you initially installed in safe mode was the cause of the problem or the fact that a particular process was stopped to eliminate the error. Did you try to run CFP right after the non-safe mode install without stopping any extraneous processes? What was that result? Have you tried to identify a particular process as the culprit by re-starting them individually to see if any reintroduce the problem?
Since the CFP code generates the error message, which is very specific, it would be useful if someone on the Comodo programming team looks at the logic of the program and identifies under which condition the error message is generated. This would provide a clue as to the cause of the problem. I would find it difficult to run a Windows XP system long term with only 11 processes in order to avoid a CFP failure.
I rebooted after install, and it worked. I rebooted a second time, and this time, the second reboot worked.
I only terminated the processes during the install, so after reboot CPF was doing fine with all the other processes.
Nope, I think it was either safe mode or some process that caused trouble during the install.
I think you misunderstood, it was only during the install that I terminated all except those 11 processes.