D+ always sandboxes a file. Detail: the same file is trusted and unknown!

Comodo Internet Security - CIS Defense+ / Sandbox Help - CIS
1

The file is “C:\Program Files\FreeFileSync\FreeFileSync.exe”. I simply can’t run it anymore, even after having moved it to trusted files! Everytime I try to run it, D+ sandboxes it and includes it in unknown files again, while still keeping it in trusted files! How can it be?

Disclosure: as far as I can remember, it didn’t happen before I set up Windows SRP according to How to make a disallowed-by-default Software Restriction Policy

Today, I used Windows System Protection Settings to revert the system to the satate before SRP. But the problem with D+ persists. I don’t know whether there is really a link between SRP and D+ behaviour…

My system is Win7 Professional x64.

Thanks for any help.

2

This is indicative of a file that changes in some way between runs. This alters the file hash which in turn makes the file unknown to CIS.

The upcoming 5.9 release has an option for trusting files using the files path instead of its hash.