The bug/issue
-
What you did: Running unknown files in windows explorer.
-
What actually happened or you actually saw: No D+ alerts pop-up, the unknown program just run without D+ pop-up for permission of running unknown file. If “detect installer” is disable and “autosandbox” is enable, D+ do block monitored activities without a single D+ alerts. D+ cannot block some of the monitored activities when either “detect installer” is enable or “autosandbox” is disable.
-
What you expected to happen or see: I expect D+ alerts pop-up to ask for permission to run the files or sandbox the file as it do in Win7 32. I expect individual D+ alerts pop-up for corresponding activities as it do in Win7 32. I also expect D+ function normally when “detect installer” is enable and/or “autosandbox” is disable.
-
How you tried to fix it & what happened: Disable “detect installer” and Enable “autosandbox”. D+ do block monitored activities but still not a single D+ alerts was pop-up.
-
If its an application compatibility problem have you tried the application fixes here?: No
-
Details & exact version of any application (execpt CIS) involved with download link: any unknow files
-
Whether you can make the problem happen again, and if so exact steps to make it happen: yes, just run unknown files.
-
Any other information (eg your guess regarding the cause, with reasons): I use CLT.exe to perform a scenario analysis to show the effect of “detect installer” and “autosandbox”.
[tr][td][/td][td]Detect Installer [/td][td]Autosandbox [/td][td]CLT Score[/td][/tr]
[tr][td]1.[/td][td] Enable[/td][td]Enable[/td][td]200[/td][/tr]
[tr][td]2.[/td][td] Disable[/td][td]Enable[/td][td]340[/td][/tr]
[tr][td]3.[/td][td] Disable[/td][td]Disable[/td][td]200[/td][/tr]
[tr][td]4.[/td][td] Enable[/td][td]Disable[/td][td]200[/td][/tr]
B. Files appended. (Please zip unless screenshots).
1. Screenshots of the Defense plus Active Processes List (Required for all issues):screen2-4
2. Screenshots illustrating the bug: screen1 for detect installer and autosandbox enabled but D+/autosandbox not functioning.
3. Screenshots of related CIS event logs:none
4. A CIS config report or file:none
5. Crash or freeze dump file:none
6. Screenshot of More~About page. none
Your set-up
- CIS version, AV database version & configuration used: 5.8.213334.2131
- a) Have you updated (without uninstall) from CIS 3 or 4: no
b) if so, have you tried a clean reinstall (without losing settings - if not please do)?: - a) Have you imported a config from a previous version of CIS: no
b) if so, have U tried a standard config (without losing settings - if not please do)?: - Have you made any other major changes to the default config? (eg ticked ‘block all unknown requests’, other egs here.): no
- Defense+, Sandbox, Firewall & AV security levels: D+= proactive , Sandbox= enabled/Restricted, Firewall = custom policy , AV = nonexistent
- OS version, service pack, number of bits, UAC setting, & account type: Win7 x64 sp1, UAC disabled, Administrator
- Other security and utility software installed: Avast Free (has tried uninstall avast but does not solve the problem), Kingsoft PC Doctor (on demand only).
- Other security software previously installed at any time since Windows was last installed: CFP 5.5
- Virtual machine used (Please do NOT use Virtual box): none
[attachment deleted by admin]