D+/Autosandbox is not correctly functioning in Win7x64

The bug/issue

  1. What you did: Running unknown files in windows explorer.

  2. What actually happened or you actually saw: No D+ alerts pop-up, the unknown program just run without D+ pop-up for permission of running unknown file. If “detect installer” is disable and “autosandbox” is enable, D+ do block monitored activities without a single D+ alerts. D+ cannot block some of the monitored activities when either “detect installer” is enable or “autosandbox” is disable.

  3. What you expected to happen or see: I expect D+ alerts pop-up to ask for permission to run the files or sandbox the file as it do in Win7 32. I expect individual D+ alerts pop-up for corresponding activities as it do in Win7 32. I also expect D+ function normally when “detect installer” is enable and/or “autosandbox” is disable.

  4. How you tried to fix it & what happened: Disable “detect installer” and Enable “autosandbox”. D+ do block monitored activities but still not a single D+ alerts was pop-up.

  5. If its an application compatibility problem have you tried the application fixes here?: No

  6. Details & exact version of any application (execpt CIS) involved with download link: any unknow files

  7. Whether you can make the problem happen again, and if so exact steps to make it happen: yes, just run unknown files.

  8. Any other information (eg your guess regarding the cause, with reasons): I use CLT.exe to perform a scenario analysis to show the effect of “detect installer” and “autosandbox”.

[tr][td][/td][td]Detect Installer [/td][td]Autosandbox [/td][td]CLT Score[/td][/tr]
[tr][td]1.[/td][td] Enable[/td][td]Enable[/td][td]200[/td][/tr]
[tr][td]2.[/td][td] Disable[/td][td]Enable[/td][td]340[/td][/tr]
[tr][td]3.[/td][td] Disable[/td][td]Disable[/td][td]200[/td][/tr]
[tr][td]4.[/td][td] Enable[/td][td]Disable[/td][td]200[/td][/tr]

B. Files appended. (Please zip unless screenshots).
1. Screenshots of the Defense plus Active Processes List (Required for all issues):screen2-4
2. Screenshots illustrating the bug: screen1 for detect installer and autosandbox enabled but D+/autosandbox not functioning.
3. Screenshots of related CIS event logs:none
4. A CIS config report or file:none
5. Crash or freeze dump file:none
6. Screenshot of More~About page. none

Your set-up

  1. CIS version, AV database version & configuration used: 5.8.213334.2131
  2. a) Have you updated (without uninstall) from CIS 3 or 4: no
    b) if so, have you tried a clean reinstall (without losing settings - if not please do)?:
  3. a) Have you imported a config from a previous version of CIS: no
    b) if so, have U tried a standard config (without losing settings - if not please do)?:
  4. Have you made any other major changes to the default config? (eg ticked ‘block all unknown requests’, other egs here.): no
  5. Defense+, Sandbox, Firewall & AV security levels: D+= proactive , Sandbox= enabled/Restricted, Firewall = custom policy , AV = nonexistent
  6. OS version, service pack, number of bits, UAC setting, & account type: Win7 x64 sp1, UAC disabled, Administrator
  7. Other security and utility software installed: Avast Free (has tried uninstall avast but does not solve the problem), Kingsoft PC Doctor (on demand only).
  8. Other security software previously installed at any time since Windows was last installed: CFP 5.5
  9. Virtual machine used (Please do NOT use Virtual box): none

[attachment deleted by admin]

Please point out more clearly what’s the important information missing or unclear.

Sorry you have used the old Format which is missing some questions, please use the new Format link below.