Defense+ hides printer from Foxit Reader, but other programs are OK

Help for v3
#1

I am using CFP 3.0.25.378, and have been pleased so far.
I also use Foxit Reader 2.3, an excellent alternative to Adobe Reader.

Since yesterday, I can no longer use Foxit Reader to print PDF files, and get this error message:
“Before you can perform print-related tasks such as page setup or printing a document, you need to install a printer.”

If I click on Print Setup, the message asks “do you want to install a printer now?”.

When I click on Yes, a new error appears:
“Operation could not be completed. The print spooler service is not running.”

HOWEVER, it seems that all other software prints just fine, including Firefox 3.0, IE 7, MS Office 2003. I have several printers installed, and regularly use the default printer here at my office.
I don’t know of any new software installed recently.

So, I have been trying to figure out what program is interfering with Foxit. So, I have been turning off various programs one at a time. And now I suspect that my printing problem has something to do with the Defense+ module of the Comodo Firewall Pro.

Perhaps I just don’t know where to look inside Comodo to remove or reset any references to Foxit. I don’t know how to reset Comodo’s rules to zero, and start over, either.

Tthe only thing that seems to work is to right-click on the Comodo icon in the system tray, then choose “Defense+ Security Level” and set it to Disabled.

Once I do that, Foxit seems to print normally. So I am posting this story just in case anyone else has the same problem.

As far as I can tell, Foxit is the only program on my machine that is negatively affected by Defense+. Perhaps some reader knows more about Comodo and can point out a fix in there.
Any suggestions would be appreciated.

Thank you.

System details:
IBM Thinkpad T41p, Windows XP SP3, HP Laserjet 4+ printer
AVG 8.0.138 antivirus, Comodo Firewall Pro 3.0.25.378, Spybot S&D 1.6, Spywareblaster 4.1, Foxit Reader 2.3.2923

#2

I print with Foxit Reader all the time. Try making Foxit Reader and your Printer Software trusted under D+.

#3

I attached a default config for 3.0.25. Import it in CFP (Miscellaneous\Manage my configurations\Import As) and then select the new configuration.

CleanPC mode should be able to create all rules automatically.

Only run Foxit and try the same actions.

If the problem disappear run a configuration report to find out the differences.

#4

I have exactly the same problems and error messages but, in my case, with PaintShopPro7. I too discovered by trial and error that disabling Defense+ cured the problem.

I also have a related problem on my laptop where I cannot open links in Thunderbird unless I disable Defense+. I’ve tried adding Thunderbird and Firefox to the Safe Files list but this does not fix the problem. On my desktop computer Thunderbird links work OK.

Would uninstalling Comodo and reinstalling it solve the problem? It woulld have to relearn all the applications.

Is Defense+ really worth having? Am I really at risk with it disabled? Any thoughts most appreciated.

Desktop - Dell Dimension 5000, WinXP Home, SP3
Laptop - HP6710b, WinXP Pro, SP3.

#5

I’ve cracked it. A comment on another post pointed me to the Defense+ Computer Security Policy. Here are all the apps and their selected Comodo Defense+ responses. All I had to do was go down the list and change from ‘Installer or Updater’ to ‘Trusted Application’ for the affected applications - in my case PaintShopPro and Thunderbird.

As far as I can see I could change all the settings in this list to ‘Trusted Application’ because they are only there because I declared them as trustworthy.

This shows me that it is very important to choose the correct response when installing new applications. It is not obvious whcih is the correct response and it is just too easy to keep clicking on the default ‘Installer or Updater’. This seems to work at the time but obviously stores up problems later.

I’m sure I’m not the only one who finds all the options in Comodo rather daunting.

I hope this helps others.

#6

Installer/Updater isnt default for D+. How did you coke up with that?

#7

Just installed a new application. Comodo popped up with the usual screens. The default response IS 'Installer or Updater’for the first and subsequent screens. In my ignorance I ususally choose ‘Installer or Updater’ for the first instance and then ‘Trusted Application’ for the subsequent screens.
As I pointed out earlier - there is nothing to stop me keep selecting ‘Installer or Updater’ for the subsequent screens. The end result appears to be the same - an properly installed and functioning application. It is now clear that this approach can store up problems later.
I don’t know how I’m supposed to know which response to choose. Installing an application seems to need several informed responses. But what are they? They all seem to work so which one is best? I wish I knew.
Still, this little drama has given me some insight into how to get things working again even if I do choose the wrong responses during installation.
Cheers

#8

The default response is NOT “installer/Updater”. That only is if you select it. Read the screen shot properly. If you just click allow then a “custom rule” will show up in D+. If you click on tab next to “treat as” and select “installer/updater” then installer/updater will be what Comodo gives that program. Please look clearly at the alert. Show me a screen shot. Better yet look at the help file. Installer/Updater is there but it is not selected unless you click on the area where it says “treat as”. Try it yourself. Simply just click on allow to a D+ alert. Then go to D+\Advanced\Computer Security Policy and find that program you just allowed. It should have “custom” next to it. Now delete that program and run it again. This time click on the “treat as bottom”. Go back to D+\Advanced| Computer Security Policy and now you will see “installer/Updater” next to that program.

#9

The best hing to do when installing anything is open up Comodo and click on the “Switch to install mode” button on the bottom. When done installing then switch back to previous mode. Another thing to wonder about is if you think you selected install/updater which you did not you will get an alert box every 5 minutes about switches back to the previous mode.

Paranoid Mode: This is the highest security level setting and means that Defense+ will monitor and control all executable files apart from those that you have deemed safe. The firewall will not attempt to learn the behavior of any applications - even those applications on the Comodo safe list. and will only use your configuration settings to filter critical system activity. Similarly, the firewall will not automatically create ‘Allow’ rules for any executables - although you still have the option to treat an application as ‘Trusted’ at the Defense+ alert. Choosing this option will generate the most amount of Defense+ alerts and is recommended for advanced users that require complete awareness of activity on their system.

Safe Mode: While monitoring critical system activity, the firewall will automatically learn the activity of executables and applications certified as ‘Safe’ by Comodo. It will also automatically create ‘Allow’ rules these activities. For non-certified, unknown, applications, you will receive an alert whenever that application attempts to run. Should you choose, you can add that new application to the safe list by choosing ‘Treat this application as a Trusted Application’ at the alert. This will instruct the firewall not to generate an alert the next time it runs. If your machine is not new or known to be free of malware and other threats as in ‘Clean PC Mode’ then Safe Mode’ is recommended setting for most users - combining the highest levels of security with an easy-to-manage number of Defense+ alerts.

Clean PC Mode: From the time you set the slider to ‘Clean PC Mode’, Defense+ will learn the activities of the applications currently installed on the computer while all new executables introduced to the system are monitored and controlled. This patent-pending mode of operation is the recommended option on a new computer or one that the user knows to be clean of malware and other threats. From this point onwards Defense+ will alert the user whenever a new, unrecognized application is being installed. In this mode, the files in ‘My Pending Files’ are excluded from being considered as clean and are monitored and controlled.

‘Installation Mode: Installer applications and updaters may need to execute other processes in order to run effectively. These are called ‘Child Processes’. In ‘Paranoid’, Safe’ and ‘Clean PC modes’, Defense+ would raise an alert every time these child processes attempted to execute because they have no access rights. Whilst in one of these 3 modes, Comodo Firewall Pro will make it easy to install new applications that you trust by offering you the opportunity to temporarily engage ‘Installation Mode’ - which will temporarily bestow these child processes with the same access rights as the parent process - so allowing the installation to proceed without the usual alerts.

If you are installing a new, unknown application. Defense+ will alert you with a pop-up notification and, as you want to allow this application to continue installing, you should select ‘Treat this application as an Installer or Updater’ at the Defense+ alert. You will subsequently see the following:

#10

I think the default is allow. You need to move the tick to apply installer/updater but there’s a drop down menu where you can choose. It seems to me, once installed, you’ll get another pop up where you can choose Trusted.