Problem description: When you automatically sandbox an item you would think that protection would be put in place quickly. In fact, if the cmdagent load is high for other reasons (eg running an AV scan on a large file, or if a large file is being autosandboxed and scanned as part of the process?) the protection job appears to take 6 minutes to put in place. The autosandbox alert also can be delayed several minutes, though this is more difficult to replicate, with D+ alerts (eg hook alerts) appearing promptly meanwhile, and may not appear at all (times out without appearing?).
- Your Operating System (32 or 64 bit) and Service Pack revision: XP SP3 32 Bit (Pentium 4 CPU 3Ghz, 4Gb RAM) Admin account.
- CIS version: Please see title
- Other Security and Utility Software Installed: See appended config report for details. Usually: Comodo - CIS, CVE, CIV, CLP, CSE, CAS, IVault; Other- Filezilla, Wallwatcher, Sony Ericsson PC software, Actual Window Manager, Routerstats, Revo, Process Explorer, Google Desktop, Process Tamer, Process Explorer, Kiwi Syslog, Idrive, Clipmate, Hotspotshield, Stuffit
- Step by step description to reproduce the issue: Start AV scan and wait until it is scanning a large file and consuming 90%+ of cpu cycles, then start an application that it will autosandbox - the larger the better, alert will come up after a delay of 20 secs to several minutes (longer delay happens but is difficult to replicate), ignore it, then watch file in process explorer (set to 1 sec refresh) checking occasionally to see if it has job tab. Takes 6 mins until it turns brown or gains job tab does on my machine. (Process explorer is set to only highlight jobs). If appropriate to file, you may meanwhile see D+ alerts, suggesting these have a higher priority than the autosandbox alerts
- How you tried to resolve the problem: N/A
- Upload Memory Dumps on crash if you encounter any: N/A
- Attach screenshots to your posts to clarify the issue further: N/A
- Virus database version: Please see config file
- Any other information you think that might be useful. CIS settings:See appended config report for details.
[attachment deleted by admin]