I have a Targus USB 3.0 Docking Station and for some reason, it appears that recently, my monitor connected to my docking station stops working suddenly when COMODO prompts me to allow/deny an application or request. My laptop’s monitor (using as extended displays) works perfectly, however. The only way I can actually allow/deny things is if I somehow have the alert to pop up on my laptop display, because my docking station monitor freezes.
Additionally, if the alert comes up on my docking station monitor and the display freezes (only on the docking station monitor as usual), I can’t move anything because it freezes. Therefore, I have to wait until the alert times out on its own, which usually takes 1-2 minutes.
Any known issues with this? I don’t want to have to uninstall COMODO because of this simple, yet annoying, issue."
Can you post a screenshot of the D+ logs of around the time this happens. With the logs we can see what file is causing the alert and then give it a policy.
To copy a screenshot of the active window push alt+print screen to copy the active window to the clipboard (pushing print screen will copy the complete window to the clipboard not just the active window). The window is now copied to the clipboard. Paste the image in any image editing program, Paint, Paint.net, the Gimp etc. Use the “crop” function to resize the canvas to size of the image. Now save the file as 32 bits png image.
At the forum push the reply button. Or when using the Quick reply type some text and push the preview button.
Underneath the text box click on Additional options. Push the Choose button and navigate to the file and select it. When you want to post more images click on the more attachments link.
When done typing push the Post or Preview button.
The D+ logs in v5.x can be found under Defense + → View Defense + Events. In v6 they can be found under Task → View logs.
Can this be worked around until by making your laptop monitor the primary and the docked monitor the extended monitor? That way we should see an alert and you may be able to click on it and allow the action.
Additionally, if the alert comes up on my docking station monitor and the display freezes (only on the docking station monitor as usual), I can't move anything because it freezes. Therefore, I have to wait until the alert times out on its own, which usually takes 1-2 minutes.
Any known issues with this? I don’t want to have to uninstall COMODO because of this simple, yet annoying, issue."
This freeze may be caused the mouse software. Some of the mouse touchpad software will freeze when it is not allowed memory access to CIS processes. A solution then is to allow the mouse software to access CIS components in memory.
Does the period the posted logs cover the situations you described?
I first want to see if making the laptop monitor the main screen will produce an alert or not.
The reason is that logs you showed did not show action that normally would produce an alert (unless you run D+ in Paranoid mode); hence my question if the logs cover enough events to cover for the event to be logged.
If there is no alert then I will assume that may be the mousepad software is interfering. What version of CIS are you using?
so I’ve been testing it for almost two days now, and - no freezes at all!
of course I’ve “allowed” some alerts - most of them I’ve never saw after this change. I get the feeling that the alerts are majority related to dwm.exe…
I’ve attached the latest log…
Well do you think that, having dwm.exe to “safe files” can workaround this issue? If yes, can you please help me doing it the safest way?
Dwm.exe is a Windows system file and should be a trusted file by definition. Try adding it to Safe Files and when CIS says it is already a Safe File we know it is safe.
If the situation still works when reversing the monitors then I would say don’t touch it anymore.
I’ll try that just now…