Dragon crashes if Win Hooks set to ask in prot. tab of custom rule [M207]

Comodo Internet Security - CIS Resolved/Outdated Issues - CIS
#1

A. THE BUG/ISSUE

  1. What you did: Set Windows/Win Event Hooks to active in the Protection settings of HIPS Dragon rule (see 1st attached image). To be noted : In the Access Rights of Dragon rule, Windows/Win Event Hooks is set to ask (2d attached image)
  2. What actually happened or you actually saw: When i launched Dragon, its window opened but right after Dragon crashed. In HIPS log, it appears that Dragon was unable to set a hook (3d attached image
  3. What you expected to happen or see: that Dragon launched normally, but to be alerted if another application target Dragon for a hook
  4. How you tried to fix it & what happened: If Windows/Win Event Hooks is set to inactive in the Protection settings of HIPS Dragon rule, Dragon doesn’t crash. but when set on active, the crash occurs.
  5. If a software compatibility problem have U tried the compatibility fixes (link in format)?: Doesn’t apply
  6. Details & exact version of any software (execpt CIS) involved (with download link unless malware): Comodo Dragon version 23.4 downloaded from Forum
  7. Whether you can make the problem happen again, and if so precise steps to make it happen: yes, each time I set Windows/Win Event Hooks to active in the Protection settings of HIPS Dragon rule
  8. Any other information (eg your guess regarding the cause, with reasons):

B. FILES APPENDED. (Please zip unless screenshots).
[/color[/color]]0. A diagnostics report file (Click ‘?’ in top right of main GUI) Required for all issues)[color=blue]: Appended

  1. Screenshots of the 6.0 Killswitch Process Tab (see Advanced tasks ~ Watch Activity) or 5.x Active Process List. If accessible, required for all issues: Appended
  2. Screenshots illustrating the bug: Appended
  3. Screenshots of related CIS event logs: Appended
  4. A CIS config report or file: Not appended.
  5. Crash or freeze dump file: Not appended
  6. Screenshot of More~About page. Can be used instead of typed product and AV database version: Not appended.

C. YOUR SETUP

  1. CIS version, AV database version & configuration: 6.0.260739.2674, Proactive
  2. a) Have you updated (without uninstall) from a previous version of CIS: No
    b) if so, have you tried a clean reinstall (without losing settings - if not please do)?:
  3. a) Have you imported a config from a previous version of CIS: No
    b) if so, have U tried a standard config (without losing settings - if not please do)?:
  4. Have you made any other major changes to the default config? (eg ticked ‘block all unknown requests’, other egs here.): No
  5. Defense+/HIPS, Autosandbox/BBlocker, Firewall & AV security levels: D+/HIPS=Paranoïd, ASB/BB=Enabled, Firewall=Custom, AV=Stateful
  6. OS version, service pack, number of bits, UAC setting, & account type: Windows 8 Enterprise fully updated, 32 bit, UAC on, Admin
  7. Other security and utility software currently installed: Sandboxie, Free Commander
  8. Other security software previously installed at any time since Windows was last installed*: None
  9. Virtual machine used (Please do NOT use Virtual box)[color=blue]: Sorry, it is VirtualBox

[attachment deleted by admin]

#2

Thank you very much for your report in standard format, with all information supplied. The care you have taken is much appreciated by Comodo, and will increase the likelihood that this bug can be fixed.

Developers may or may or may not communicate with you in the forum or by PM/IM, depending on time availability and need. Because you have supplied complete information they may be able to replicate and fix the bug without doing so.

Many thanks again

Mouse

#3

Can you please check and see if this is fixed with the newest version? Please let us know whether it is fixed or you are still experiencing the problem.

Thank you.

PM sent.

#4

Can you please check and see if this is fixed with the newest version (6.2.282872.2847)? Please let us know whether it is fixed or you are still experiencing the problem.

Thank you.

PM sent.

#5

The problem remains in the latest version 6.2.282872.2847. In fact, the issue is a bit modified : instead of crashing, Dragon cannot be launched. Setting Windows/WinEventHooks to active in Dragon 's HIPS rules Protection Settings prevent it to set a hook in C:\Windows\System 32\uxtheme.dll and that in turns prevents Dragon to be launched.

[attachment deleted by admin]

#6

Actually, the newest version is now 6.2.285401.2860.

Can you check and confirm that it is actually this version which you have seen the modified behavior?

Thanks.

#7

Silly me. I copied the number version in your previous post, but in fact I tested in version 6.2.285401.2860, as shown in the attached image.

[attachment deleted by admin]

#8

No problem. I assumed you had, but just wanted to be sure before I updated the tracker.

The tracker has now been updated.

Thanks for checking.

#9

Can you please check and see if this is fixed with the newest version (6.3.294583.2937)? Please let us know whether it is fixed or you are still experiencing the problem.

Thank you.

PM sent.

#10

Sadly, the problem is still there with version 6.3.294583.2937.

[attachment deleted by admin]

#11

Thank you for checking this.

I’ve updated the tracker.

#12

Can you please check and see if this is fixed with the newest version (7.0.313494.4115)? Please respond to this topic letting us know whether it is fixed or if you are still experiencing the problem.

Thank you.

PM sent.

#13

Hi Boris 3,

Devs have reported this issue as fixed in version <7.0.317799.4142>. Please verify it.

Thank you.

#14

The devs have marked this as fixed. I will therefore move this to Resolved.

If this is still happening on your computer please respond and let me know.

Thank you.