Executable moved to TFL always flagged as Untrusted [M679]

A. THE BUG/ISSUE (Varies from issue to issue)
[ol]- Summary - Give a clear summary in the topic subject, NOT here.

  • Can U reproduce the problem & if so how reliably?: Yes, every time.
  • If U can, exact steps to reproduce. If not, exactly what U did & what happened:
    a: Run xtop.exe
    b: Select Block, without selecting option to remember answer, from Defense+ Unlimited Rights Popup
    c: Then manually move xtop.exe from the Unrecognized files to the trusted files
    d: Select OK to close the Advanced Settings window
    e: Run xtop.exe again
    f: xtop.exe will again be in the unrecognized files
    g: Without selecting the option to run unlimited xtop.exe will not be trusted
  • If not obvious, what U expected to happen: xtop.exe should be trusted and run without restrictions.
  • If a software compatibility problem have U tried the conflict FAQ?: NA
  • Any software except CIS/OS involved? If so - name, & exact version: xtop.exe is the main executable for file program PTC Creo.
  • Any other information, eg your guess at the cause, how U tried to fix it etc:
    First Observed Date - 11.27.2013 06:24 PM.

Now(in my computer) it’s only 02:24.
time difference 4:00
[/ol]

B. YOUR SETUP (Likely the same for each issue, so you can copy forward)
[ol]- Exact CIS version & configuration:CIS version 6.3.302093.2976, Proactive Security

  • Modules enabled & level. D+/HIPS, Autosandbox/BBlocker, Firewall, & AV: HIPS=safe, BBlocker=Blocked, Firewall=Custom Ruleset, AV=cloud is on
  • Have U made any other changes to the default config? (egs here.): no
  • Have U updated (without uninstall) from a CIS 5?: no
    [li]if so, have U tried a a clean reinstall - if not please do?: NA
    [/li]- Have U imported a config from a previous version of CIS: no
    [li]if so, have U tried a standard config - if not please do: NA
    [/li]- OS version, SP, 32/64 bit, UAC setting, account type, V.Machine used: Windows 8.1, 64bit, UAC=on, user/admin, VM not used - real system.
  • Other security/s’box software a) currently installed b) installed since OS: a=none b=Windows Defender, but it’s turned off
    [/ol]

The file used for testing, xtop.exe, can be downloaded from here:

[attachment deleted by admin]

Hello. Thank you for your bug report. I modified it so that it is using the most up-to-date format. For future reference just copy and paste the code from here and put your replies after the colons.

I was able to replicate your results. I modified your steps for reproduction to the ones I used. Can you please verify that these are accurate?

Also, what appears to be happening is an issue between the Unlimited Rights popup and the file being in the trusted files list. Somehow this is negating that, although I do not believe that is intended behavior. Thus, I believe this is a bug.

However, I still need some more files in order to forward this to the devs. Please attach the diagnostics report from your computer and a list of the processes running on that computer. If you have any questions about how to do that please feel free to ask.

Thank you.

No matter how the file is sent to the trusted files, after starting it again and again in the Unrecognized files. This is exactly the bug.

My English via google translator
Thank you.

[attachment deleted by admin]

Thank you very much for your report in standard format, with all information supplied. The care you have taken is much appreciated by Comodo, and will increase the likelihood that this bug can be fixed.

Developers may or may not communicate with you in the forum or by PM/IM, depending on time availability and need. Because you have supplied complete information they may be able to replicate and fix the bug without doing so.

Many thanks again.

xtop.exe is not an installer.

But CIS defines it as the installer.

xtop.exe - Main executable file program PTC Creo.

Thank you for pointing that out. I have now fixed that both in the forum and in the tracker.

Thanks again.

Program for testing
PTC CREO trial
http://www.ptc.com/product/creo/free-trial/download.htm

Or not modified main executable file xtop.exe version of Creo2 M080 64 bit
https://www.dropbox.com/s/axgjar633vbzh07/xtop.7z

But with other versions of the same.

Can you please check and see if this is fixed with the newest version (7.0.313494.4115)? Please respond to this topic letting us know whether it is fixed or if you are still experiencing the problem.

Thank you.

PM sent.

This is not fixed for CIS version 7.0.313494.4115.

Thank you for checking this. I have updated the tracker.

This is not fixed for CIS version 7.0.315459.4132.

Thanks for checking. I have updated the tracker.

The devs believe that this is fixed for CIS version 7.0.317799.4142. Is it now working correctly on your computer as well?

Thanks.

This is not fixed for CIS version 7.0.317799.4142.

Thank you for checking this. I have updated the information in the tracker.

The devs have not marked this as Fixed in the tracker. However, sometimes bugs are fixed by the release of new versions, but not marked as Fixed in the tracker.

If you are able please check with the newest version (CIS version 8.0.0.4337) and let me know if this is fixed on your computer with that version.

Thank you.

Hello,

The devs have not marked this as Fixed in the tracker. However, sometimes bugs are fixed by the release of new versions, but not marked as Fixed in the tracker.

If you are able please check with the newest version (CIS version 8.1.0.4426) and let me know if this is fixed on your computer with that version.

Thank you.

This is not fixed for CIS version 8.1.0.4426.

Thanks for letting me know. I have updated the tracker.

Should be fixed with CIS 10.0.0.5144. Please check and if you disagree say so here or PM a bug board moderator. Thanks