A. THE BUG/ISSUE (Varies from issue to issue)
[ol]- Summary - Give a clear summary in the topic subject, NOT here.
Can U reproduce the problem & if so how reliably?:
If U can, exact steps to reproduce. If not, exactly what U did & what happened: 1:Make sure AV is set to auto-quarantine detected threats. 2:Then disable the AV, disable the Behavioral Blocker, and set the HIPS to Safe Mode. 3:Download Zemana AntiLogger from this page (password is zemana). 4:Run Zemana AntiLogger by double-clicking it. 5:Note that now CIS detects it and sends it to quarantine. However, Zemana Antilogger is still allowed to run if HIPS alerts are allowed.
If not obvious, what U expected to happen:
If it is detected as dangerous it should not be able to run from quarantine.
If a software compatibility problem have U tried the conflict FAQ?:
Any software except CIS/OS involved? If so - name, & exact version:
Any other information, eg your guess at the cause, how U tried to fix it etc:
A video showing this issue, along with other configurations, can be seen here: - YouTube
B. YOUR SETUP
[ol]- Exact CIS version & configuration:
Have U made any other changes to the default config? (egs here.):
No, it is at default
Have U updated (without uninstall) from CIS 5 or CIS6?:
No, this was a clean install in a clean system.
[li]if so, have U tried a a clean reinstall - if not please do?:
Yes, but the same problem was shown
[/li]- Have U imported a config from a previous version of CIS:
[li]if so, have U tried a standard config - if not please do:
[/li]- OS version, SP, 32/64 bit, UAC setting, account type, V.Machine used:
8.1 u1 64bit, UAC disabled, administrator, no v.machin
Other security/s’box software a) currently installed b) installed since OS, including initial trial security software included with system:
This is certainly strange behavior, and I think is worth submitting to the devs for consideration. However, please edit your first post so that it is in the format provided here. Just copy and paste the code into your post. Then replace the question marks with your responses. You can use preview to see what it will look like.
Once I have the information in that format I can better understand this issue. It will also make sure that the devs have enough information to fully replicate this.
Thank you. It looks very good. I made some changes to the first post. Please look it over and make sure that it still accurately reflects this issue.
Also, I had a question. Does this same behavior occur even if you reboot the computer, disable the AV and BB, and then run the malware? I want to make sure that this issue is not specifically related to the way in the video that you first ran with all 3 active, then you disabled the BB, then you disabled the HIPS. I want to make sure that if the devs test by disabling the AV and the BB they will be able to see the behavior.
b152, please see the comments in my previous reply. Is the first post still correct, and can you please comment on my question about whether it replicates just by using the HIPS only from the beginning? I need to clarify this before forwarding this to the devs.
I’d rather not forward this yet then, as this issue may be related to the other issue. Let’s first focus on the freeze, and if that can be fixed we’ll come back to this bug report. For the time being I will move this bug report to the Incomplete Issues section, if that’s okay with you.
As for the freeze issue, was that happening the entire time, or did it start after a while?
Also, if you have not already, please try reinstalling by following the advice I give in this topic and let me know if that is able to solve this issue with the freeze.