Playing with and exploring CIS 6882 and 7036

[Mephisto]

@Ploget post:7

I don’t know how you have your system set up or what Configuration you are using; but I just tried the first 4 on the list from that website. None were recognized, which isn’t surprising since they’ve just been since today. HIPS warned on everyone giving me the choice . . .

Just for interest I allowed the last one to run as contained, which of course treated the File manager as contained (which would have been Windows Explorer if I used it for that). That naturally blocked access to the drive where the data on this machine is stored . . . even after a reboot which worked fine otherwise. Removing the HIPS entry for my File Manager from the Rules which had it as contained, restored everything to normal as expected.

If you had a similar HIPS entry, then Windows Explorer wouldn’t run on startup

Plus, I’ve never had a WSC warning for this CIS version and very rarely for the previous versions. Windows Firewall is turned off and stays turned off

The user needs to keep in mind that HIPS alerts in Comodo apply to the object being mentioned at the LEFT side in the alert. If they choose the option to treat as: Blocked Applications, then explorer.exe which corresponds to Windows Explorer will be blocked from running other executables and this will cause problems in the system.

I even saw a Youtube tester commit this mistake once while testing Comodo and worse of all, he initially thought that Comodo allowed an infection. In the end he had to delete his video because of this silly mistake, but the point is: If you don’t know how to properly answer HIPS alerts in Comodo, you may as well destroy your OS. So users are advised to:

a) Set HIPS to Auto-Block in HIPS settings.
b) Disable HIPS.

I really don’t see the need for all this lamentations if the user just answered a HIPS alert in the wrong way.

EDIT: Also, this:

@futuretech post:42

Hate to break it to you but those are Windows issues, once you install on a new Windows install, you won’t get those problems. I had experienced the missing icon when show traffic animation was disabled or I didn’t install the firewall when I was on 1903, after I did a fresh install of 1909, the icon always loaded even now without traffic animation being enabled in the firewall settings. Same for security center integration, Windows for some reason won’t always get the status from Comodo on system startup, when I reformatted to install the 1909 build, I haven’t had warnings from security center since.