Once when I plugged in a flash drive, I got an alert and (worrying about a trojan) I told Comodo to block whatever it was worried about. Turns out I blocked what looks like a high speed USB driver.
My log gives me the following every time I plug in a USB drive:
C:\Windows\System32\services.exe Modify Key HKLM\SYSTEM\ControlSet001\Services\wudfsvc\Start
Is there any way to undo this permanent block? I’m no longer given a choice when inserting a drive.
I thought to remove the entire protected registry group of ControlSet???/Services but I’m worried that if I do that, I’m opening the door to problems.
Welcome to the forum cordov,
Go to Defence+/Advanced/Computer Security Policy->find the entry services.exe and double click it. from there click on Access Rights and then next to Protected Registy keys click on Modify. You should have an allowed and blocked window, remove the entry from the blocked window APPLY to close all windows.
You fixed it. Thanks, Matt!
No probs m8, one tip when answering alerts your not sure of (especially if your blocking) is to make sure you don`t have “Remember my Answer” ticked.
p.s. I`ll mark this topic as resolved
I did the above things and still all my thumb drives are blocked, I blocked the first time by mistake with remember set and now I can not seem to get any (5) on my thumbs to work…
What do you mean with blocked? Can you show us screenshots of the D+ alert of around the time you try to hook up one of them up? They can be found under Defense + → Common Tasks → View Defense + Events?