problems with navigation

Help for v2
#1

Hi

I’m havin a little problem with comodo and IE7

No problem to navigate, but when i start a download, comodo blocks IE7 until the download completes, making imposible to navigate under the same IE7 process that started the download. No problem starting another IE7 while the initiated download continues.

Any idea, solution, workaround, … ?

Thanks

#2

maestroSun,

If Comodo is blocking something, it will appear in the Logs.

Let’s take these steps:

  1. Go to Activity/Logs.
  2. Right-click an entry and select, “Clear All Logs.”
  3. Browse to your favorite site, and download something
  4. Once you experience the issue, close out the process.
  5. Go to Activity/Logs.
  6. Right-click, select “Export to HTML.”
  7. Save and reopen the file.
  8. Highlight the entries, Copy them, and Paste them into your next post here. (you may edit out your personal/external IP address with “x” for privacy, if it shows in the logs)

Then we’ll see what’s going on, and get it resolved.

LM

#3

OK

i’ve browsed to google, search nexuiz, go to home page, redirected to sourceforge and started download from heanet.

While downloading nexuiz (more than 200 Mb) the process from where the download was started keep blocked. While downloading, there’s no problem with other IE7 process. After the download finished, the first IE7 becomes not blocked and can browse again.

The log is (i have the spanish version):

Registros COMODO Firewall Pro Fecha de Creación: 10:59:58 10-04-2007 Alcance del Registro:: Hoy

Fecha/Hora :2007-04-10 10:59:36
Severidad :Media
Reportado por:Monitor de aplicaciones
Descripción: Acceso Denegado a la Aplicación (iexplore.exe:66.35.250.203: :http(80))
Aplicación: C:\Archivos de programa\Internet Explorer\iexplore.exe
Padre: C:\WINDOWS\explorer.exe
Protocolo: Salida TCP
Destino: 66.35.250.203::http(80)

Fecha/Hora :2007-04-10 10:59:36
Severidad :Media
Reportado por:Monitor de aplicaciones
Descripción: Acceso Denegado a la Aplicación (iexplore.exe:208.174.60.30: :http(80))
Aplicación: C:\Archivos de programa\Internet Explorer\iexplore.exe
Padre: C:\WINDOWS\explorer.exe
Protocolo: Salida TCP
Destino: 208.174.60.30::http(80)

Fecha/Hora :2007-04-10 10:59:36
Severidad :Media
Reportado por:Monitor de aplicaciones
Descripción: Acceso Denegado a la Aplicación (iexplore.exe:194.221.37.62: :http(80))
Aplicación: C:\Archivos de programa\Internet Explorer\iexplore.exe
Padre: C:\WINDOWS\explorer.exe
Protocolo: Salida TCP
Destino: 194.221.37.62::http(80)

Fecha/Hora :2007-04-10 10:59:36
Severidad :Media
Reportado por:Monitor de aplicaciones
Descripción: Acceso Denegado a la Aplicación (iexplore.exe:208.175.188.61: :http(80))
Aplicación: C:\Archivos de programa\Internet Explorer\iexplore.exe
Padre: C:\WINDOWS\explorer.exe
Protocolo: Salida TCP
Destino: 208.175.188.61::http(80)

Fecha/Hora :2007-04-10 10:59:35
Severidad :Alta
Reportado por:Monitor de aplicaciones
Descripción: Acceso Denegado a la Aplicación (iexplore.exe:208.174.60.30: :http(80))
Aplicación: C:\Archivos de programa\Internet Explorer\iexplore.exe
Padre: C:\WINDOWS\explorer.exe
Protocolo: Salida TCP
Destino: 208.174.60.30::http(80)

End of The Report

While preparing this post i’ve found another problem. If i click post and click cancel when i get the confirmation dialog for the post from IE7 ( i prefer to confirm sending data ) , this IE7 process gets blocked and i have to close it. No problem with other IE7 process

Any ideas ?

Thank you

maestroSun

[attachment deleted by admin]

#4

maestroSun,

I’ve followed your steps, and am downloading nexui as we “speak.” Actual download is occurring from 128.101.240.209, and so far I have about 90MB dl’d. I just want to make sure there isn’t a problem with the download process/site.

Your log shows that IE7 is being blocked by the Application Monitor. There’s a couple options for how this happens:

  1. You have an entry in the Application Monitor to block iexplore.exe with the Parent of explorer.exe, for TCP
  2. You don’t have an entry in AppMon for iexplore.exe with Parent of explorer.exe that matches your current Alert Frequency and the connection detail, and have responded to the popup alert with Deny

Will you open your Application Monitor to full-screen, scroll to your IE7 rule (or rules), highlight each IE7 rule (if you have multiple rules) and capture a screenshot individually (so we can see the details of the rule). Save each screenshot as an image file (png, jpg, gif) and attach to your post under Additional Options.

I think your other issue you just mentioned is probably related.

LM

#5

Little Mac

1.- thanks
2.- the problem is not with the download. The download works fine… but … while the file is been downloaded (dialog showing the download process), i can’t browse using the process from where the download has been started
3.- at this moment, there’s only one rule defined for IE7. Captured screens attached to post
4.- the other problem …

5.- … (thinking) …

6.- (after 5 min) well, while writing this post i had an idea. All the problems happens when IE7 shows some kind of win32 dialog. Checked the complete list of components in component monitor and find browseui.dll blocked. Once allowed, the problem disapears.

Curiously IE7 works fine without this until the download starts, blocks browsing while downloading, and allow browsing again once the download has finished.

BUT … why doesn’t the log reflect the real reason for blocking IE7 ?

Thank you.

[attachment deleted by admin]

#6

maestroSun,

  1. No problem. :wink:
  2. Are you referring to the page/tab at sourceforge from which the download started? That you’re trying to browse from that page while actively downloading, as opposed to opening a new tab?
  3. Thanks; I don’t see any obvious problems with that rule
  4. hmm…
  5. me, too…
  6. Don’t know why logs wouldn’t show an entry for Component Monitor instead of Application Monitor.

Some thoughts…

  1. After changing browseui.dll to Allow, did you click the “Apply” button?
  2. Have you run the Application Wizard? Security/Tasks/Scan for known applications. If not, please remove your existent IE7 rule, and then do so; follow the prompts, and reboot when finished.
  3. In Security/Advanced/Miscellaneous, what is the status of the following items:
    a. 2nd box, “Do not show alerts for applications certified by Comodo”
    b. Alert Frequency level

LM

#7

Little Mac

  1. No, i’m refering to the process (win32 process) of IE7 that started the download. I can’t (well, now i can :smiley: ) browse from the tab that started the download, i can’t browse from another tab and i can’t browse from a new tab created after the download starts. I can’t browse from that IE7 process until the download ends. BUT while the file is downloading i can start another IE7 process and browse without problems.

About your thoughts :

1.- Yes. After allowing the blocked dll AND clicking “Apply” the problem with browsing dissapeared
2.- Yes. Yes. Yes.
3.- unchecked “Do not show alerts for applications certified by Comodo”. Alert level Low. Alerts Active

After reverting browseui.dll to “Blocked” i have again the same problem with navigation, and again the log shows application blocked but no reference appears about any component.

So… the solution is not to block browseui.dll (this was my fault blocking it in some alert window)

But… why the log doesn’t show a blocked component instead of a blocked app?, and (just curiosity) why IE7 gets blocked while downloading but reverts automaticaly to unblocked when the download finishes?

maestroSun

#8

Presumably it is blocked because it’s using browseui.dll during the download, but not otherwise. I know it’s a required component, but the specifics of what/how/when are not accessible to my current internal knowledgebase (ie, I just don’t know…).

The only reason I could think is that Component alerts for the log is not enabled. If you open the log, right-click and select “Log events from,” see if Component Monitor is checked.

I retried the download, and was able to navigate to/from that same tab while the download was occurring. I did not have any problems, or popups, etc. Couldn’t even tell I was downloading something.

LM

#9

Once i allowed the component, everything works fine.

Log events from Component Monitor is checked, but the error (when the dll is blocked) in the log is Application blocked, no reference to the component.

I know Comodo changes the state from allowed to blocked for a process when there’s some problem (blocked, unknown, … ) with the dll/components, in what conditions does Comodo change the state to allowed from blocked for a process ? This is what i was seeing in IE7.

maestroSun

#10

I don’t know, that’s an odd one to me. Why don’t you file a ticket with Support, and see what they say. Be sure to provide a link to this thread for reference.

LM

#11

Controling activity monitor for blocked processes/aplications, there should be an easy way to unblock a certain process via context menu or dedicated command button.

Sandra