Running CIS 5.4 and still going.

Hi guys.

It has been a while since I participated here in the Forums. I have been running Cfw 3.14 because I had troubles with CIS 4 and 5. Could not make them work in my system.

https://forums.comodo.com/install-setup-configuration-help-cis/cis-5-and-is-not-spy-sweeper-xp-spk-3-hang-at-boot-time-t62544.0.html

https://forums.comodo.com/defense-sandbox-help-cis/help-materials-feedback-topic-t53270.0.html;msg449471#msg449471

https://forums.comodo.com/defense-sandbox-help-cis/bye-cis-5-i-give-up-back-to-cis-41-t63981.0.html

Well, I has been running CIS 5.4, firewall and D+ in Proactive Security configuration and Sandbox enable for a month now ;D.

When I reinstalled my OS, the first thing I did was to install CIS and then all my programs. Now I have hundreds of .dll files in " Trusted Files " I did not have before.

I had trouble with my sound program and drivers ( Creative and SigmaTel). I also had trouble with my HP printer. CIS always wanted to sandbox something and D+ alerts were constant. I think there were too many files to process for the alerts to come out and CIS would freeze and therefore my PC would frezee when booting. IMHO, but what do I know? I am just glad it is working.

Thank you all who tried to help me. Specially mouse1, HeffeD, EricJH, Ronny, Languy99,and sAyer.

That is new when comparing to v3.14. These dll’s are not digitally signed themselves but came from an installer that was on the Trusted Software Vendor List. For example files from the ATI/AMD Catalyst video driver suite.

I had trouble with my sound program and drivers ( Creative and SigmaTel).
I also had trouble with my HP printer. CIS always wanted to sandbox something and D+ alerts were constant. I think there were too many files to process for the alerts to come out and CIS would freeze and therefore my PC would frezee when booting. IMHO, but what do I know? I am just glad it is working.

Thank you all who tried to help me. Specially mouse1, HeffeD, EricJH, Ronny, Languy99,and sAyer.

Can you please separate the problems in different topics and describe them in more detail so we can analyse them and advice about it?

Hi EricJH

That is what I figured, a bunch of files not digitally signed that CIS wanted to sandbox, but they were so many that CIS would freeze up at boot time.

I do not have a problem right now and all the troubleshooting was done in the topics I mentioned above. You even made me run Autorun in one of them thinking that may be I had something left from an old Comodo version.

However to make a long story short, I would say that CIS 4 could not remember my trusted files and was sandboxing and alerting me of the same files again and again. Files in question:

ctmbha.dll
Clclean.000
rundll.exe
CtSysVol.exe
nvcpl.dll
DLActrlw.exe
stsystra.exe
mididef.exe
updreg.exe
hpqste08.exe
hpqtra08.exe
ctfmon.exe

Those are the main files that gave me trouble. I also had other files from my Logitech web cam.

Most of these programs are the paid version that my 4 years old Dell came with and to upgrade those Programs, I have to buy them. Not an easy task when living in a country where Dollars are hard to come by and the economy is on the ground.

When I installed CIS 5.1, I believe, my comp started to freeze at boot time, most of it when cold booting. I thought it was Spy Sweeper but it was not. Even though I had enough juice in my system and about 40 programs stating up, including Microsoft´s , CIS could not handle the unknown files.

Now I stoped like half a dozen programs from starting at boot time and installed my sound, printer and web cam after CIS and everything seems to fall into place, cross my fingers and toes too.

When CIS chokes try the suggestions in App. is not working correctly, but does not seem to be s/boxed. What to do? [v5] and see if that brings a solution.

For paid programs there are nowadays worthy freeware alternatives. Just ask for advice if people know good freeware alternatives for well known programs.

I am looking at your signature and see that you have at the same time several on access scanners running. Winpatrol has HIPS functionality that may possibly interfere. Consider disabling it as D+ is superior to it. Defender and Avast is having two on access anti malware programs that could cause problems. Consider disabling Defender.

EricJH.

Thank you for the tips. I will read the topic you posted, but I think I read it back in Oct or Nov when troubleshooting CIS 5.

I understand that D+ is superior to Win Patrol, but Win Patrol is HIDS (detection) and not HIPS (prevencion). I have had a few alerts from Win Patrol that CIS has missed. Mind you, not for malware but for changes in my files or programs by another programs, and to tell you the truth, I have not detected any comflict between them.

About Avast and WD. I had Spy Sweeper before and I ran Avast and SS since both of them were version 3 and/or 4 without problems. Now since my SS licence expired, I am trying out WD recomended to me by Joe53, ky331, and Bugbatter, all of them well known members in DeLL community security forums and other security forums around the web. Also it is my understanding that it is needed; One AV (eventhough most AV now a days come with antytroyans and rootkits detection), one antimalware ( a lot of people have an AV and MBAM or SAS running), one firewall ( XP is not good, no outboud protection, but Win 7 Firewall and a good NAT router could be enough), and if your PC can handle it, hosts prevention and OpenDNS to be sure.

I have not encountered any slow processes due to file processing by Avast and WD and if everything continues like this I may keep it until I am able to get SS again. You see I have run Avast and SS since Win 95 back then circa 1998 and they have protected my PCs all these years. It is like COMODO. I like it and eventhough I have used it for a couple of years I got so well with V. 3 that 4 got me down, but I insisted on v. 5 and I will run it untill the new version comes out and I hope it will be much better than 5.

Thank again EricJH.