Scanning freezes when enable rootkit scanner is enabled [NBZ]

The bug/issue

  1. What you did: Did a Manual scan and later a scheduled scan with enable rootkit scanning enabled.
  2. What actually happened or you actually saw: After about 40 secs scanning froze with status 127.0.0.1, CPU 100%,after 2 mins scanning resumed and finished OK.
  3. What you expected to happen or see: Scanning start and finish without freezing
  4. How you tried to fix it & what happened: Cannot fix
  5. If its an application compatibility problem have you tried the application fixes here?: Don’t think so. No
  6. Details & exact version of any application (execpt CIS) involved with download link: N/A
  7. Whether you can make the problem happen again, and if so exact steps to make it happen: Yes just start scan with enable rootkit scanning enabled.
  8. Any other information (eg your guess regarding the cause, with reasons): Maybe Bug

Files appended. (Please zip unless screenshots).

  1. Screenshots illustrating the bug: N/A
  2. Screenshots of related CIS event logs and the Defense+ Active Processes List:N/A
  3. A CIS config report or file.N/A
  4. Crash or freeze dump file:N/A

Your set-up

  1. CIS version, AV database version & configuration used: 5.3.175888.1227
  2. a) Have you updated (without uninstall) from CIS 3 or 4: No
    b) if so, have you tried a clean reinstall (without losing settings - if not please do)?:
  3. a) Have you imported a config from a previous version of CIS: No
    b) if so, have U tried a standard config (without losing settings - if not please do)?:
  4. Have you made any other major changes to the default config? (eg ticked ‘block all unknown requests’, other egs here.): Don’t think so, only enable rootkill scanning.
  5. Defense+, Sandbox, Firewall & AV security levels: D+=safe mode , Sandbox=enabled , Firewall= safe mode, AV = stateful
  6. OS version, service pack, number of bits, UAC setting, & account type: Windows XPproSP3 32 bit administrator
  7. Other security and utility software installed: Trusteer Rapport.
  8. Virtual machine used (Please do NOT use Virtual box): N/A

+1, windows xp sp3.

The scanner freez when the rootkit scanner is enabled. ( CFP.exe 100% cpu).

Thank you for your bug report in the required format.

Moved to verified.

Thank you

Dennis