Hi
I’m trying to run an application called “Iriver music manager” which places files on my old mp3 player,
although the file appears in the Trusted list and I also added it to the “Computer security policy” - trusted applications above the “all application” section
what can I do next?
thanks
[attachment deleted by admin]
What you are seeing is the self protection of CIS at work. It won’t allow memory access by, even, Trusted Applications.
When Iriver music manager is functioning like it should just leave it as is.
thank you Eric but I dont understand what do you mean? the program is safe and it has no maliciousness about it,
so how do I let comodo allow me to use it?
also I have failed to mention that I was able to run it once before for a single time a week ago without hindrance but this week comodo crashes it,
oh and also I cant try to re-install it because comodo doesnt allow me to even use the install file although again its a trusted one etc…
The self protection you are witnessing is a normal function of CIS. Most appications are not effected when not being able to access CIS files in memory.
Even when a program is not malicious in its self there is always a small change it could get hijacked by a malicious program. Hence why CIS protects its self vigorously.
also I have failed to mention that I was able to run it once before for a single time a week ago without hindrance but this week comodo crashes it, oh and also I cant try to re-install it because comodo doesnt allow me to even use the install file although again its a trusted one etc...Thank you for the additional information.
Does any of the workarounds in App. is not working correctly, but does not seem to be s/boxed. What to do? [v5] bring a solution here?
I do need some extra information though. Did anything change in your system before Iriver started to crash? Did you update to CIS v5.5 shortly before the crashing started?
Can you post a screenshot of the D+ logs (View Defense + Events) of around the time you are starting the installer?
In the meanwhile try adding the installer to the Exclusions of “Detect Shellcode injections (i.e. Buffer overflow protection)” and see if that helps to start the installer.
Does any of the workarounds in App. is not working correctly, but does not seem to be s/boxed. What to do? [v5] bring a solution here?
no… 
I do need some extra information though. Did anything change in your system before Iriver started to crash? Did you update to CIS v5.5 shortly before the crashing started?
I only installed this iriver thingy after I already had 5.5
In the meanwhile try adding the installer to the Exclusions of “Detect Shellcode injections (i.e. Buffer overflow protection)” and see if that helps to start the installer.
did that and rebooted no go
I want to add though that I appreciate this Comodo software so much and its paranoid behavior
I prefer not to use that IRiver apllication if it means shutting down Comodo
yes maybe i can still make it work as i mentioned it worked a week ago for one time only
which was enough for me to put some radio shows on my mp3
[attachment deleted by admin]
Have you tried giving it the Installer or Updater predefined security policy?
yes tried that already without avail
anything left for me to try?
When you tried to install Iriver Music Management, did you enable in Defense+ Settings > Sandbox settings :
If the answer is yes and that nevertheless you are unable to install the application, the you could try :
Disable Defense+ and Sandbox, install Iriver Music Manager, set Defense+ in training mode, run Iriver, reset Defense+ to your usual security level as well as the Sandbox and run again Iriver to see if this time it is accepted.
once disabled I was able to run the installer which now worked,
afterwards I switched on the application itself, worked this time as well, switched to training mode
didn’t get any questions from comodo of how to train it, so went back to my usual safe mode
right now im using the application
update:
finished transferring files to my mp3 player closed the application windows gave an error
of “Iriver music manager stopped working” i.e. crushed
now the application crushes when it starts
but maybe although its cumbersome I’ll follow the above procedure from scratch each time i need to use this application, disable defense +, run installer, run application etc…
any other advice?
have you tried running the application while defense + is in training mode?
it will auto create rules for the application and save them so when you put defense + back into safe mode it will have those rules and should work without problems
tried just now: the installer - I couldnt start at all at training mode
I disabled it and switched to training mode as the installer was already working
then while still on training mode, switched on the application, it worked, exited from the application,
no problem yet, great!
tried to launch the application again, now it crushes as usual, it seems i have to run the installer each time I want to use this little software
and then it runs for once before it crushes, and in order to run the installer i will have to temporarily disable defense + which I dont like doing
Which version of the software are you running? I downloaded the latest version (3.21) from the support website and other than the initial alert that the installer was unrecognized, (Cloud scanner reported scanned online and found safe) I haven’t had any issues running the program.
I don’t happen to own one of their media players to try a transfer with, but the program itself seems to operate just fine. You also mentioned that Comodo was somehow blocking your attempts to reinstall. I’ve also had no troubles with this. ???
I’m running Win XP Pro, SP3. What OS are you running? The application is quite old, (2007) so if you are running Windows 7 or Vista, that may be part of the problem.
CIS is set to the Internet Security Configuration, automatic sandbox enabled, firewall and D+ set to Safe Mode, and the AV is set to Stateful. More or less the default CIS configuration.
So without being able to fully test this, (transfer to media player) I’m out of ideas.
thank you so very much for trying it for yourself, yes I agree, the problem must be related to the incompatibility with the Operating System Windows 7… I also use the 3.21 Iriver version, so I suppose since Iriver didnt provide a newer version of their software I will have to manage with the current one re-installing it each time I want to use it ,
but in any case it seems the problem has nothing to do with the Comodo software so I’ll have to try another forum now…
thank you all for offering help and advice and for the great Comodo software you developed
What is happening is that when you start the program from the installer it has the same rights as the installer: unlimited access. The second time you start Iriver after closing it it starts with lesser rights.
One would expect that if Iriver runs with Installer/Updater policy, as you tried, that it would work. However we forgot one thing. When making a custom policy for an application, like in your case, the rule will get placed somewhere underneath the All Applications rule. If the rule for Iriver is in that place drag and drop it to a place somewhere above the All Applications rule. Then it will follow the set Install/Updater policy. (When an application is underneath the All Applications rule it will follow the rule set by the Applications rule; it is subordinate to that rule)
If that does not help try running Iriver in Windows XP compatibility mode.
yes its already above the “all applications”…
XP compatibility mode didnt help much either
but I read on other forms that an entire windows XP virtualization
help this software to run smooth…
please dont waste any of your valuable time anymore on this subject, unless there is something important in here at this that might help in some way to improve Comodo?