Unrecognized files list gets cleared [NBZ]

The bug/issue

  1. What you did: Opened “unrecognized files” list.
  2. What actually happened or you actually saw: Empty list area with text “There are no items to show”, however sumary tab shows “X unrecognized files observed” (X is a number). Those files are still treated as unrecognized by CIS - only whole list is empty in GUI.
  3. What you expected to happen or see: List filled with my unrecognized file entries.
  4. How you tried to fix it & what happened:

Unable to fix. However I found out that when I add previously unrecognized files (those vanished from list, but still recognized by CIS as “unrecognized”) to trusted list (in this moment counter on “summary” tab decreases), then remove them from trusted list and execute them, than D+/SB raises alert and adds them again to unrecognized list as it should, and they show up in this list (at least during current session).

  1. If its an application compatibility problem have you tried the application fixes here?: n/a
  2. Details (exact version) of any application involved with download link: n/a
  3. Whether you can make the problem happen again, and if so exact steps to make it happen:

[b]I had a chance to suffer from this bug two times.

  1. Let D+/SB add some files to unrecognized files list.

  2. Let the time pass.

  3. On some occasion whole list will be empty.[/b]

  4. Any other information (eg your guess regarding the cause, with reasons):

This bug does not happen during current session (in this where files were added to list), but on some later OS restart. Unfortunately I have no idea what triggers this bug. I tried to compare the contents of exported configs before and after this happened, but I was unable to find those entries in any config (where are they saved? reg?).

Files appended. (Please zip unless screenshots).

  1. Screenshots illustrating the bug: http://img207.imageshack.us/img207/8646/bugpsj.jpg
  2. Screenshots of related CIS event logs and the Defense+ Active Processes List:
  3. A CIS config report or file.
  4. Crash or freeze dump file:

Your set-up

  1. CIS version, AV database version & configuration used: 5.0.162636.1135 / 7289
  2. a) Have you updated (without uninstall) from CIS 3 or 4: no
    b) if so, have you tried a clean reinstall (without losing settings - if not please do)?:
  3. a) Have you imported a config from a previous version of CIS: not now, but long ago from 4.x
    b) if so, have U tried a standard config (without losing settings - if not please do)?:
  4. Have you made any other major changes to the default config? (eg ticked ‘block all unknown requests’, other egs here.): yes, many
  5. Defense+, Sandbox, Firewall & AV security levels: D+= paranoid, Sandbox= enabled, Firewall = custom, AV = stateful
  6. OS version, service pack, number of bits, UAC setting, & account type: XP SP2
  7. Other security and utility software installed: none
  8. Virtual machine used (Please do NOT use Virtual box): none

Thank you for your bug report in the required format.

Moved to verified.

Thank you

Dennis

This bug report is still valid for 5.3.181415.1237. For a long time I thought it was fixed, but recently I got crash due to system instability and after some time I checked the “unrecognized files” list and it was wiped (summary panel showed counter for 6 files). I’m not 100% sure if bug is connected with system crash, but that were the last major events.