Windows/Winevent hook and Agnitum Outpost FW Pro 7.0

* CPU (32 bit or 64 bit)

32 bits
* Operating System information (including Service Pack Version)
Windows XP Pro SP3 / 5.1.2600 with all recent updates
* Actively-running security and utility applications (Optional if you post a Comodo Firewall Pro Configuration Report)
-CIS v 4.1.149672.916 (AV only)
-Agnitum Outpost Firewall Pro 7.0 (3371.514.1232)
* Specific symptoms of the bug, and steps you can take to reproduce it (step by step).
There is an option in Agnitum Outpost FW pro 7.0 called “Game mode”. It’s used to disable notifies about attacks when you are running full windowed app. When Windows/Winevent hook in Comodo D+ is enabled, after closing full windowed app outpost FW is remaining in game mode, but should return to previous mode.
With previous version of Outpost (6.7.3 3063.452.726.367) all worked fine.
* Specific steps you have taken to try to resolve it.
After disabling Windows/Winevent hook in Comodo D+ and rebooting all works fine.
* Brief description of your Defense+ and Firewall+ mode (Custom, Train with safe) plus mention if you modified any setting in ADVANCED section of D+ and F+ (Optional if you post a Comodo Firewall Pro Configuration Report)
D+ is running in “Safe PC” mode, autocreation of rules for safe apps is enabled
* Report if you are using an Administrator account Or a Limited User account. Vista users please Report if you have UAC Disabled or Enabled (Optional if you post a Comodo Firewall Pro Configuration Report)
Administrator account

your problem is that you are running two HIPS programs only run one. You can’t have D+ enabled and Outpost Pro, it does not work.

But proactive defense in my Outpost pro is disabled. :-
I’m always disabling it, because of using Comodo D+.
All worked fine with Outpost pro 2009 and all works fine with Outpost pro 7.0 if I turn off Windows/Winevent hook in D+ or fullscreen apps detection in Outpost pro.

you can’t really ever disable a HIPS application because there are drivers that are always running and hooks in the kernel. The only true way to disable a hips application is to uninstall it. So if you are not using the hips in outpost or the firewall why do you have it?