Comodo CIS v8 and above: These versions add an ADS Stream named $CmdTcID with a size of 64 bytes to almost every file on NTFS formatted partitions. CIS v7 and older versions are not affected.
It's down to the way the new Auto Sandbox works. *cmdGuard* establishes a mount point filter (file system filter) on any NTFS drives that intercepts file i/o and restricts changes to the ADS.
I've been...
↧