COMODO DiskShield 1.0.0.7 BETA Released!

[Coolio10]

Watch out returnil! Not really but its still nice to see what comodo can bring.

http://forums.comodo.com/comodo_diskshield/comodo_diskshield_1007_beta_released-t23667.0.html
-{ Quote: "Hi Guys,

We would like to announce that COMODO DiskShield 1.0.0.7 BETA is available for download and testing.

What is COMODO DiskShield?
----------------------------------------

COMODO DiskShield is a disk virtualization software which could protect your computer configuration instantly by turning the disks into virtual disks. With CDS, all the changes made to a disk, such as copying, deleting files/folders, formatting the disk etc. are going to be temporary. All the changes will be eradicated when you restart the PC." }-

[Huupi]

Looks very similar to Returnil and the likes,which partitions/whole disk/ext.disks are protected ? Great idea to implement saving at reboot with the thirth beta release !

[ErikAlbert]

Only one HDD ? I have two internal HDD's.

[Hairy Coo]

From the Comodo Forum;

-{ Quote: "Is there a way to make changes persist over a reboot?" }-

-{ Quote: "Not in this version but with the 3rd BETA, there will be such improvements (by the Administrator)" }-.

Could get interesting-lets hope its kept light and simple!

edit-Huupi just said the same thing!

[QQ2595]

I hope they remove the beta on the title. I think it should be alpha.;D

Two BSOD in 3 mins when XP SP2 starts.

More and more Error messages came out when I try to enable the protection.

http://www.wilderssecurity.com/attachment.php?attachmentid=200481&stc=1&d=1212718446

[ErikAlbert]

-{ Quote: "I hope they remove the beta on the title. I think it should be alpha.;D

Two BSOD in 3 mins when XP SP2 starts.

More and more Error messages came out when I try to enable the protection.
" }-
LOL. There isn't much to test, if it starts like this.

[umesh_comodo]

Hi QQ2595,
Can you please help us with crash-dump and would be nice if you could enlist security software you have installed in your system.

Thanks for giving it a try.

-umesh

[yankinNcrankin]

Liking it so far, got it running side by side with returnil.

[QQ2595]

-{ Quote: "Hi QQ2595,
Can you please help us with crash-dump and would be nice if you could enlist security software you have installed in your system.

Thanks for giving it a try.

-umesh" }-

I tested it in my VMWare 5.x. When BSOD, I just restore it to an old snapshot. So I did not keep the dump file.

I have A-Squared and EQS installed in that XP Sp2. Now, I can run it, but suddenly has the same error message: ....FormatEX...

By the way, I am quite sad when it told me it can only run in admin account.

And it does slow down the system no matter the protection is enabled or not. I just waited for 2 mins to login my account and see the desktop.:'(

[QQ2595]

-{ Quote: "Liking it so far, got it running side by side with returnil." }-

I tried it too.

It seems the Diskshield can not protect the VP that created by Returnil. ;D

I try to mount/dismount the VP when DiskShield protect the C:\, but get BSOD suddenly.

[Defenestration]

Second software of this type to support x64. :)

[aigle]

Anyone knows if it modifies MBR? Can I try it with Eaz-Fix? Just want to play a bit.

Thanks

[3xist]

Still a few betas to go.

Anyway, It's working nice here on XP SP3, But...Still room for improvement ;)

Josh

[farmerlee]

Works fine with eaz-fix on my system. Gave it a bit of a test and it seems to do its job well.

[aigle]

Thanks for the info. Someone must attack it with :

Killdisk virus
MBR tool
Robodog trojan

May be QQ2595 can do it.

[3xist]

-{ Quote: "
Thanks for the info. Someone must attack it with :
Robodog trojan
" }-

Robodog trojan bypasses COMODO DiskShield.

But as the betas go along all this stuff will be fixed.

Josh

[Perman]

-{ Quote: "Robodog trojan bypasses COMODO DiskShield.

" }-

Hi,

There are several reports that indicate such problems on Chinese forums. ???

EDIT: Some one just released test results of Comodo diskshield vs four other low level attackers.

Diskshield fails all four miserably. My little advice: to refrain from using it until these vital concerns have been properly addressed. It is not uncommon for Comodo's beta stuff to have such problems. I have had unforgiven/unforgettable encounter with its memory firewall(formerly called memory guard) beta sometime ago.. Of course, its present state is perfectly suited for beta testers.

I can not disclose the test results details nor the links to these attachers(files) due to Wilders' terms.

[Coolio10]

-{ Quote: "Thanks for the info. Someone must attack it with :

Killdisk virus
MBR tool
Robodog trojan

May be QQ2595 can do it." }-
egemen said this will be fixed in later releases.

[aigle]

Prosuct seems great. Tried it in a fresh snapshot of Eaz-Fix. No problems. On my system this beta is very stable though it,s a fresh snapshot without any security software. I works great. On both FAT32 n NTFS. Memory usage also small. I did not feel any slow down. It does use a cacahe file like windows steady state.

U can shadow all partitions unlike Returnil. I hope it,s development will be good and bugs will be fixed.

As far as low level disk access is concerned that is a bit common weakness of many such software- they fix one and onther one is discovered. I will not trust any shadow software for such a level of protection. It,s OK for all other malware though IMO.

As I read they will add to an option to continue shadow mode after reboot like SU and Windows Steady State, that will be nice.

I have played with it only for a short time, can,t say how it will behave on long term bais.

[Perman]

-{ Quote: "

As far as low level disk access is concerned that is a bit common weakness of many such software- they fix one and onther one is discovered. ." }-

Yes, it is so true. That is why I currently use Shadow Defender, rather than DeepFreeze.

SD seems to address these concerns more responsibly than others.

[aigle]

Yes more but still not all such concerns.

[QQ2595]

-{ Quote: "Yes, it is so true. That is why I currently use Shadow Defender, rather than DeepFreeze.

SD seems to address these concerns more responsibly than others." }-

Whcih low level access tool did you test? ;D

[ErikAlbert]

-{ Quote: "
As far as low level disk access is concerned that is a bit common weakness of many such software- they fix one and onther one is discovered. I will not trust any shadow software for such a level of protection. It,s OK for all other malware though IMO." }-
I'm not worried about this. All malware, which attack such softwares, are executables (killdisk, robodog, robotdog, etc.). AE will kill them.

So far I'm not impressed by Comodo DiskShield, it looks like another ShadowDefender under a different name and like all the others, it's not able to remember any system state. Can it handle reboot-softwares ?

[Perman]

-{ Quote: "Whcih low level access tool did you test? ;D" }-
Hi,
Sorry, I am just a vivid reader, rather than a keen tester---frankly, heavily handicapped in this regard.

if you read Chinese, Kafan is the source. Have a nice one.

[QQ2595]

-{ Quote: "Hi,
Sorry, I am just a vivid reader, rather than a keen tester---frankly, heavily handicapped in this regard.

if you read Chinese, Kafan is the source. Have a nice one." }-

;D I never trust lowclass forums. just try SectorEditor, bypass it.

[aigle]

-{ Quote: "So far I'm not impressed by Comodo DiskShield, it looks like another ShadowDefender under a different name and like all the others, it's not able to remember any system state. Can it handle reboot-softwares ?" }-
http://www.wilderssecurity.com/showpost.php?p=1256133&postcount=4

[Perman]

-{ Quote: ";D I never trust lowclass forums.." }-
Hi,

I do not believe that there are too many low class forums in existence. Either you like its style or hate it.

If Comodo wise guys can enlist some Chinese reading staff, they may be able to improve product quality, not needing to beg for dump files from everywhere.

[QQ2595]

-{ Quote: "Hi,

I do not believe that there are too many low class forums in existence. Either you like its style or hate it.

If Comodo wise guys can enlist some Chinese reading staff, they may be able to improve product quality, not needing to beg for dump files from everywhere." }-

China has more than 200 kinds of ISR, do you think Comodo has any advantage to promote CDS there?;D

[Perman]

-{ Quote: "China has more than 200 kinds of ISR, do you think Comodo has any advantage to promote CDS there?;D" }-
Hi,

If Comodo guys really want to seek any helpful info, they do know how and where to make missions accomplished.

Old saying: if there is a will, then there must have a way.

[aigle]

-{ Quote: "China has more than 200 kinds of ISR, do you think Comodo has any advantage to promote CDS there?;D" }-
That,s a lot. Can i ask what are the most malware-resistant ISR in your opinion?

Thanks

[raakii]

http://forums.comodo.com/comodo_diskshield/comodo_diskshield_105153935_beta_released-t27704.0.html