COMODO Internet Security 3.9.76924.507 Released!

[3xist]

COMODO Internet Security 3.9.76924.507 Released! (http://forums.comodo.com/feedbackcommentsannouncementsnews_cis/comodo_internet_security_3976924507_released-t39202.0.html)-{ Quote: "Hi Guys,

We are very excited to announce that COMODO Internet Security 3.9.76924.507 has just been released! This release addresses many bugs and brings some enhancements.

Enhancements like: Faster realtime virus scanning, fewer number of defense+ popups, BOClean integration.


What's New in 3.9.76924.507?

THANKS! COMODO would like to thank the BETA testers and the translators, whose invaluable efforts made this release possible.
NEW! Multilingual Support: CIS now supports other languages
NEW! Stateful File Inspection for Realtime Virus Scanner
NEW! Integrated In Memory Virus Scanner(i.e. Integrated BOClean)
NEW! LivePCSupport is provided as a 30 Day Trial
IMPROVED! Default popup layout changed to the basic layout in order to encourage the use of it
IMPROVED! Stronger Defense+ protection: New types of defenses are added e.g. Clipboard logging, Keyboard input blocking etc.
IMPROVED! Keyboard and Screen access alerts are improved and number of false positives are reduced
IMPROVED! Stronger Defense+ protection while the Windows is Booting/Shutting down
IMPROVED! Stronger Default Firewall policy in order to better hide from attackers(Thanks to feedback from our forum moderator Ronny)
IMPROVED! Configuration Management window is changed
IMPROVED! Submission functionality for the Quarantined items added
FIXED! Avntivirus heuristics does not detect some files properly
FIXED! Defense+ BO protection incompatible with Spy Swepper virus scanner.
FIXED! CIS does not validate digital certificates properly
FIXED! CIS blocks some application from being executed
FIXED! BSOD while CIS is being uninstalled
FIXED! CIS does not detect some types of shellcodes upon a BO attack
FIXED! CIS erroneously reports buffer overflow attacks for some applications under certain circumstances
FIXED! CIS does not scan specially created RAR files properly (http://www.securityfocus.com/bid/34737, first reported by Thierry Zoller)
FIXED! CIS creates duplicate file name entries for some protected file access alerts
FIXED! Right click scanner reports "Antivirus Engine is not initialized"
FIXED! Threatcast registration does not work properly(This bug caused some users unable to see TC statistics)
FIXED! CIS occasionally crashes while submitting the files
FIXED! CIS firewall drivers sometimes cannot be restored by the diagnostics utility
FIXED! CIS did not scan NTFS streams during manual scanning
FIXED! Windows Logon Screen is shown when CIS is installed under certain circumstances(Windows created a password bug)
FIXED! CIS causes system performance to degrade after prolonged time of network data transfer" }-

[Eice]

Inefficient and bloated signature strings ftw. Let's see if Comodo can set the record of being the first antivirus whose installer grows larger than 100MB.

[danny9]

Thanks for the post 3xist! :)
Downloading now.

[m00nbl00d]

-{ Quote: "

[...]

...fewer number of defense+ popups...

[...]

" }-

What does that mean? Recognizability of more known and digitally signed applications, or simply reducing even more the advanced settings?

I always found amusing the fewer Defense+ alerts in COMODO propaganda, and I always noticed practically the same amount of pop-ups. Unless, of course, reduced advanced protection settings.

[Rain_Train]

Thanks for the update, Josh. Does this version include CIMA heuristics? I seem to recall you mentioning that before v4 comes out, another version will be released. Comments, please?

-{ Quote: "Let's see if Comodo can set the record of being the first antivirus whose installer grows larger than 100MB." }-
Nice try :P . G Data Internet Security is already over 100 MB (139 MB (http://translate.google.com/translate?hl=en&sl=de&u=http://www.gdata.de/&ei=ODILSr7uBKGCtgPT2aTlAg&sa=X&oi=translate&resnum=1&ct=result&prev=/search%3Fq%3DGData%2Binternet%2Bsecurity%26hl%3Den%26client%3Dfirefox-a%26rls%3Dorg.mozilla:en-US:official%26hs%3DWOg) without BootCD capability, to be exact).

[Eice]

-{ Quote: "Nice try :P . G Data Internet Security is already over 100 MB (139 MB (http://translate.google.com/translate?hl=en&sl=de&u=http://www.gdata.de/&ei=ODILSr7uBKGCtgPT2aTlAg&sa=X&oi=translate&resnum=1&ct=result&prev=/search%3Fq%3DGData%2Binternet%2Bsecurity%26hl%3Den%26client%3Dfirefox-a%26rls%3Dorg.mozilla:en-US:official%26hs%3DWOg) without BootCD capability, to be exact)." }-
Whoops. I stand corrected.

Okay, first single-engine suite then. ;D

[rdsu]

The installer couldn't be smaller?

[3xist]

Hi Guys.

Yes the signature database size is huge, This will be addressed in the next version which will have Family Signatures to detect many malware. A new format will be also introduced, for family signatures AND to reduce size and also memory consumption via DB updates.

This will all be handled then. BTW, Reduced pop ups: One click allow, One click block. And you have an AV installed to yes Comodo can skip a few checks, Default internet security configuration is there to PREVENT permanent infection, if you install only Firewall, then that will be applied, etc. In any case, CIS is still strong. AV is a massive difference.

Cheers,
Josh

[rdsu]

Glad to hear that...

Looking for v4.0! ;)

[Fuzzfas]

Questions:

1) Can you opt out from installing BOClean during installation?

2) The reduced pop ups are because the AV is used as a means of verification? So if someone installs only the firewall (without Threatcast), does it change anything?


P.S. : I haven't tried this version, but IMHO, the 3.5.x.439 (?) , which was the one before the introduction of TC was the most stable version of all. Nowdays they add more and more and then you see the changelogs full of "fixed!".

[bollity]

72 Mb ??? go away mr comodo i will not download or install this.

[Pedro]

Family Signatures? Kids included?
Seriously though, any screenshots? I'm mainly interested in the main gui.

[Fuzzfas]

-{ Quote: "This is from my understanding:
1. You cannot opt out of installing BOClean. It is fully integrated with the Antivirus component. I can't see a good reason for opting out of it anyway? " }-

Ah, so if i don't install the AV, bye bye BoClean too. Good. The only time i had tried Boclean, about 1 year ago, it was pretty CPU hungry. Comodo is becoming more and more a "suite" with many components and i am not a "suite" guy. I just want the firewall.

-{ Quote: "

2. The reduced pop-ups are because of the increased white-listing database. It has nothing to do with the Antivirus component. 3xist might have to confirm this though. " }-

Ah, that would be nice.

-{ Quote: "
EDIT: for me personally, version 3.9 has been rock solid and stable since the first beta!" }-

Thanks. I will wait and see what kind of bug reports will appear in the Comodo forum. I wouldn't mind having the firewall with less pop ups.

[Fuzzfas]

-{ Quote: "Family Signatures? Kids included?
Seriously though, any screenshots? I'm mainly interested in the main gui." }-

LOL! They mean they 'll make "generic" signatures. One signature will be able to catch more malware variants.

[Pedro]

I know i know :)

[demoneye]

was first to thanks comodo team for another no1 inthe world FREE security suit !

if ppl doesnt like comodo or talk about bad things , they better stop using anf firewalls at all , or stop reading this forum.

cheers ;D

[rdsu]

-{ Quote: "One reason the installer is so large is because Comodo has a heck of a lot of features." }-
No. is not.

[rdsu]

It have this size because of AV signatures file...

Check your COMODO installation folder...

[Peter2150]

I can't say anything either way about the product as I don't use it. But I gotta ask. What the heck is the significance of the build number. 3.9.76924.507 It's almost like pi taken out to 20 digits. Can someone explain?

Pete

[Searching_ _ _]

It's a representation of a large prime number. :)

[demoneye]

-{ Quote: "I can't say anything either way about the product as I don't use it. But I gotta ask. What the heck is the significance of the build number. 3.9.76924.507 It's almost like pi taken out to 20 digits. Can someone explain?

Pete" }-

its good question , this is not the only product using suck a long digit , i saw it also in eaz fix and rollback RX ;)

[Makav3l1]

New version looks good. Nice updates to the AV. Still using avast! until I see some comparative testing including Comodo AV. I haven't been frequenting the forums as much lately, have any legitimate tests been done yet?

[Legendkiller]

well the release seems nice,but i can't understand the "big installation file" thing here...
i hope ppl find better pts to avoid comodo,meanwhile breaking news bitdefender's latest beta is weighing arounf 115mb....

[Makav3l1]

-{ Quote: "I don't think there're many reliable tests for Comodo AV yet.

I'd suggest that you run Comodo AV in real-time (along with the excellent Firewall and classical HIPS) and use Avast for on-demand scanning only or similar.

EDIT: I see that you use Sandboxie, so that above suggestion is now a recommendation haha!" }-

If there aren't any reliable tests for Comodo AV, why would you recommend running it instead of avast? What does my AV selection have to do with using Sandboxie?

[RejZoR]

-{ Quote: "I can't say anything either way about the product as I don't use it. But I gotta ask. What the heck is the significance of the build number. 3.9.76924.507 It's almost like pi taken out to 20 digits. Can someone explain?

Pete" }-

Heh, i mentioned that but no one has ever taken me seriously there.
No one uses such long version numbers because it's just ridiculous.
Major number, minor number, build number. 3 separate numbers where build number should never exceed 4 digits (i'd prefer 3 but avast! now uses 4 and it's still ok).

Like:
3.9.4507

3 is major version number, 9 is a minor version number, 4507 is build number.
This is almost standard numbering but they obviously prefer useless 10 digit noodle i can't stand because it's just useless. My example looks by far better, easier to remember and understand and still offers plenty of numbers before you have to change minor version number. But oh well, Comodo ppl always "know" it better than some of us do... Such "minor" things are never important to them and they never seem to care about details.

[3xist]

Hey Guys.

I quickly skimmed through the thread, So I'll try and answer everything best I can.

Version number, Why is it so big? I do not have the answer to this question, But I can always ask a developer. :)

Can you install BOClean stand a lone in CIS? No, you can't. It is a totally integrated memory scanner that works with CAV. Gets same updates as BOClean off course too. PLEASE be aware though... The CURRENT stand a lone boclean will have last update on 26th May, 2009 the product has already been discontinued, but signature updates will continue until the date.

Comodo skips a few Advanced checks (Defense+) Settings! why?: I will explain this in more detail:

Why keylogger for example is NOT being monitored by Defense+?

Think of a keylogger not caught by the AV:

All keyloggers try to install themselves permanently. If they try to do so, they will be prevented by CIS.

Assume keylogger is executed and by chance at the same time, there is banking information entered in a web site, the firewall will catch it anyway.

Here the point is, permanent damage needs to be prevented. And all the checkpoints are kept to prevent the permanent damage.

Sure, But what about the others such as DNS/RPC Client, Window Messages, Image Execution Control, Monitor, and Disk?

All the viruses, unlike Comodo leak tests, try to make themselves permanent first. No exceptions. Thats why CIS will catch these immediately. There may ofc ourse be exceptions but Comodo does assume these are rare.

All of those checks(DNS/RPC Client, Window Messages, Image Execution Control) are disabled because of the fact that all viruses attempt to make themselves permanent first and hence will be caught. So COMODO Internet Security policy is a balanced policy with acceptable security and acceptable user experience. It is there to complement the AV.

Let's look at Proactive Security policy: This policy REPLACE any AV for an experienced user. Until Comodo reduce the popups, they will have to keep this balance for average users.

This is only detailed information when you install full CIS. You install Just Firewall, Then Comodo Firewall Policy will be applied, and so on... CIS is still strong either ways - That's why there is 4 default configurations. IF anyone is aware that a REAL threat in the wild can exploit CIS's default configuration (Eg Internet Security with some checks not ticked), And does permanent damage, please post this at the forums) - But don't be confused between Inconviences and threats. Internet Security Configuration focuses on threats, NOT inconviences such as locking the mouse or playing a JOKE you can easily get rid of when you reboot. It's not simply "lets uncheck some default D+ Settings and reduce pop ups!" - So please read all the above I wrote. It is acceptable security and user experience, and BOTH is taken into consideration, well should be, for any software vendor...

I re irriate: Please post at Comodo Forums if a threat does bypass the default configuration in CIS and causes permanent damage. Then Comodo can re evaluate this configuration for CIS.

P.S - Database size is a top priority right now. It will be taken care of.

Cheers,
Josh

[aigle]

-{ Quote: "Heh, i mentioned that but no one has ever taken me seriously there.
No one uses such long version numbers because it's just ridiculous.
Major number, minor number, build number. 3 separate numbers where build number should never exceed 4 digits (i'd prefer 3 but avast! now uses 4 and it's still ok).

Like:
3.9.4507

3 is major version number, 9 is a minor version number, 4507 is build number.
This is almost standard numbering but they obviously prefer useless 10 digit noodle i can't stand because it's just useless. My example looks by far better, easier to remember and understand and still offers plenty of numbers before you have to change minor version number. But oh well, Comodo ppl always "know" it better than some of us do... Such "minor" things are never important to them and they never seem to care about details." }-
I totally agree. :thumb:

[Fuzzfas]

-{ Quote: "I wouldn't go solely on observing what bugs appear on the forum. I'd recommend trying it yourself and see if you have problems. A lot of people seemed to have problems with the Beta version of 3.9, while I never had any problems.

The same concept goes with other programs. For example, the Avira forum is plagued by about three or more new threads per day about updating problems. But there are plenty of Wilders users here that have no problems whatsoever updating Avira." }-

True, true. I have downloaded the installer, sooner or later i will install it. But i 've been messing around with Vista in the last day and should take a brake from "experiments" for a while. ;D

-{ Quote: "Comodo skips a few Advanced checks (Defense+) Settings! why?: I will explain this in more detail:

Why keylogger for example is NOT being monitored by Defense+?" }-


Hi 3xist, thanks for the info. By "skip" you mean that not all options are ticked right? And as i understand this isn't an issue if you use only the AV...

Anyway, the way i see it, if you choose to use Comodo, you may as well use the AV too at this point. Because it lesses the pop up number and the work of D+. I think i will try the AV too. If cpu usage is low, i may leave it realtime and put Twister on demand.

[3xist]

-{ Quote: "True, true. I have downloaded the installer, sooner or later i will install it. But i 've been messing around with Vista in the last day and should take a brake from "experiments" for a while. ;D




Hi 3xist, thanks for the info. By "skip" you mean that not all options are ticked right? And as i understand this isn't an issue if you use only the AV...

Anyway, the way i see it, if you choose to use Comodo, you may as well use the AV too at this point. Because it lesses the pop up number and the work of D+. I think i will try the AV too. If cpu usage is low, i may leave it realtime and put Twister on demand." }-

Yes. AV as detection is a huge difference, Make Prevention more usable (Its always been prevention your first line of defense, detection second) - Which is how CIS works. AV Detects something (Either at file/download level or execution level (Memory Scanner), D+ does not annoy you about it. Making more pleasant usable experience...

Next version will see a great improvement in detection, With Family Signatures and off course less memory and database size. It's been said 1 signature can catch 23K malware (http://forums.comodo.com/feedbackcommentsannouncementsnews_cis/cav_update_for_fyi-t38784.0.html) - But action speaks louder then words so we will wait until that version comes, which is before v4...

Cheers,
Josh

[Fuzzfas]

Thanks Josh.

I hope they make it. It would be wonderful for freeware users to have such a suite. Let's hope that it will also remain low on cpu... If it does, it will become a very attractive offer for medium to expert users. (I still think that an average Joe who has trouble even to understand something like AVG free, would have ever more trouble understanding Comodo's options and alerts).

[3xist]

Np Fuzz. :)

COMODO is aiming CIS for both from the Computer Nerd, To your Mother! :) I also forgot to mention that next version will also have a new mode called Silent Mode (Or Smart Mode) Where certain requests can be automatically allowed or denied without ANY user input. This version hopefully (Again before v4.0 and with Family Signatures and reduced DB Size) Will also be usable on mothers PC's.

As you can see with v3.9, There are already less Alerts thanks to extended whitlist and trusted vendors, And the pop up lay out is now simply Allow or Block, And thats one click allow, one click block. So usability is going forward and going strong...

Cheers,
Josh

[Fuzzfas]

-{ Quote: "Np Fuzz. :)

COMODO is aiming CIS for both from the Computer Nerd, To your Mother! :) I also forgot to mention that next version will also have a new mode called Silent Mode (Or Smart Mode) Where certain requests can be automatically allowed or denied without ANY user input. This version hopefully (Again before v4.0 and with Family Signatures and reduced DB Size) Will also be usable on mothers PC's. " }-

Without user input? I hope it doesn't contact some online database and things like that.

-{ Quote: "
As you can see with v3.9, There are already less Alerts thanks to extended whitlist and trusted vendors, And the pop up lay out is now simply Allow or Block, And thats one click allow, one click block. So usability is going forward and going strong...

Cheers,
Josh" }-

I haven't installed 3.9 yet, so i didn't see that change. You mean there is no "treat this application" as installer/trusted... ? Does this stand for the firewall only version too (without AV)?

Hmm... I think i may try it sooner than i thought...

[3xist]

Default pop up layout is just Allow/Block...

You can click more options and have the original lay out (Treat As, Etc) But its encouraged to use the default for just one click allow/block. Yes its for Firewall without AV too.

No it wont connect to a online DB/Server. There will be strict rules to define what to auto allow, what to allow denny (Example: Malware trying to modify unserinit.exe, Can be auto dennied) - stuff like that can be auto blocked.

Cheers,
Josh

[Fuzzfas]

-{ Quote: "Default pop up layout is just Allow/Block...

You can click more options and have the original lay out (Treat As, Etc) But its encouraged to use the default for just one click allow/block. Yes its for Firewall without AV too.

No it wont connect to a online DB/Server. There will be strict rules to define what to auto allow, what to allow denny (Example: Malware trying to modify unserinit.exe, Can be auto dennied) - stuff like that can be auto blocked.

Cheers,
Josh" }-


Thanks Josh, i just tried it. I 've mixed feelings about the new "Allow". Although it can help, for me, it's a bit counterproductive. I do prefer such an approach for D+, but for the firewall, i have customized and high security, because i want to control more. And in the firewall i do prefer the "treat as outgoing only" or "blocked" etc.

I understand it's now better for the inexperienced user, but for me, it just means that i have more clicks to do what i want...

I am uncertain on whether to keep running it or go back to OA free. Oh well...

The auto-rules sound nice.

[raven211]

-{ Quote: "Np Fuzz. :)

COMODO is aiming CIS for both from the Computer Nerd, To your Mother! :) I also forgot to mention that next version will also have a new mode called Silent Mode (Or Smart Mode) Where certain requests can be automatically allowed or denied without ANY user input. This version hopefully (Again before v4.0 and with Family Signatures and reduced DB Size) Will also be usable on mothers PC's.

As you can see with v3.9, There are already less Alerts thanks to extended whitlist and trusted vendors, And the pop up lay out is now simply Allow or Block, And thats one click allow, one click block. So usability is going forward and going strong...

Cheers,
Josh" }-

Is the "Smart Mode" going to be default when going v4?

[3xist]

-{ Quote: "Is the "Smart Mode" going to be default when going v4?" }-

Smart Mode, Family Signatures, Improved Memory Consumption for AV Updates and Reduced Database Size is in the next version BEFORE v4.0. I am not sure if Smart Mode will be the default...

Cheers,
Josh

[Fuzzfas]

There seems to be something in D+ (proactive, all options checked) which hinders the Crystal Disk Mark to run properly. Normally if you click "all", 3 batches of benchmarks for the Hard Disk will be performed automatically. In my case, the 2nd failed, but did run if i manually launched it. Same for the 3rd.

I also noticed that it didn't ask me "are you sure your PC is clean" during installation. Without importing older configuration , this resulted in having in D+ rules only a handful of applications (asking for the rest).

[IBadget]

You might also want to add the My Documents folder to My Protected Files by default so that, out of the box, CIS can defend against ransomware, e.g., malware that encrypts all of My Documents and demands payment to decrypt the ransomed files. There may come a time when the entire C drive must be in My Protected Files. Who knows what tomorrow's malware may do? I sure hope CIS evolves to keep up with evolving malware.

[raven211]

-{ Quote: "Smart Mode, Family Signatures, Improved Memory Consumption for AV Updates and Reduced Database Size is in the next version BEFORE v4.0. I am not sure if Smart Mode will be the default...

Cheers,
Josh" }-

Thanks, Josh. So, does Smart Mode apply to all "asking thingies" (:P) incl. D+? Does the user ever have to answer any prompts from the AV not related to heuristical detection?

Speaking of heuristics... what about the FPs even on low heuristic settings that I've mentioned in the other topic? If I remember correctly there were even multiple in the low setting... :-\

[Mosqu]

What is the meaning of the CIS logo? What does it show?

[Dch48]

Who cares how big the installer is? The real test is performance and memory usage. I can tell you the performance is great and the memory footprint extremely small. (ranging from 4 to 10 megs at most.) The installer is bigger because of the inclusion of the av DB and the ability to prescan before the installation completes. I was using NIS2009 and was very pleased with it but due to recent financial problems I was reluctant to pay $50 to renew. I decided to try Comodo which is free and I'm not sorry I did. The new version just out is even better than 3.8 and does a much better job of recognizing safe apps therefore greatly reducing popup alerts. The only problem I was having with 3.8 was that my defrag performance was very slow when the AV was turned on. That problem is also gone in 3.9.

[a320ca]

-{ Quote: "Who cares how big the installer is? The real test is performance and memory usage. I can tell you the performance is great and the memory footprint extremely small. (ranging from 4 to 10 megs at most.) The installer is bigger because of the inclusion of the av DB and the ability to prescan before the installation completes. I was using NIS2009 and was very pleased with it but due to recent financial problems I was reluctant to pay $50 to renew. I decided to try Comodo which is free and I'm not sorry I did. The new version just out is even better than 3.8 and does a much better job of recognizing safe apps therefore greatly reducing popup alerts." }-

Ditto! :thumb:

[Ro4dRuNn3r]

-{ Quote: "Ditto! :thumb:" }-
Do you have any problems with your combo? (prevx+cis)

[a320ca]

-{ Quote: "Do you have any problems with your combo? (prevx+cis)" }-

No, so far CIS 3.9, PrevX 3.0 and Zemana AntiLogger all playing well together. ;D :thumb:

[Julian]

Best Comodo version so far :)
And who cares about installer size and memory consumption? RAM is extremely cheap just like big HDDs, broadband internet is standard. Still CIS is the lightest AV / IS, with stateful exclusions it became even faster than 3.8. Also defragmenting with Perfect Disk and so on is not a problem anymore.
And the build number...
A good ersatz for the pink dot in the upper left corner of CIS' window?:wacko:

One thing that annoys me: While the AV is updating the guard doesn't scan anything :(
I hope this will be fixed with later 3.9 versions...

[lordraiden]

Excellent comodo, the best firewall+hips that i have ever try, needs less resources than outpost or OnlineArmor

[gery]

Comodo does not updatee itself in my machine it stops at 30 :-\ %

[Ro4dRuNn3r]

-{ Quote: "No, so far CIS 3.9, PrevX 3.0 and Zemana AntiLogger all playing well together. ;D :thumb:" }-Thx :)

[IceCube1010]

Very nice Comodo. I'm back in the mix. ;D

Ice

[danny9]

-{ Quote: "Very nice Comodo. I'm back in the mix. ;D

Ice" }-

Very nice indeed!
Best version yet. :thumb:
Running it with GesWall free also.
Seems to be a very good pair together. ;D

[jmonge]

i am running it with prevx3 without any problems;)

[bman412]

-{ Quote: "Running free and light and without issues as always!" }-

Tried a gameguard protected game with it?

[andyman35]

-{ Quote: "i am running it with prevx3 without any problems;)" }-
Likewise,smooth as silk here.:thumb:

[3xist]

Hi guys.

2 Emergency builds were updated past 2 days.

Thursday 14th build: Addresses AV Update issues ( build 508 )
Friday 15th build: Addresses BSOD issues, and system lock up issues ( 509 )

If your having any of these, please auto update via updater in CIS, you do NOT need to reinstall.

So the latest version you should be running is: 3.9.95478.509

Cheers,
Josh

[rdsu]

-{ Quote: "Hi guys.

2 Emergency builds were updated past 2 days.

Thursday 14th build: Addresses AV Update issues ( build 508 )
Friday 15th build: Addresses BSOD issues, and system lock up issues ( 509 )

If your having any of these, please auto update via updater in CIS, you do NOT need to reinstall.

So the latest version you should be running is: 3.9.95478.509

Cheers,
Josh" }-
On its website we continue to download build 507...
Shouldn't this be corrected?

[3xist]

-{ Quote: "On its website we continue to download build 507...
Shouldn't this be corrected?" }-

That should be fixed next week. But as I said, build 507 users automatically get these updates.

Cheers,
Josh

[Legendkiller]

well this version is really working well.......yes the first update takes time...but it updates properly...
no issues with too-many pop-ups............this version looks good to work as full time security suite.......

[raven211]

Don't mean to nag, but I really need answer to what I posted previously... :-[


"Thanks, Josh. So, does Smart Mode apply to all "asking thingies" (:P) incl. D+? Does the user ever have to answer any prompts from the AV not related to heuristical detection?

Speaking of heuristics... what about the FPs even on low heuristic settings that I've mentioned in the other topic? If I remember correctly there were even multiple in the low setting... :-\

[eXPerience]

-{ Quote: "Don't mean to nag, but I really need answer to what I posted previously... :-[


"Thanks, Josh. So, does Smart Mode apply to all "asking thingies" (:P) incl. D+? Does the user ever haveto answer any prompts from the AV not related to heuristical detection?

Speaking of heuristics... what about the FPs even on low heuristic settings that I've mentioned in the other topic? If I remember correctly there were even multiple in the low setting... :-\" }-
Dear Raven211,

I'll try to answer the questions in Josh's place.

We already had a "No pop-up" mode in previous versions. Please set your security levels to : FW : safe mode D+ : cleanpc mode
Then go to Miscellaneous --> settings --> set password, surpress all pop-ups.

This will make sure you will not have any pop-ups while still maintaining maximum security. Just a small note : new executables you introduce to your pc will be blocked, you will have to enter the password and then allow it.

There have been some FP's reported now just when the 3.9 version has been released. They're working on it at the moment, and you will see them gone within 2 days. If you want to, you can always disable the heuristics.

yours sincerely,
eXPerience

[raven211]

-{ Quote: "Dear Raven211,

I'll try to answer the questions in Josh's place.

We already had a "No pop-up" mode in previous versions. Please set your security levels to : FW : safe mode D+ : cleanpc mode
Then go to Miscellaneous --> settings --> set password, surpress all pop-ups.

This will make sure you will not have any pop-ups while still maintaining maximum security. Just a small note : new executables you introduce to your pc will be blocked, you will have to enter the password and then allow it.

There have been some FP's reported now just when the 3.9 version has been released. They're working on it at the moment, and you will see them gone within 2 days. If you want to, you can always disable the heuristics.

yours sincerely,
eXPerience" }-

Thx a lot for the answer, eXPerience. ;)

The rest is meant to be taken care of by the AV, right? That's, I don't change any monitoring settings for D+ (or the FW(?)) even if setting with password protection enabled?

I'll disable the heuristics to begin with, but would that mean I won't experience FPs even when set to highest soon?

[eXPerience]

-{ Quote: "Thx a lot for the answer, eXPerience. ;)

The rest is meant to be taken care of by the AV, right? That's, I don't change any monitoring settings for D+ (or the FW(?)) even if setting with password protection enabled?

I'll disable the heuristics to begin with, but would that mean I won't experience FPs even when set to highest soon?" }-
Dear Raven211,

You should always be aware of FP's, but indeed, you shouldn't see so much FP's anymore in the near future. I would friendly like to ask you to report any FP you might encounter.

Thank you in advance,
eXPerience

[raven211]

-{ Quote: "Dear Raven211,

You should always be aware of FP's, but indeed, you shouldn't see so much FP's anymore in the near future. I would friendly like to ask you to report any FP you might encounter.

Thank you in advance,
eXPerience" }-

I'll try to do that - thank you...

Is there a button to directly send it incl. in the program?


EDIT: The following FPs (see attached image...) made me uninstall the software:

Only one was heuristically detected and the rest were still FPs.

[eXPerience]

-{ Quote: "I'll try to do that - thank you...

Is there a button to directly send it incl. in the program?


EDIT: The following FPs (see attached image...) made me uninstall the software:

Only one was heuristically detected and the rest were still FPs." }-
Could you please send me those files (over pm or so) so I can send them to the developers ? I told you there are still some FP's in the program now (new version...) so I hope you might want to try it again later ?

Thanks in advance,
eXPerience

[raven211]

-{ Quote: "Could you please send me those files (over pm or so) so I can send them to the developers ? I told you there are still some FP's in the program now (new version...) so I hope you might want to try it again later ?

Thanks in advance,
eXPerience" }-

Maybe, but as I said, only one was classified as heuristically detected. I'll send you those files...

Sadly I can't send the file which actually said heuristics, cause I don't know if it's illegal or not. :( :-[

[eXPerience]

-{ Quote: "Maybe, but as I said, only one was classified as heuristically detected. I'll send you those files...

Sadly I can't send the file which actually said heuristics, cause I don't know if it's illegal or not. :( :-[" }-
You can always send it to sites like www.virustotal.com to make sure that it's not a virus. The file will also be send to the developers.

Thanks for everything ;)

[raven211]

-{ Quote: "You can always send it to sites like www.virustotal.com to make sure that it's not a virus. The file will also be send to the developers.

Thanks for everything ;)" }-

I knew these files were perfectly clean, but some companies (incl. you, sorry ;D :P) that tend to produce FPs - not meaning THAT incl. you - actually did detect the files of the archive I sent as suspicious. Trend even produced a lousy packer-FP - wow... :blink:

[Dch48]

I just read that sandboxing is proposed to be included in CIS 4. I for one am not thrilled about this. In my opinion, sandboxing is paranoia and not needed. If it does get included in CIS, I hope there will be the option to opt out completely or better yet not even install it.

[eXPerience]

There will be a lot of features included in the V4. I'm not sure if sandboxing is one of them, but I'm pretty sure you will be able to disable it ;), you will see the V4 around the end of the year at earliest I'm afraid. Untill then there will be a lot of other releases.

[Kees1958]

Is the planned time machine the sandbox functionality? Guessing from the name (time machine) I would be thinking of a steady state kind of functionality. You can say what you want from from Melih c.s. , they are a bit weird and humorist, but it looks like the want to produce the ultimate swiss army knife security suite.

The analogy sort of justifies the comodo bunch, swiss have stayed out of war for a long time :D

[3xist]

-{ Quote: "Is the planned time machine the sandbox functionality? Guessing from the name (time machine) I would be thinking of a steady state kind of functionality. You can say what you want from from Melih c.s. , they are a bit weird and humorist, but it looks like the want to produce the ultimate swiss army knife security suite.

The analogy sort of justifies the comodo bunch, swiss have stayed out of war for a long time :D" }-

Sandboxing, I am sorry if I posted misleading information, Might be in v4. I am not sure yet. I will double check that.

Time Machine is like Apple's Time Machine (http://www.youtube.com/watch?v=nWdkfCwd4qU) - But this one for Windows.

Cheers,
Josh

[andyman35]

-{ Quote: "Yes, as far as I know, they are planning on adding sandboxing functionality as well as behavior blocker functionality. Swiss army knife indeed." }-
The Comodo sandbox certainly isn't a new concept,it was being developed at least 2 years ago then was put on the back-burner.It wouldn't surprise me at all to see it appear in v4.The BB on the other hand is a much more recent development.

[Einsturzende]

When some of you say sandboxing, you in fact mean In CIS → DS integration... here (http://forums.comodo.com/comodo_diskshield/how_can_diskshield_be_integrated_into_cfp_v3_to_offer_what_functionality-t23763.0.html)?
Disk shield similar to: shadow defender, deep freeze, returnil etc.

[andyman35]

-{ Quote: "When some of you say sandboxing, you in fact mean In CIS → DS integration... here (http://forums.comodo.com/comodo_diskshield/how_can_diskshield_be_integrated_into_cfp_v3_to_offer_what_functionality-t23763.0.html)?
Disk shield similar to: shadow defender, deep freeze, returnil etc." }-

I'm not referring to DS personally,I think that Diskshield is what's evolving into Time-Machine.The sandbox has always been a separate development.

[eXPerience]

-{ Quote: "The Comodo sandbox certainly isn't a new concept,it was being developed at least 2 years ago then was put on the back-burner.It wouldn't surprise me at all to see it appear in v4.The BB on the other hand is a much more recent development." }-
Could you please redirect me to any Comodo sandbox, AFAIK it never existed before.

CTM is indeed the better/newer version of Diskshield.

Thank you

[andyman35]

-{ Quote: "Could you please redirect me to any Comodo sandbox, AFAIK it never existed before.

CTM is indeed the better/newer version of Diskshield.

Thank you" }-
Unfortunately there was never any public beta release of the sandbox,just internal test builds.I remember Melih mentioning that development was placed on hold for whatever reason.

[jmonge]

i am currently trying this new version of comodo and i am very impress and happy;) thanks comodo team:thumb:

[jmonge]

-{ Quote: "Are you also using the Antivirus component? I've given up on Comodo's Antivirus for now. Avira is also free and I find it runs much better on my system with no conflicts to my setup.

Comodo's Firewall and Defense+ are excellent as always!" }-are you crazy this antivirus rocks;D

[eXPerience]

-{ Quote: "Are you also using the Antivirus component? I've given up on Comodo's Antivirus for now. Avira is also free and I find it runs much better on my system with no conflicts to my setup.

Comodo's Firewall and Defense+ are excellent as always!" }-
You can always disable Comodo's on-access scanner and use it as a back-up scanner ;)

[Dch48]

I am using the AV and I haven't gotten a false positive yet. In fact, it hasn't detected anything yet except the eicar tests I threw at it. I left the heuristics on low which is the default and now recommended setting from what I've read.

[jmonge]

what makes this antivirus strong it is the Defense+ module;) plus the heuristic engine too:)

[raven211]

-{ Quote: "I am using the AV and I haven't gotten a false positive yet. In fact, it hasn't detected anything yet except the eicar tests I threw at it. I left the heuristics on low which is the default and now recommended setting from what I've read." }-

What are those settings? Any link? Thanks. :)

[a320ca]

-{ Quote: "what makes this antivirus strong it is the Defense+ module;) plus the heuristic engine too:)" }-

Agreed.:thumb:

[Dch48]

-{ Quote: "What are those settings? Any link? Thanks. :)" }-

In the scanner settings under anti virus you can set the heuristics level for each type of scanning. The default is low in all of them. The higher you set it, the greater the chances of getting false positives.

[RejZoR]

-{ Quote: "what makes this antivirus strong it is the Defense+ module;) plus the heuristic engine too:)" }-

Heuristics are nothing to brag about. In fact they can't even be called heuristics. But how much hype does word "Heuristics" make somewhere in the interface if ppl don't know how it really works.
And then you see ppl complaining over avast! because it doesn't have heuristics mentioned anywhere...

[raven211]

-{ Quote: "Heuristics are nothing to brag about. In fact they can't even be called heuristics. But how much hype does word "Heuristics" make somewhere in the interface if ppl don't know how it really works.
And then you see ppl complaining over avast! because it doesn't have heuristics mentioned anywhere..." }-

Thought the default level in avast! was medium. ;D

[zapjb]

What's with the 10 digit version number? What almost 4 billion versions up to now. Come on. Get over yourself. Just saying. :wacko: