View Full Version : COMODO Internet Security 4.0.135239.742 Released
Watasha
March 3rd, 2010, 08:21 PM
Hi Everyone,
We are really excited to announce that we have just released COMODO Internet Security 4.0.135239.742! CIS v4 has significant improvements over CIS v3 family. We have included a lot of exciting new technologies to combat malware and significantly reduce the number of popup alerts while providing increased protection.
COMODO would like to thank all of the BETA testers who voluntarily joined the beta testing program and provided the feedback about the product.
Whats New in COMODO Internet Security 4.0.135239.742?
NEW! Seamless livePCsupport Integration
This version has a built-in Live Support for getting instant help from the experts for any type of problems.
NEW! New User Interface Theme
A new user interface theme has been introduced with this version.
NEW! New Web Based Installer
Now, there is a single setup file which downloads and installs the required products according to operating system the computer has. The product installers are created with Microsoft Windows Installer for native installation/uninstallation support.
NEW! Integrated Sandbox
Proactive Defense i.e. Defense+ now includes a built-in sandbox which combines file system/registry virtualization and least-privileged user account principle in order to combat with unknown malware.
IMPROVED! Default Deny Protection
Defense+ now automatically sandboxes all unknown applications/executables until they are analyzed.
IMPROVED! Significantly fewer number of popup alerts
Defense+, with the help of new sandboxing technologies, has a more powerful default security policy while having significantly fewer number of alerts compared to previous versions.
Also in this version, Defense+ and Firewall, by default, do not create automatic rules for already known safe applications.
IMPROVED! Popup alerts layout
The new popup alerts now include additional options which allow the users to take COMODO Time Machine snapshots or set Windows system restore points, submit suspicious files for immediate analysis.
IMPROVED! Antivirus Engine
Antivirus engine is improved for better detection and cleaning. The new engine now has disinfection support for the infected files.
A new command line virus scanner (cavscan.exe) has been introduced in order to address the need for scanning the computers in windows safe mode or scanning files transferred from MSN etc.
Download Locations
COMODO Internet Security 4 Installer
http://download.comodo.com/cis/download/installs/installer_data/binaries/cisfree_installer.exe
Size: 2,7M ( 2799888 )
MD5: 03c767f792366cc6c317e2b66a753adf
SHA1: b5edc2d8e5bf1d477d26bd70089701013ea5b09e
COMODO Antivirus 4 Standalone Installer
http://download.comodo.com/cis/download/installs/installer_data/binaries/cavfree_installer.exe
Size: 2,7M ( 2799888 )
MD5: 72d51c823f0f1c52dec5dca5b4794c2a
SHA1: de59509bb08f5b5883374627a983174a73aea35c
COMODO Firewall 4 Standalone Installer
http://download.comodo.com/cis/download/installs/installer_data/binaries/cfwfree_installer.exe
Size: 2,7M ( 2799888 )
MD5: ee42ec01e55d800d0a0cd95788bd55b3
SHA1: 99463770317ba6fc82b6c62854d8bd44b5d9e3a3
Frequently Asked Questions
Q1 - Do I need a separate installer if i am using a 64 bit operating system?
A1 - No. The installer will download the appropriate setup for you and install.
Q2 - I am a CIS 3.x User. Will I get the updates?
A2 - We haven't released the updates to the existing users yet. But we will. When we release, in the upcoming weeks, you will be able to update it without having to reinstall this new version.
Q3 - Do I need to download these 3 setup files in order to get all the products?
A3 - No. If you download CIS Free installer, you will be able to choose which products you want to install. We have provided standalone firewall and AV installers for convenience for some of our users. If you want to install both firewall and antivirus, you should use COMODO Internet Security Installer.
Q4 - I was a BETA tester and still using the BETA versions. What should I do?
A4 - You should uninstall the BETA version and use this new version. However, although not recommended, you can use automatic updater to update to this version from the BETA versions.
Regards,
Egemen
Brocke
March 3rd, 2010, 08:42 PM
Thank you,
now im wondering what tests are going to be done. looks promising.
Brocke
March 3rd, 2010, 08:48 PM
Egemen,
I see the online installer by default has the Toolbar (surf) checked, i would have this unchecked. because some people dont like or want it. should be an option.
codylucas16
March 3rd, 2010, 09:10 PM
Curious; did the bug that prevented WLM from being minimized to the tray in windows 7 (at least 64 bit) that was present in the beta get fixed?
Watasha
March 3rd, 2010, 09:26 PM
-{ Quote: "Curious; did the bug that prevented WLM from being minimized to the tray in windows 7 (at least 64 bit) that was present in the beta get fixed?" }-
Not sure, I haven't really had a chance to play with it at all. By what everyone is saying pretty much all of the bugs in Beta have been worked out. We should find out soon. ;D
Brocke
March 3rd, 2010, 09:39 PM
Watasha,
What is next for CIS4? curious, have it installed running well. the popup for the sandbox is nice.
zfactor
March 3rd, 2010, 09:42 PM
screenshots? does it look the same as before
Brocke
March 3rd, 2010, 10:24 PM
Still the same, now shows a sandbox popup.
acuariano
March 3rd, 2010, 11:03 PM
so,there is no need for sandboxie with this?..
is this strong like geswall,defensewall ?HIPS.
is antivirus from comodo or third party?
Watasha
March 3rd, 2010, 11:35 PM
-{ Quote: "Watasha,
What is next for CIS4? curious, have it installed running well. the popup for the sandbox is nice." }-
That's a good question. I've heard a lot of talk about overhauling the GUI. Couple that with refining some of the new aspects of V4 and this thing should be looking pretty good.:thumb: I'm loving it so far, it's so quiet...;)
Watasha
March 3rd, 2010, 11:36 PM
-{ Quote: "so,there is no need for sandboxie with this?..
is this strong like geswall,defensewall ?HIPS.
is antivirus from comodo or third party?" }-
This is Comodo AV.
Zyrtec
March 3rd, 2010, 11:38 PM
Out of curiosity, why do you offer the download now through a 2.7 mb stub instead of a full installer[like before] when the majority of the Internet users connect through broadband?
Thank you
Carlos
MisterMooth
March 3rd, 2010, 11:42 PM
-{ Quote: "Out of curiosity, why do you offer the download now through a 2.7 mb stub instead of a full installer[like before] when the majority of the Internet users connect through broadband?
Thank you
Carlos" }-
You can get the full installers here:
http://download.comodo.com/cis/download/installs/xml_binaries/cis/cis_setup_x86.msi
http://download.comodo.com/cis/download/installs/xml_binaries/cis/cis_setup_x64.msi
tipo
March 4th, 2010, 12:23 AM
-{ Quote: "Thank you,
now im wondering what tests are going to be done. looks promising." }-
on my laptop i had CFP with D+ v3. uninstalled it and installed v4. tested it with comodo leak test.exact same settings as v3.(i use cfp for a long time now and i know how to set it) without the sandbox 50/330 and with the sandbox 200/330. v3 was 330/330... whats wrong with v4????sorry to say but i`m not giving up my v3 for this c*r*a*p* :thumbd:
Watasha
March 4th, 2010, 12:28 AM
-{ Quote: "on my laptop i had CFP with D+ v3. uninstalled it and installed v4. tested it with comodo leak test.exact same settings as v3.(i use cfp for a long time now and i know how to set it) without the sandbox 50/330 and with the sandbox 200/330. v3 was 330/330... whats wrong with v4????sorry to say but i`m not giving up my v3 for this c*r*a*p* :thumbd:" }-
Why don't you do a little research, maybe go to the forum? Maybe you can figure it out in a flash. I wouldn't just throw my hands up and call it crap.:-\
iTrendsNET
March 4th, 2010, 12:34 AM
Thanks, Watasha! You and Comodo made my evening. :) Just upgraded two computers from RC to final without any problems.
I agree with your other post that this is the lightest security suite that I have ever run. The other thing I really like is that it always picks up my network and that I do not have to do anything extra to make file and printer sharing work.
Watasha
March 4th, 2010, 12:45 AM
-{ Quote: "Thanks, Watasha! You and Comodo made my evening. :) Just upgraded two computers from RC to final without any problems.
I agree with your other post that this is the lightest security suite that I have ever run. The other thing I really like is that it always picks up my network and that I do not have to do anything extra to make file and printer sharing work." }-
Well thank you, you just made my evening!;D I really like it and I'm sure you will too. I'm glad I could help out a bit and I'm sure the all of the guys that worked hard on this appreciate your kind words. If you get time, I'm sure they would love to hear from you.;D
Brocke
March 4th, 2010, 12:49 AM
i just tested with all default settings and scored 150/340, are the defaults good enough for people? im not sure looking at the score.
but nonless still like it
EDIT: should ask should i be concerned?
korben
March 4th, 2010, 02:06 AM
When downloading I got this:
http://i47.tinypic.com/2s937gz.png
wicked
Anonymous696
March 4th, 2010, 02:50 AM
-{ Quote: "
COMODO Firewall 4 Standalone Installer
http://download.comodo.com/cis/download/installs/installer_data/binaries/cfwfree_installer.exe
Size: 2,7M ( 2799888 )
MD5: ee42ec01e55d800d0a0cd95788bd55b3
SHA1: 99463770317ba6fc82b6c62854d8bd44b5d9e3a3
" }-
-{ Quote: "You can get the full installers here:
http://download.comodo.com/cis/download/installs/xml_binaries/cis/cis_setup_x86.msi
http://download.comodo.com/cis/download/installs/xml_binaries/cis/cis_setup_x64.msi" }-
What are the links for- 'COMODO Firewall 4 Standalone' offline installer (if there are any, that is)?
lordraiden
March 4th, 2010, 02:55 AM
-{ Quote: "on my laptop i had CFP with D+ v3. uninstalled it and installed v4. tested it with comodo leak test.exact same settings as v3.(i use cfp for a long time now and i know how to set it) without the sandbox 50/330 and with the sandbox 200/330. v3 was 330/330... whats wrong with v4????sorry to say but i`m not giving up my v3 for this c*r*a*p* :thumbd:" }-
The comodo leak test is outdated, this results are normal, V4 is better than V3. Also you should read how the sandbox work.
I tested the lasted RC and I feel that this "final" version will be like a RC2.
THe offline links are:
http://download.comodo.com/cis/download/installs/xml_binaries/cis/cis_setup_x86.msi
http://download.comodo.com/cis/download/installs/xml_binaries/cis/cis_setup_x64.msi
MisterMooth
March 4th, 2010, 03:44 AM
-{ Quote: "on my laptop i had CFP with D+ v3. uninstalled it and installed v4. tested it with comodo leak test.exact same settings as v3.(i use cfp for a long time now and i know how to set it) without the sandbox 50/330 and with the sandbox 200/330. v3 was 330/330... whats wrong with v4????sorry to say but i`m not giving up my v3 for this c*r*a*p* :thumbd:" }-
That test is out of date and doesn't take the sandbox into account.
Edwin024
March 4th, 2010, 04:38 AM
It really works like a charm. Hardly notice it and quite slim in cpu and ram usage.
raven211
March 4th, 2010, 04:54 AM
-{ Quote: "It really works like a charm. Hardly notice it and quite slim in cpu and ram usage." }-
Could you please check the I/O as well? I really wanna check it out - thanks. :)
Edwin024
March 4th, 2010, 05:00 AM
If you wanna check it out so much: do it and tell me :)
arjunned
March 4th, 2010, 05:11 AM
-{ Quote: "Could you please check the I/O as well? I really wanna check it out - thanks. :)" }-
Very light on CPU and RAM. Not sure how to interpret the IO data.
raven211
March 4th, 2010, 05:27 AM
-{ Quote: "If you wanna check it out so much: do it and tell me :)" }-
LOLZ goes to you. ;D
@arjunned: Thanks for the data... all I do is compare it to other software that I know works light, and from what I can see, COMODO should be very light in this aspect as well. ;)
EDIT: On second check, maybe not that light... either that, or Malwarebytes is simply ridiculous when it comes to its resource usage. :D Gonna test it anyway, just to see how it does. :)
arjunned
March 4th, 2010, 05:35 AM
CIS v4 is awesome. Just threw 20 new malware at it, and the AV caught abt 70% of 'em. The others were caught by D+.
raven211
March 4th, 2010, 05:37 AM
-{ Quote: "CIS v4 is awesome. Just threw 20 new malware at it, and the AV caught abt 70% of 'em. The others were caught by D+." }-
D+ recognized them, or did the sandbox kick in on those because it was unknown? :)
MisterMooth
March 4th, 2010, 05:37 AM
-{ Quote: "CIS v4 is awesome. Just threw 20 new malware at it, and the AV caught abt 70% of 'em. The others were caught by D+." }-
What about the sandbox?
Edwin024
March 4th, 2010, 05:43 AM
So far nothing comes out of the zanbak, as it's called in Dutch :)
I can download what I want but it stays where it is: in the sandbox.
MisterMooth
March 4th, 2010, 05:44 AM
-{ Quote: "So far nothing comes out of the zanbak, as it's called in Dutch :)
I can download what I want but it stays where it is: in the sandbox." }-
Only if you want it to. You can take programs out of the sandbox if you want
arjunned
March 4th, 2010, 05:45 AM
D+ for a few. Sandbox for the rest.
Sorry i didnt mention that. :)
I dont think CIS can be tested fairly (as an AV) without all of its components running (ie AV, D+ with Sandbox). It works best as a complete suite.
MisterMooth
March 4th, 2010, 05:50 AM
Just tested it out by running a rogue. Up came a fake Action Center window, along with a Comodo notification saying the program was sandboxed. The rogue thought it was properly installed on my system, but really it was in a sandbox and didn't touch my system at all. Ended the process and everything was fine.
I'm really liking this so far.
Edwin024
March 4th, 2010, 05:52 AM
-{ Quote: "Only if you want it to. You can take programs out of the sandbox if you want" }-
And how can I do that?
MisterMooth
March 4th, 2010, 05:53 AM
-{ Quote: "And how can I do that?" }-
Programs that are automatically added to the sandbox show up in My Pending Files. The files in there are sent to Comodo for analysis, but you can take them out of the sandbox by selecting them moving them to My Own Safe Files.
MisterMooth
March 4th, 2010, 05:58 AM
You could also just wait and once Comodo verifies it's safe it'll the taken out automatically... but that could take a while.
Edwin024
March 4th, 2010, 06:02 AM
I don't see the files in Comodo anywhere. But I will try it again...
MisterMooth
March 4th, 2010, 06:03 AM
-{ Quote: "I don't see the files in Comodo anywhere. But I will try it again..." }-
Check the Defense+ events and look for anything that says "Sandboxed As"
Edwin024
March 4th, 2010, 06:07 AM
I downloaded ccleaner again. It's still in the Firefox bar, but nowhere to be found. Nothing under My pending files either. I can start it up out of the bar but the file itself is nowhere on the drive, so it seems. Not in my Download dir anyway, where it should go to with the sandbox.
EDIT: On the C drive I found the sandbox dir and there was the file. But I don't get it why Comodo doesn't show it anywhere in the program.
bryanjoe
March 4th, 2010, 06:11 AM
need to uninstall previous version....
i have SSM installed..... so it does not even allow me to install....
raven211
March 4th, 2010, 06:11 AM
Sorry to say this, but this product is not final. Only had a bunch of unrecognized, well-known programs, notifications, prompts and problems with my internet connection (couldn't browse AT ALL with Chrome for example) - no thank you.
Edwin024
March 4th, 2010, 06:13 AM
Sorry to hear that. I have no probs with Firefox. Will install Chrome in a minute to see what it does here.
demoneye
March 4th, 2010, 06:15 AM
sandboxie + CIS4 sandbox doesnt get along :)
Edwin024
March 4th, 2010, 06:20 AM
-{ Quote: "Sorry to say this, but this product is not final. Only had a bunch of unrecognized, well-known programs, notifications, prompts and problems with my internet connection (couldn't browse AT ALL with Chrome for example) - no thank you." }-
Typing this from Chrome. You can add chrome.exe to the trusted files in the firewall and it works without a hassle.
acuariano
March 4th, 2010, 06:57 AM
when you add chrome to trusted files,,"will chrome be sandboxed"?..just tio protect the browsing.
MisterMooth
March 4th, 2010, 07:13 AM
-{ Quote: "I downloaded ccleaner again. It's still in the Firefox bar, but nowhere to be found. Nothing under My pending files either. I can start it up out of the bar but the file itself is nowhere on the drive, so it seems. Not in my Download dir anyway, where it should go to with the sandbox.
EDIT: On the C drive I found the sandbox dir and there was the file. But I don't get it why Comodo doesn't show it anywhere in the program." }-
Oh, I didn't know you downloaded the program in the sandbox.
What you should do is create a folder in the Firefox sandbox folder for your downloads, then create a shortcut to it somewhere else so you can easily access your downloads.
AlexDBR
March 4th, 2010, 07:30 AM
Not really impressed with CIS 4...
I think the sandbox and Defense+ should work together, not separately.
I noticed that usually harmless programs are sandboxed but real malware asks for elevated privileges, and after that it can do anything without any Defense+ alerts. Not good...
And I thought Comodo was supposed to be a 2-way firewall... I don't think it's a good idea to allow all outbound connections by default (just to reduce the number of popups).
clocks
March 4th, 2010, 07:56 AM
SO Live Support still loads without the option to uncheck it? Can you still uninstall it seperate from the rest of the app?
Also regarding the sandbox, does it still cause issues with Steam. It made Tourchlight crash constantly for me. Once I disable the sandbox, the game ran fine.
MisterMooth
March 4th, 2010, 07:58 AM
-{ Quote: "SO Live Support still loads without the option to uncheck it? Can you still uninstall it seperate from the rest of the app?
Also regarding the sandbox, does it still cause issues with Steam. It made Tourchlight crash constantly for me. Once I disable the sandbox, the game ran fine." }-
Once you get the sandbox alert for the Steam game, made sure you don't select to keep it in the sandbox. Then you have to restart Steam and that game should run fine.
clocks
March 4th, 2010, 08:12 AM
I was using the release candidate, so I am assuming there are not many changes in the final, though I have not seen a change log.
CIS4 still has all the things that made me love CIS3. Some things that concerned me were
1. cmdagent seems to eat a lot of CPU compared to other security programs
2. no option to not install PC Live Support, which creates an additional process
3. The two main process seem to avg about 18 meg, while in version 3 they were closer to 5 meg. I guess with the sandbox, it makes sense that the program has grown.
4. sandbox can cause issues with some programs
5. I like the old color scheme a lot more than the predominately red scheme.
I am going to install the final, and see if I notice any improvements in the above.
lordraiden
March 4th, 2010, 08:16 AM
Be carefull while using V4, the sanbox has a BIG hole xD:
http://forums.comodo.com/feedbackcommentsannouncementsnews-cis/bug-by-design-in-v4-vulnerable-by-default-t52440.0.html
MisterMooth
March 4th, 2010, 08:17 AM
-{ Quote: "I was using the release candidate, so I am assuming there are not many changes in the final, though I have not seen a change log.
CIS4 still has all the things that made me love CIS3. Some things that concerned me were
1. cmdagent seems to eat a lot of CPU compared to other security programs
2. no option to not install PC Live Support, which creates an additional process
3. The two main process seem to avg about 18 meg, while in version 3 they were closer to 5 meg. I guess with the sandbox, it makes sense that the program has grown.
4. sandbox can cause issues with some programs
5. I like the old color scheme a lot more than the predominately red scheme.
I am going to install the final, and see if I notice any improvements in the above." }-
The only real difference I've noticed is that the final version has sandbox notifications. You get an alert if a program is automatically placed in the sandbox, and in that alert you can choose to not have it run in the sandbox if you want.
iTrendsNET
March 4th, 2010, 08:28 AM
-{ Quote: "Sorry to say this, but this product is not final. Only had a bunch of unrecognized, well-known programs, notifications, prompts and problems with my internet connection (couldn't browse AT ALL with Chrome for example) - no thank you." }-
Wow, all I use is Chrome. No issues. I had commented in the Comodo forums that the RC was running like a final on my three test computers. Sorry that's not the case with yours!
iTrendsNET
March 4th, 2010, 08:39 AM
-{ Quote: "Be carefull while using V4, the sanbox has a BIG hole xD:
http://forums.comodo.com/feedbackcommentsannouncementsnews-cis/bug-by-design-in-v4-vulnerable-by-default-t52440.0.html" }-
Saw your post over there! ;D :thumb: :thumb:
lordraiden
March 4th, 2010, 08:49 AM
-{ Quote: "Saw your post over there! ;D :thumb: :thumb:" }-
This release is shameless, ok comodo is FREE but still they should care more their product.
Dont let the post go down in the forum, post something xD
AvinashR
March 4th, 2010, 09:29 AM
Even rogue can able to bypass CIS4. Now enjoy lots and lots of bugs...
pykko
March 4th, 2010, 10:02 AM
CIS 4 Sandbox is a total mess and it keeps blocking applications even if you set them out of the sandbox and click "unblock".
They have released an unfinished product. :(
This is the worst final version of CIS I ever installed.
raven211
March 4th, 2010, 10:59 AM
-{ Quote: "Typing this from Chrome. You can add chrome.exe to the trusted files in the firewall and it works without a hassle." }-
Sorry but I tried installing WITHOUT the FW at all, so... and sandbox doesn't say anything for Chrome either. :-\
1000db
March 4th, 2010, 11:36 AM
-{ Quote: "Even rogue can able to bypass CIS4. Now enjoy lots and lots of bugs..." }-
With default settings I was able to run/install Win 7 2010 rogue antivirus. CIS gave me a prompt to block the process so I said yes. THen I got a pop-up saying CIS was going to sandbox the rogue because it was unknown, i agreed. Then I was unable to get to Task Manager. CIS got jacked.
Zyrtec
March 4th, 2010, 11:58 AM
Hello,
I did notice while downloading the full installer of CIS (x86) that ESET NOD32 version 4.0.474 database 4913 flagged that installer as a Trojan horse and severed the connection so I was unable to download it.
Any other AV flagging this as Malware? FP?
Thanks
Carlos
arjunned
March 4th, 2010, 12:06 PM
-{ Quote: "sandboxie + CIS4 sandbox doesnt get along :)" }-
I'm running both together with no problems. :)
What problems are u facing exactly?
AlexDBR
March 4th, 2010, 12:50 PM
I think the CIS4 Sandbox is automatically disabled if it detects Sandboxie...
CIS 4 has some issues, but if I use just the Firewall (with the rules from CIS 3) and Defense+, everything works fine.
arjunned
March 4th, 2010, 12:59 PM
No. Comodo 4 Sandbox is running for me as well, along with Sandboxie.
Brocke
March 4th, 2010, 01:48 PM
Can anyone tell me what the difference between the Internet Security and proactive Configurations are?
JamesFrance
March 4th, 2010, 02:06 PM
The most obvious difference is that with proactive the firewall makes rules for outgoing connections, whereas by default all outgoing are allowed.
Brocke
March 4th, 2010, 02:19 PM
-{ Quote: "The most obvious difference is that with proactive the firewall makes rules for outgoing connections, whereas by default all outgoing are allowed." }-
right i switch to that and i see no change in the network security policy should i? it shows all outgoing or an i reading it wrong?
JamesFrance
March 4th, 2010, 02:35 PM
It will make Application Rules which take precedence over Global. That seems to be the difference, but I don't know why allow IP out is then in the Global Rules.
Brocke
March 4th, 2010, 02:39 PM
Thank you,
its being said that version 4.1 will have acid like cleaning for the AV now im not sure what that all in tails lets hope its works out.
iTrendsNET
March 4th, 2010, 03:51 PM
-{ Quote: "Can anyone tell me what the difference between the Internet Security and proactive Configurations are?" }-
Here is a little more help.
http://personalfirewall.comodo.com/Comodo_Internet_Security_Pro_User_Guide.pdf
-{ Quote: "Page 179 of 213:
COMODO - Proactive Security - This configuration turns CIS Pro into the ultimate protection machine. All possible
protections are activated and all critical COM interfaces and files are protected. During the setup, if only Comodo Firewall
installation option is selected, the next screen allows users to select this configuration as default CIS configuration. If
selected, Firewall is always set to Safe mode. But according to the malware scanning results performed during the setup
process, if no malware is found, Defense+ is set to Clean PC mode. Otherwise, the default is Safe mode.
COMODO - Internet Security - This configuration is activated by default, when both Antivirus and Firewall components
are installed, i.e. the complete installation. Firewall is always set to Safe mode. But according to the malware scanning
results performed during the setup process, if no malware is found, Defense+ is set to Clean PC mode. Otherwise, the
default is Safe mode. In this mode,
• Image Execution Control is disabled.
• Computer Monitor/Disk/Keyboard/DNS Client access/Window Messages are NOT monitored.
• Only commonly infected files/folders are protected against infection.
• Only commonly exploited COM interfaces are protected.
• Defense+ is tuned to prevent infection of the system.
If you wish to switch to Proactive Security option, you can select the option using Manage My Configurations interface." }-
Brocke
March 4th, 2010, 04:12 PM
right but i thought some setting are changed by default now such as the image execution control is now enable instead of disabled.
hmm i dont know maybe wrong.
anything thank you for the info.
clocks
March 4th, 2010, 04:23 PM
-{ Quote: "Thank you,
its being said that version 4.1 will have acid like cleaning for the AV now im not sure what that all in tails lets hope its works out." }-
Sounds like marketing speak. lol Sounds better than "Windex like cleaning".
Brocke
March 4th, 2010, 04:26 PM
-{ Quote: "Sounds like marketing speak. lol Sounds better than "Windex like cleaning"." }-
They say that NO rootkit will live with it. hmm well see. but for now they need to fix the bugs before they work on that.
their issue is they are working on million products and not focusing on this CIS4.
clocks
March 4th, 2010, 04:37 PM
-{ Quote: "
their issue is they are working on million products and not focusing on this CIS4." }-
I agree. I thought CIS would have the new GUI, behavior blocker, etc by now. But can't complain when the price is right.
Brocke
March 4th, 2010, 04:41 PM
-{ Quote: "I agree. I thought CIS would have the new GUI, behavior blocker, etc by now. But can't complain when the price is right." }-
so far im liking the new CIS4 very quite and working nicely for me. and yes the price is great.
i have a feeling that this once its gets to where they say it will will give companies like Symantec and Mcafee a run for there money. they already have the sandbox now the BB and a revamped AV and this will be really strong. not to say that it isnt now :)
SAW
March 4th, 2010, 04:42 PM
To unistall live support , is just in Start button>All Programs>Comodo> Live support>uninsatll
Brocke
March 4th, 2010, 07:03 PM
-{ Quote: "Even rogue can able to bypass CIS4. Now enjoy lots and lots of bugs..." }-
well while a rogue bypass it really doesnt, because the app is rogue is installed but under file and registry vitalization. at least that is my understanding.
nothing againest you AvinashR. im just trying to understand the new sandbox they added. if you restart the computer does the Rogue get removed because its sandboxed? maybe i dont know.
Brock
Ibrad
March 4th, 2010, 07:17 PM
-{ Quote: "well while a rogue bypass it really doesnt, because the app is rogue is installed but under file and registry vitalization. at least that is my understanding.
nothing againest you AvinashR. im just trying to understand the new sandbox they added. if you restart the computer does the Rogue get removed because its sandboxed? maybe i dont know.
Brock" }-
I read some reports on their forum, they rebooted and the rogue was still blocking everything. It's a full bypass, so AvinashR is correct.
NoIos
March 4th, 2010, 07:29 PM
It's not the first time Comodo releases a bad and buggy first version. Give them some months and they'll come with a stable version and working features. It seems that they don't keep enough under beta testing their products or their beta testers do a bad job. I'm sure that in the next two months they'll have to offer a much better 4.something version. There is no need to get the 4 version now.
ratwing
March 4th, 2010, 08:47 PM
-{ Quote: "It's not the first time Comodo releases a bad and buggy first version. Give them some months and they'll come with a stable version and working features. It seems that they don't keep enough under beta testing their products or their beta testers do a bad job. I'm sure that in the next two months they'll have to offer a much better 4.something version. There is no need to get the 4 version now." }-
In regards to beta-testers,there is another paradigm,as lordraiden seems to imply.
The BetaTesters do their jobs,and their reports are ignored. ( you can of course use Comodo speak,and substitute Prioritized for Ignored.)
The rush to release, seems to make even less sense for a free product than a paid.
AvinashR
March 5th, 2010, 01:14 AM
-{ Quote: "well while a rogue bypass it really doesnt, because the app is rogue is installed but under file and registry vitalization. at least that is my understanding.
nothing againest you AvinashR. im just trying to understand the new sandbox they added. if you restart the computer does the Rogue get removed because its sandboxed? maybe i dont know.
Brock" }-
Hi Brother Brock,
I know you are not at all against me, but you know what even i tested this software on my virtual PC and rogue can able to bypass the sandbox and touched my registry. Even i can not able to use msconfig and other important services. You can also this complaint in their forum where one user is also complaining about this issue....
I am sure if you test it yourself then you are the next man who will start complaining like me.....
blacknight
March 5th, 2010, 01:17 AM
-{ Quote: "I read some reports on their forum, they rebooted and the rogue was still blocking everything. It's a full bypass, so AvinashR is correct." }-
I also read these reports. I have two troubles:
- was Comodo setted to the highest level in all this elements ?
- anyway, Comdo should be his own autoprotection - whatever is his settings - to avoid his block !
Brocke
March 5th, 2010, 01:20 AM
-{ Quote: "Hi Brother Brock,
I know you are not at all against me, but you know what even i tested this software on my virtual PC and rogue can able to bypass the sandbox and touched my registry. Even i can not able to use msconfig and other important services. You can also this complaint in their forum where one user is also complaining about this issue....
I am sure if you test it yourself then you are the next man who will start complaining like me....." }-
yeah i read that also, i know they will repair CIS , for free it will be really strong. once it all worked out.
AvinashR
March 5th, 2010, 01:22 AM
-{ Quote: "I also read these reports. I have two trouble:
- was Comodo setted to the highest level in all this elements ?
- anyway, Comdo should be his own autoprotection - whatever is his settings - to avoid his block !
" }-
I guess this CIS 4 is still in Beta form, and Comodo is pressing all of us hard to test this so called final Release so that they can know what's going on....Really pathetic
I know many of Comodo lovers going to kill me here, but i cannot resist myself to speak like this.
blacknight
March 5th, 2010, 01:29 AM
-{ Quote: "
I know many of Comodo lovers going to kill me here, but i cannot resist myself to speak like this." }-
Ya, you can say all you want... but I wished that you could answer to my questions.
AvinashR
March 5th, 2010, 01:30 AM
-{ Quote: "yeah i read that also, i know they will repair CIS , for free it will be really strong. once it all worked out." }-
Surely they will gonna repair it, they won't let it remain as it was now. But i am very much disappointed the way Comodo is using all of us to test their products....Even some days ago they launched Comodo Time Machine which is sort of imaging/recovery software, and you know what if you uninstall this product then you will gonna loose your MBR and many important system files which led you to reinstall your Windows....
What a imgaing/recovery software.....
AvinashR
March 5th, 2010, 01:31 AM
-{ Quote: "Ya, you can say all you want... but I wished that you could answer to my questions." }-
I am happy to answer you but if you could elaborate it...bit more
Brocke
March 5th, 2010, 01:34 AM
-{ Quote: "Surely they will gonna repair it, they won't let it remain as it was now. But i am very much disappointed the way Comodo is using all of us to test their products....Even some days ago they launched Comodo Time Machine which is sort of imaging/recovery software, and you know what if you uninstall this product then you will gonna loose your MBR and many important system files which led you to reinstall your Windows....
What a imgaing/recovery software....." }-
yeah i installed it once. then i was doing some programming scripts, about 2 hours i saved then i uninstalled that software it asked if i wanted to keep my system as it was now. guess what. it failed and i lost my work.
yes i was Pi** off .
AvinashR
March 5th, 2010, 01:38 AM
-{ Quote: "yeah i installed it once. then i was doing some programming scripts, about 2 hours i saved then i uninstalled that software it asked if i wanted to keep my system as it was now. guess what. it failed and i lost my work.
yes i was Pi** off ." }-
You know what my sister installed CTM on my main desktop without asking me, now it was still on my system and i have not touched it till date:-\ :-\
Anyways lets see how many other bugs we will gonna see in CIS 4.
AvinashR
March 5th, 2010, 01:46 AM
Even its seems to be very funny that how mod's at Comodo forum is using vulgar languages against their fellow users....
I guess this very Hard time for Mod's there...They are doing a very tough job....
MisterMooth
March 5th, 2010, 01:48 AM
-{ Quote: "yeah i installed it once. then i was doing some programming scripts, about 2 hours i saved then i uninstalled that software it asked if i wanted to keep my system as it was now. guess what. it failed and i lost my work.
yes i was Pi** off ." }-
Yeah, I lost a huge chunk of my music collection and various other files when I uninstalled Time Machine. Had to reinstall Windows too.
AvinashR
March 5th, 2010, 01:50 AM
-{ Quote: "Yeah, I lost a huge chunk of my music collection and various other files when I uninstalled Time Machine. Had to reinstall Windows too." }-
You should be thanks to CTM, he really helped you to clean your system...i guess CTM wants your system to be restored at factory settings...;D ;D
JoeBlack40
March 5th, 2010, 01:54 AM
-{ Quote: "Surely they will gonna repair it, they won't let it remain as it was now. But i am very much disappointed the way Comodo is using all of us to test their products....Even some days ago they launched Comodo Time Machine which is sort of imaging/recovery software, and you know what if you uninstall this product then you will gonna loose your MBR and many important system files which led you to reinstall your Windows....
What a imgaing/recovery software....." }-
Sorry for the offtopic,but this scenario with CTM happened to me twice.Lost MBR,had reinstalled Windows...now i'm a fan of Rollback:thumb:
On topic,CIS 4 will have to wait...it's not very reliable.So,back with last stable version.
Brocke
March 5th, 2010, 02:00 AM
-{ Quote: "Even its seems to be very funny that how mod's at Comodo forum is using vulgar languages against their fellow users....
I guess this very Hard time for Mod's there...They are doing a very tough job...." }-
really ? like? just curious. because i havnt seen any.
AvinashR
March 5th, 2010, 02:09 AM
-{ Quote: "really ? like? just curious. because i havnt seen any." }-
See here:-
http://forums.comodo.com/feedbackcommentsannouncementsnews-cis/are-comodo-betatesters-doing-seriously-their-job-t52461.0.html
Atleast MODS should not suppress their fellow users like this....
Brocke
March 5th, 2010, 02:17 AM
yeah i read that today, interesting read tho.
ratwing
March 5th, 2010, 02:49 AM
-{ Quote: "You should be thanks to CTM, he really helped you to clean your system...i guess CTM wants your system to be restored at factory settings...;D ;D" }-
Guys,If you can see the humor in a situation like you describe,
Comodo is good for another ten years.
I see absolutely no humor.
JoeBlack40
March 5th, 2010, 03:38 AM
-{ Quote: "Guys,If you can see the humor in a situation like you describe,
Comodo is good for another ten years.
I see absolutely no humor." }-
What can we do,when a "masterpiece" like that messes up you machine...?Sue them?It's a freeware,so...don't like it,don't use it anymore....
Sadly,this is how the things are....:gack:
demoneye
March 5th, 2010, 04:35 AM
lordaiden u got my support also :)
http://forums.comodo.com/feedbackcommentsannouncementsnews-cis/are-comodo-betatesters-doing-seriously-their-job-t52461.15.html
ratwing
March 5th, 2010, 04:57 AM
-{ Quote: "What can we do,when a "masterpiece" like that messes up you machine...?Sue them?It's a freeware,so...don't like it,don't use it anymore....
Sadly,this is how the things are....:gack:" }-
Yeah so true. Not a Damn thing,
other than warn the next guy,and hope against hope,they will listen.
aigle
March 5th, 2010, 06:01 AM
Can any one PM me the rouge that is supposed to bypass the sandbox in Comodo?
Thanks
NoIos
March 5th, 2010, 06:04 AM
-{ Quote: "In regards to beta-testers,there is another paradigm,as lordraiden seems to imply.
The BetaTesters do their jobs,and their reports are ignored. ( you can of course use Comodo speak,and substitute Prioritized for Ignored.)
The rush to release, seems to make even less sense for a free product than a paid." }-
It seems you are absolutely right. Reading some threads over their forums confirms your sayings.
AvinashR
March 5th, 2010, 06:05 AM
-{ Quote: "Can any one PM me the rouge that is supposed to bypass the sandbox in Comodo?
Thanks" }-
Hi Aglie,
You can test any rogue....It will definitely bypass Comodo.
NoIos
March 5th, 2010, 06:05 AM
-{ Quote: "lordaiden u got my support also :)
http://forums.comodo.com/feedbackcommentsannouncementsnews-cis/are-comodo-betatesters-doing-seriously-their-job-t52461.15.html" }-
Mine too. ;D ;)
mevcit
March 5th, 2010, 06:17 AM
-{ Quote: "It will make Application Rules which take precedence over Global. That seems to be the difference, but I don't know why allow IP out is then in the Global Rules." }-
No. Global Rules are the main restriction area. I created two rules, one that allows tcp and udp from ip any to ip any where source and destination ports are any, one that blocks any connection in/out from ip any to ip any. So the global rules allow only tcp and udp outgoing connections, the rest is blocked.
In this case, firewall asks only for the connections that are in the allowed area that i defined with global rules (i set the firewall mode to custom policy mode). Connections requested by applications that are not allowed in the global rules are denied automatically without prompting user (even if you create rules for them manually, they are ignored). Hence, unlike what you said, application rules do not take precedence over global rules. For instance, in the application rules i allowed frostwire for all outgoing tcp and udp connections and then changed the global rule to allow only tcp outgoing (the rest is blocked). Then i observed that frostwire could connect only with tcp protocol.
These observations depend on my experience of the last one hour. ;D I do not know what is different for the firewall module in this version. i do not know about the v3, just wanted to try this new version and have liked it so far. But the feature in windows firewall where you can assign rules for windows services by using svchost.exe still lacks in third party firewalls. On the other side, if you use a proxy service, windows firewall is not aware of outgoing connections that go out through the proxy. anyways, i'll go on using this for some time and see if it meets my needs hehe
Zyrtec
March 5th, 2010, 09:42 AM
Just for experiment's sake I have run Fake AVs in a sanbox [Sandboxie-unpaid version] and it looks that in 95+% of the cases the Rogue can only execute in the sandbox and not affect the entire OS. But, well SBIE has been on the market with this technology for several years, isn't it?
Comodo [ and now Avast! and Kaspersky as well] are relatively new in this department. Better wait until Comodo fine tune that technology before risking to infect your whole PC playing Russian roulette with Fake AVs.
Regards,
Carlos
aigle
March 5th, 2010, 10:36 AM
Tested rouge and some applications in Comodo sandbox in VBox Win 7 32 bit. Here are my results:
1- Auto sandboxing doesn,t work. It says that application is sandboxed but it,s in fact never sandboxed.
2- Sandboxing via right click menu, Run in comdo sandbox, works and system is intact.
3- There is no way in CIS GUI to see what processes, files and reg enteries are isolated.
4- Once an application is sandboxed, there are no more defence plus alerts for it( it must be optional IMO, I mean the user must be able to choose to have or have not the alerts).
5- Same seems true of FW alerts. FW alerts must be there as Sandbox itslelf has no inbound/ outbound control at all.
215938
215939
raven211
March 5th, 2010, 10:38 AM
-{ Quote: "Tested rouge and some applications in Comodo sandbox in VBox Win 7 32 bit. Here are my results:
1- Auto sandboxing doesn,t work. It says that application is sandboxed but it,s in fact never sandboxed.
2- Sandboxing via right click menu, Run in comdo sandbox, works and system is intact.
3- There is no way in CIS GUI to see what processes, files and reg enteries are isolated.
4- Once an application is sandboxed, there rae no more defence plus alerts for it( it must be option IMO, user must eb able to choose to have or have not the alerts).
5- Same seems true of FW alerts. FW alerts must be there as Sandbox itslelf has no inbound/ outbound control at all.
Will add some pics later." }-
More reasons to not run it again then. :P
smage
March 5th, 2010, 10:49 AM
-{ Quote: "Tested rouge and some applications in Comodo sandbox in VBox Win 7 32 bit. Here are my results:
1- Auto sandboxing doesn,t work. It says that application is sandboxed but it,s in fact never sandboxed.
2- Sandboxing via right click menu, Run in comdo sandbox, works and system is intact.
3- There is no way in CIS GUI to see what processes, files and reg enteries are isolated.
4- Once an application is sandboxed, there rae no more defence plus alerts for it( it must be option IMO, user must eb able to choose to have or have not the alerts).
5- Same seems true of FW alerts. FW alerts must be there as Sandbox itslelf has no inbound/ outbound control at all.
Will add some pics later." }-
Hi aigle,
Can you post this on the Comodo forum, this might help them a lot I think.
CogitoTesting
March 5th, 2010, 10:57 AM
Well, to me at least, a sandbox is a great feature in any security application when it is programmed right; however, the new trend and innovation in the security world nowadays has to do with file reputation. CIS 4 has brought nothing new on the security table as it stands right now and with all these bugs that have been reported I'll take a pass for now. Nonetheless, I'll still test it and see what happens.
Thanks.
andyman35
March 5th, 2010, 11:43 AM
-{ Quote: "You should be thanks to CTM, he really helped you to clean your system...i guess CTM wants your system to be restored at factory settings...;D ;D" }-
LOL that was harsh but funny.;D
AvinashR
March 5th, 2010, 11:49 AM
-{ Quote: "LOL that was harsh but funny.;D" }-
Yes its bit funny, that's why i have not touched CTM in ma machine..I left it as it was...About CIS 4, i have no words...One of the dangerous job done by Comodo.
Its not Default Deny Protection™ its Default Acquired Infection™...And this is the Patent Technology from COMODO.
andyman35
March 5th, 2010, 12:02 PM
-{ Quote: "About CIS 4, i have no words...One of the dangerous job done by Comodo.
Its not Default Deny Protection™ its Default Acquired Infection™...And this is the Patent Technology from COMODO." }-
Most of the frustration about CIS4 is in regards to the sandbox with justification.Many users (myself included) were expecting a 'SandboxIE like' product offering systemwide lockdown rather than the half and half mish-mash that we've ended up with.At present it's poorly implemented and confusing,along with the rest of the suite it clearly needs a few weeks of bug-fixing and tweaking before it can rightly be called a stable release version.
aigle
March 5th, 2010, 12:05 PM
-{ Quote: "Hi aigle,
Can you post this on the Comodo forum, this might help them a lot I think." }-
Done.
http://forums.comodo.com/feedbackcommentsannouncementsnews-cis/cis-v-4-sandbox-bugs-n-design-flaws-t52576.0.html
lordraiden
March 5th, 2010, 12:10 PM
-{ Quote: "lordaiden u got my support also :)
http://forums.comodo.com/feedbackcommentsannouncementsnews-cis/are-comodo-betatesters-doing-seriously-their-job-t52461.15.html" }-
Thanks, I was a bit rude with them yesterday but I was bored xD jejeje
I hope that they will react like a professionals to this Final(beta) release. They need at least 1 month for fix all the reported unfixed bugs.
smage
March 5th, 2010, 12:19 PM
-{ Quote: "Done.
http://forums.comodo.com/feedbackcommentsannouncementsnews-cis/cis-v-4-sandbox-bugs-n-design-flaws-t52576.0.html" }-
Nice now all info has been given to them, its up to them to make good use of it.
clocks
March 5th, 2010, 02:50 PM
If any of you guys choose to uninstall this, beware that it leave a lot of directories/files behind in the program files and program data folders.
Brocke
March 5th, 2010, 07:36 PM
-{ Quote: "If any of you guys choose to uninstall this, beware that it leave a lot of directories/files behind in the program files and program data folders." }-
did you post on the Comodo forums so they can take care of the issue?
ratwing
March 5th, 2010, 09:13 PM
-{ Quote: "did you post on the Comodo forums so they can take care of the issue?" }-
Well,hope does spring eternal,but the mess left behind by Comodo is tradition.
The "Windows Installer CleanUp Utility",can weed out a a lot of the MSI stuff,
but if you are even sort of a "clean Freak",it is regedit time!!
clocks
March 5th, 2010, 09:50 PM
I didn't even go after the reg keys. I just manually deleted all the folders left behind.
MisterMooth
March 5th, 2010, 10:36 PM
-{ Quote: "Lets think it thru...
What are the %age of people who has CIS who will then go and try to find another AV?
1)CIS users are fairly advanced. To be able to use CIS v3 they had to be
2)CIS doesn't come pre installed with any PCs, which means the user had to search for CIS knowingly choose it and install it.
3)CIS is free, its not as if renewal will become due to make the user start searching for another AV.
I really think this is not a real threat for a CIS users. However, as always, we will look into this to see what we can do.
Melih" }-
This is pretty embarrassing. Their automatic sandboxing is fatally flawed, yet they say it's not an issue because CIS users are "advanced". Isn't the whole point of the automatic sandboxing to provide foolproof protection for even the least experienced user?
ratwing
March 6th, 2010, 01:09 AM
-{ Quote: "This is pretty embarrassing. Their automatic sandboxing is fatally flawed, yet they say it's not an issue because CIS users are "advanced". Isn't the whole point of the automatic sandboxing to provide foolproof protection for even the least experienced user?" }-
After the reading the Melihfesto,you quoted, cant you see this may be beating your head aginst a rock wall?
Give it a month or so before 5 is released,and 4 may be pretty well debugged.
Expect more than that,and I worry for your cardiac health.
aigle
March 6th, 2010, 01:20 AM
Answer of Melih is totally non-professional. He doesn't even know what he is talking about.
AvinashR
March 6th, 2010, 01:32 AM
-{ Quote: "Answer of Melih is totally non-professional. He doesn't even know what he is talking about." }-
Yeah i do agree with you...Seems that their MOD's and even their Admin became Non-Professional...Complete Loss of Mind...
CIS 4 :thumbd: :thumbd:
COMODO MOD's and Admin :thumbd: :thumbd:
Brocke
March 6th, 2010, 05:14 AM
while agree, they are just defending, i mean people are being rude in there opinions on what they are saying.
the developers of CIS arent gain any money from it so people complain to just complain. im using CIS. never really used version 3 but 4 seems promising because of the sandbox.
yes i know the whole rogue issue. they have all the info and should and will patch all the wholes needed.
AvinashR
March 6th, 2010, 05:30 AM
-{ Quote: "while agree, they are just defending, i mean people are being rude in there opinions on what they are saying.
the developers of CIS arent gain any money from it so people complain to just complain. im using CIS. never really used version 3 but 4 seems promising because of the sandbox.
yes i know the whole rogue issue. they have all the info and should and will patch all the wholes needed." }-
See i agree that they are not earning any kind of money from CIS 4, but don't you think its not plain true?
Brocke
March 6th, 2010, 05:35 AM
yeah i guess you are right :) , i wish they wouldnt have released it. i mean look at Avast every release gets tested by forum members before its released to the public. they are doing it now.
they could learn from it.
Toobys
March 6th, 2010, 07:48 AM
Well, Melih is listening:
https://forums.comodo.com/feedbackcommentsannouncementsnews-cis/rouges-can-very-easily-bypass-cis-4-even-if-sandboxed-t52483.0.html;msg374869#msg374869
https://forums.comodo.com/feedbackcommentsannouncementsnews-cis/rouges-can-very-easily-bypass-cis-4-even-if-sandboxed-t52483.0.html;msg374880#msg374880
https://forums.comodo.com/feedbackcommentsannouncementsnews-cis/cis-v4-not-bulletproof-t52435.0.html;msg374860#msg374860
https://forums.comodo.com/feedbackcommentsannouncementsnews-cis/cis-v4-not-bulletproof-t52435.0.html;msg374867#msg374867
https://forums.comodo.com/feedbackcommentsannouncementsnews-cis/cis-v4-not-bulletproof-t52435.0.html;msg374879#msg374879
And I appreciate this kind of response from Melih. All the information, Not just what I posted, but what others have posted as well, Are being looked into. CIS v4 is running well... But as always, Issues like these need to addressed and I am sure in future releases the Comodo Sandbox will be strong, Comodo are brand spanking new babies to the area so the only thing going for them from now on, is moving forward with improvements and addressing these issues!
Tooby.
disPlay
March 6th, 2010, 08:31 AM
+1 time is the essence
Brocke
March 6th, 2010, 12:09 PM
yeah sounds like hes trying to do the right thing.
Brocke
March 6th, 2010, 12:34 PM
here a review done of CIS4 didnt do bad. but no rogues.
http://www.youtube.com/watch?v=zZdgDtV9pwI&feature=sub
blacknight
March 6th, 2010, 12:48 PM
I didn't yet try 4 - reading here the first reports... - so I want to know: in the 4 version it's possible disable the sandbox and to use the fw/HIPS as in the 3 version, and to set it completely ? Reading here: https://forums.comodo.com/feedbackcommentsannouncementsnews-cis/cis-v4-not-bulletproof-t52435.0.html;msg374879#msg374879 it seemes no.
raven211
March 6th, 2010, 12:49 PM
-{ Quote: "here a review done of CIS4 didnt do bad. but no rogues.
http://www.youtube.com/watch?v=zZdgDtV9pwI&feature=sub" }-
Rogues are left for MBAM IMO. :D :P
Brocke
March 6th, 2010, 12:57 PM
-{ Quote: "I didn't yet try 4 - reading here the first reports... - so I want to know: in the 4 version it's possible disable the sandbox and to use the fw/HIPS as in the 3 version, and to set it completely ? Reading here: https://forums.comodo.com/feedbackcommentsannouncementsnews-cis/cis-v4-not-bulletproof-t52435.0.html;msg374879#msg374879 it seemes no." }-
you can, set to proactive, and disable sandbox. should be just like v3 from what comodo forum is saying.
Brocke
March 6th, 2010, 12:58 PM
-{ Quote: "Rogues are left for MBAM IMO. :D :P" }-
:argh: i know, give it time. rogues will be sandboxed hopefully. should have been not sure what when wrong there lol.
jmonge
March 6th, 2010, 01:11 PM
hey broke how is the sandbox in comodo?
Brocke
March 6th, 2010, 01:25 PM
-{ Quote: "hey broke how is the sandbox in comodo?" }-
there are bugs in it. such as a rogue able to get though, they know about it and are looking into it now.
as far from that that everything thing ive tossed at it has been sandboxed or caught by the AV.
jmonge
March 6th, 2010, 01:28 PM
cool:thumb:
TerryWood
March 6th, 2010, 02:29 PM
Hi
I am a user of Comodo and also a critic of them. It bothers me intensely that people will attempt to defend Comodo against some of its actions just because its free, the implication in their arguments is that they (Comodo) make no or little money and that they are the "Mother Theresa" of the free software community.
I say to those who think this way "grow up", Comodo knows what its doing and makes money. Who employs people to make a loss?
The issue is whether Comodo is professional? I think not. As a Chief Executive, Melih is a loose cannon. Compare the way that Tall Emu and others conduct themselves, release products and versions. It makes Comodo seem like a rogue company. Indeed in many ways it is, if you read round the fora at Comodos antics. BUT its free, and we all have a price to pay with our conscience. It shows how shallow we are when the free business model is thrust in our face.
I think Comodo & Melih could learn a lot if they put down the barrier of arrogance and listened.
Terry
blacknight
March 6th, 2010, 02:44 PM
-{ Quote: "you can, set to proactive, and disable sandbox. should be just like v3 from what comodo forum is saying." }-
Thanks, I'registered in their forum and I've read the threads, but i was not sure;
Another thing: the " rogue problem " that I read also in their forum, is a security problem for all the program IMO, because it means that Comodo autoprotection in 4 doesn't work right. Is it ?
Hayki
March 6th, 2010, 02:54 PM
The new version is wonderfull :) i love red..
Brocke
March 6th, 2010, 03:06 PM
-{ Quote: "Thanks, I'registered in their forum and I've read the threads, but i was not sure;
Another thing: the " rogue problem " that I read also in their forum, is a security problem for all the program IMO, because it means that Comodo autoprotection in 4 doesn't work right. Is it ?" }-
just that the a rogue is able to bypass the sandbox. they have had people send in the files for testing and hope soon they will fix the issue.
i wont uninstalled CIS4 ill just wait.
bellgamin
March 6th, 2010, 04:01 PM
@TerryWood - on a serious note: I totally agree with your comments. Well written!
On a less serious note...-{ Quote: "Who employs people to make a loss?" }- AIG, perhaps, or General Motors?
1000db
March 6th, 2010, 09:49 PM
-{ Quote: "Who employs people to make a loss?" }-
-{ Quote: "AIG, perhaps, or General Motors?" }-
The government too...but that topic is for a different forum.
Brocke
March 7th, 2010, 12:50 AM
on the Comodo forums the dev's have been about to reproduce the sandbox rouge bypass issue now and working on a update to fix the issue.
now sure when the release will be, hoping soon tho.
AvinashR
March 7th, 2010, 12:58 AM
-{ Quote: "on the Comodo forums the dev's have been about to reproduce the sandbox rouge bypass issue now and working on a update to fix the issue.
now sure when the release will be, hoping soon tho." }-
I guess now they have learned a lot from this failure and now they'll going to take a very sensible step to produce a awesome product. No doubt on their capability...Soon we'll going to see a rigid security suite.
Toobys
March 7th, 2010, 01:12 AM
I am glad Comodo has responded the way they have.
MisterMooth and my self, both reported Rogues bypassing CIS 4 and being able to cause REAL system malfunction - To the point where Reinstalling windows was a very valuable decision. Melih and Egemen, probably due to miscommunication or misunderstanding, which does happen - Thought these Rogues are simply "Throwing a GUI in your face and causing no harm to the system". Dropping files is normal at the moment with the automatic sandbox, because automatic virtualization is not enabled by default at the moment. So CIS Defense+ also plays here, making sure automatic sandboxed applications can't touch the protected files and registry keys. Other threats btw are Sandboxed well, Just these particular rogues aren't handled properly with the issues they can cause.
So finally, after submitting the Rogue to Melih, and Melih passing the Rogue on to CIS Developers and/or the CIS QA team, they are able to reproduce the issues the Rogue was causing on their PC and they had to use COMODO Time Machine to restore back. So Egemen, the lead developer of CIS, is now investigating this issue and a fix will be provided in the future. So well done for Comodo for listening to users and I can't wait for future releases with fixes/improvements in the Sandbox.
It's one thing for a Rogue throwing a GUI in your face and doing nothing that causes system malfunction (What Comodo thought first), It's another when the Rogue throws a GUI in your face, and ACTUALLY causes system issues (What Comodo have realized now with a certain Rogue or 2).
Tooby.
Brocke
March 7th, 2010, 01:22 AM
why wasnt automatic vitalization of the file and registry running? by default its set to tho.
Toobys
March 7th, 2010, 01:27 AM
-{ Quote: "why wasnt automatic vitalization of the file and registry running? by default its set to tho." }-
It is pretty strange. Egemen states "automatic virtualization" is not enabled by default, Maybe there is issues with it that Comodo know about.
Tooby.
Brocke
March 7th, 2010, 01:39 AM
the settings say enable but not automatic.
hmm im not sure how they decide when to use the vitalization then. should be automatic id think.
AvinashR
March 7th, 2010, 02:22 AM
-{ Quote: "It is pretty strange. Egemen states "automatic virtualization" is not enabled by default, Maybe there is issues with it that Comodo know about.
Tooby." }-
Sometimes security companies do not share known issues with their users. But Comodo is a brand name and they should take every step with caution. This time they have done blunder with their product. Even many Beta users complaint about known flaws but i guess everything goes unheard, which results this blunder.
ratwing
March 7th, 2010, 02:37 AM
Toobys said:
"It's one thing for a Rogue throwing a GUI in your face and doing nothing that causes system malfunction (What Comodo thought first), It's another when the Rogue throws a GUI in your face, and ACTUALLY causes system issues (What Comodo have realized now with a certain Rogue or 2)."
If the little Java Script fake scan was the extent of the harm Rogue applications were able to do to a machine:
1: they could be blocked by nothing other than disable Java script,
2. Rogue buster such as Malwarebytes would not be so in vogue.
Melihs "rogue(petit)-vs-ROGUE(Maha)", was disingenuous to say the least. .
Since I am not going to download and execute any of this filth,
The "turkey" scan,and a locked up browser is the worst Rogues can do to me.
Disabling Java Script blocks that.
If Comodo 4 is in in fact "every-mans solution" it will need to handle Rogues a hell of a lot better.
Some folks will download them,and execute them,and pay to
have their systems "cleaned".
They will also recieve the incidental payload of Trojans,Trojan droppers,etc,included.
blacknight
March 7th, 2010, 02:52 AM
-{ Quote: "just that the a rogue is able to bypass the sandbox. they have had people send in the files for testing and hope soon they will fix the issue.
i wont uninstalled CIS4 ill just wait." }-
Brocke, I already thought that the security issue compromised the system, reading the previous posts I thing again. I say: the CIS autoprotection shouldn't neutralize the rogue bypassing the sandbox ?
Brocke
March 7th, 2010, 03:01 AM
-{ Quote: "Brocke, I already thought that the security issue compromised the system, reading the previous posts I thing again. I say: the CIS autoprotection shouldn't neutralize the rogue bypassing the sandbox ?" }-
it did bypass they are now looking into correcting the issue now.
smage
March 7th, 2010, 09:27 AM
I think that people should not overreact to the fact that the sandbox has been bypassed by a rogue or rogues. It's good that it has been reported and hopefully it will be fixed soon. Though Comodo took some time to recognise that a problem existed, it has finally been able to reproduce the bug.
Remember it is Comodo's first attempt with sandbox, avast's first attempt was not a success either!
See this
http://www.youtube.com/watch?v=Sr8bIii1G7U
Fortunately, they now have a better sandbox.
Thanks
jmonge
March 7th, 2010, 10:42 AM
or this one;D
http://www.youtube.com/watch?v=zZdgDtV9pwI&feature=digest
raven211
March 7th, 2010, 11:19 AM
-{ Quote: "I think that people should not overreact to the fact that the sandbox has been bypassed by a rogue or rogues. It's good that it has been reported and hopefully it will be fixed soon. Though Comodo took some time to recognise that a problem existed, it has finally been able to reproduce the bug.
Remember it is Comodo's first attempt with sandbox, avast's first attempt was not a success either!
See this
http://www.youtube.com/watch?v=Sr8bIii1G7U
Fortunately, they now have a better sandbox.
Thanks" }-
I'm a little confused about how that guy argues... yes, of course they get onto your PC. That's not what the sandbox is supposed to stop (as far as I know), it's supposed to stop the actions. :doubt: I closed the video after he argued that way when looking at the MBAM results. :ouch: :dry:
AvinashR
March 7th, 2010, 11:26 AM
-{ Quote: "I'm a little confused about how that guy argues... yes, of course they get onto your PC. That's not what the sandbox is supposed to stop (as far as I know), it's supposed to stop the actions. :doubt: I closed the video after he argued that way when looking at the MBAM results. :ouch: :dry:" }-
Even i haven't saw that video...I just read the comment where LanGuy is trying say that "the sandbox basically limits the malware from being able to modify anything on the system. It cannot change the registry, modify or add files or anything. What I think happens is that the program stays in ram, and it's gone when you restart. "....
Its all Crap....Even i have tested its sandbox and i have found something else...
smage
March 7th, 2010, 11:30 AM
Hi Avinash,
I think he was talking about this video not the one from lanGuy.
http://www.youtube.com/watch?v=Sr8bIii1G7U
raven211
March 7th, 2010, 11:33 AM
-{ Quote: "Hi Avinash,
I think he was talking about this video not the one from lanGuy.
http://www.youtube.com/watch?v=Sr8bIii1G7U" }-
Exactly... :ouch:
smage
March 7th, 2010, 11:36 AM
-{ Quote: "I'm a little confused about how that guy argues... yes, of course they get onto your PC. That's not what the sandbox is supposed to stop (as far as I know), it's supposed to stop the actions. :doubt: I closed the video after he argued that way when looking at the MBAM results. :ouch: :dry:" }-
I think the guy meant that if the same test was done using SandboxIE, if when we emptied the sandbox and ran a MBAM scan, it should find nothing.
Just my guess, not sure.
AvinashR
March 7th, 2010, 11:37 AM
-{ Quote: "Exactly... :ouch:" }-
Hey Hey, My mistake...But LanGuy's video is something opposite to my experience.
jmonge
March 7th, 2010, 11:41 AM
it is a good test people even if comodo is the most hated software here it is improving it defenses;D it is getting better despite the rougish looking:)
raven211
March 7th, 2010, 12:29 PM
-{ Quote: "Hey Hey, My mistake...But LanGuy's video is something opposite to my experience." }-
Don't worry about it. No offense taken or anything. :D
AvinashR
March 8th, 2010, 09:38 AM
-{ Quote: "Don't worry about it. No offense taken or anything. :D" }-
Thank You your highness. By the way anybody knows when Comodo is going to launch its updated (aka Final) release?
TrojanHunter
March 8th, 2010, 12:03 PM
-{ Quote: "
Remember it is Comodo's first attempt with sandbox, avast's first attempt was not a success either!
" }-
Then Comodo should of kept their software in Beta for longer.
IceCube1010
March 8th, 2010, 12:51 PM
I've been testing it out and the sandbox definitely has some issues. The FW, AV and D+ seem the same as their previous version 3.14 Less popups using FW and D+ in safe mode than before, so their whitelist has grown. When some programs went into the sandbox they didn't work correctly. I needed to manually add these files to My Own Safe files. The information in the help files looks great on paper but not sure if it's working correctly.
I think they are moving in the right direction but still have a way to go.
Ice
Watasha
March 8th, 2010, 02:20 PM
I may just live in the Twilight Zone here but I seem to remember when Avast 5 came out the Avast forums exploded with users that HATED it. These same users also hated the AIS which has failed miserably in many tests. Avira users went crazy about the update problems recently (I could go on). The point is that every company has these problems it just seems like Comodo is under a microscope. Every forum has a "what the heck is Comodo doing?" section it seems. I don't necessary disagree with what many of you are saying but we should all remember this when the next big thing comes out. Btw, Avast is now "God's gift" to AV's, Avira apparently fixed the update bug and so on....Comodo will be fine. Every major release is annoying.;)
burebista
March 8th, 2010, 03:13 PM
From egemen (http://forums.comodo.com/news-announcements-feedback-cis/rouges-can-very-easily-bypass-cis-4-even-if-sandboxed-t52483.0.html;msg375980#msg375980):
-{ Quote: "1 - When realtime scanner detects this malware, and shows the alert, cfp.exe crashes. This is a minor issue and will be fixed with the next update.
2 - Rogue DOES change some of the protected registry keys unless it is executed inside the sandbox manually. We have identified the bug and it is fixed. The bug affects previous version of CIS too.
We will hopefully release an update the next week latest which should address these issues too.
" }-
TerryWood
March 8th, 2010, 03:18 PM
Hi Watasha
Ordinarily I would agree with your last post, but, Comodo has a history of not listening and bringing to the market products too quickly.
There are many companies, some named in your last post that quietly beaver away and occasionally getting it wrong. The main thing that links these companies is that there is generally an orderliness to the way in which they work.
Comodo is an enigma, its all over the place, reflecting the volatility and unpredictability of its CEO, Melih. Comodo is free so effectively the proposition implicit in Melih's attitude is "Take it or leave it"
If people were paying for Comodo's products I am sure there would be less tolerance for the "antics" that ocurr. Despite all the hype about Comodo's long list of products, just how many are "best of breed". The A/Virus component after a number of years development still falls short of its peers.
Terry
sded
March 8th, 2010, 03:21 PM
One difference that I see is that Comodo released their product even with a known large backlog of issues and lots of recommendations by their testers that it was not ready yet. They also threw in some major bug fixes with no further beta testing, many of which didn't seem to work out. And a lot of their users seem to characterize the current state of 4 as a slightly broken 3 plus an undesirable sandbox that doesn't quite work. Their software practices just make some of those who have done it for a living roll their eyes. Ask about the Death Spiral of Bugzilla, for example. Others seem perfectly happy with it, but they are not as vocal.
As far as Avast! is concerned, the preponderance of the beta testers (including me) felt that avast! had reached diminishing returns for the diversity of the beta testers that they had so far, and that a first release was necessary to pull in those who don't generally show up for beta testing.and may have different configurations to deal with. I might have staggered the release of Pro and AIS, since they really got a lot less testing than free, but otherwise seemed reasonable. For the remaining issues, the Alwil staff seems to be taking a very proactive approach to the updates, with lots of interactions and requests for data, as well as trying to keep the users informed. Don't know whether users feel that way about Comodo; too much bluster to tell. As far as AIS, Alwil has always said they do not have a Conventional HIPS at all, don't sell a standalone firewall/HIPS at all, so are not aiming for the narrow type of testing done by standalone leak tests. Particularly by those that sort the tests into levels and stop evaluating as soon as you arbitrarily fail one of their arbitrary levels. So Alwil can brag instead about the 4.5 stars for the firewall they got from PC Magazine in the Suite tests as a suite element. What did Comodo get? Who has more readers in the real world (outside of forums ;) ).
Watasha
March 8th, 2010, 03:48 PM
I don't believe anybody is very worried about Alwil's firewall. That being said, my biggest problem with Comodo is exactly the opposite of what many people think the problem may be. Many people think the Comodo devs and Melih don't listen to users, I on the other hand think that in many cases they might listen too much! They don't concentrate on one thing for long enough because someone else has a complaint and they jump to that one, they don't finish a new application because the next user has a new app that he wants implemented. Does this make sense? This would explain alot of the "half fixes". Comodo users are very vocal, non-users are very vocal about Comodo. I appreciate y'alls viewpoint and it is valuable. CIS is free and yet it is just as capable IMO as the suites you must pay for. This, in my mind, means that SOMEONE at Comodo is doing SOMETHING right. ;D
sded
March 8th, 2010, 04:05 PM
Melih claimed to have ~400 developers at one time. If they are even slightly organized instead of trampling themselves, seems like things should be going a lt better. For those who have ever built large software systems, think about the issues of harnessing the masses to do these jobs efficiently and what you could do with a very small fraction of that. But since Melih uses this for advertising and self aggrandization, it doesn't need to be efficient. There was a large backlog of serious issues when I stopped using Comodo, It looks like more have been added than subtracted since then in order to add "gee-whiz" stuff. And I seem to notice an increased hostility by the mods to criticism. Even a new rule about "thread poisoning" LOL. I think Comodo did something right in the CFP3 upgrade, but lost the thread pretty quickly and is living off the residue-they were ~first to market with a good firewall/HIPS for Vista. And I don't give a rats ass about their being free-the aggro is more than I would tolerate. But if the atmosphere suits you, have fun-the product is still OK if you change some of the newer default stuff and turn other things off.
Watasha
March 8th, 2010, 04:11 PM
Believe me, if the mods were that hostile or aggressive about criticism, I would've been banned a long time ago.;D
sded
March 8th, 2010, 04:20 PM
You must not have poisoned any threads :) But my favorite part of the Comodo forum is still https://forums.comodo.com/forum-policy-violation-board-b111.0/ .
lordraiden
March 8th, 2010, 04:24 PM
Just to inform those who criticize comodo
I think that I have been the most critic with this release, but the truth is:
Comodo v4 is "stable", only have a big bug with the sandbox and will be fixed the next week, and other minor problems that do not affect to the security.
Because is stable they can release the final version when they want, is a decision of comodo.
The only thing that annoy some betatesters, I included, is the fact that the sandbox could be implemented much better (we give many ideas) so the user must have a 100% control and all the information about what is happening with the sandbox but I suppose that they will add all this in a future versions.
Not a big deal since you can always disable the sandbox until this happen.
All the expectation is now in 4.1 when they will add the behaviour blocker.
sded
March 8th, 2010, 04:25 PM
BTW, I see you are a user of System Cleaner. One of the early betas was released with a couple of KNOWN problems that if you did certain things, XP would no longer boot and you would have to restore your system. This is for a public beta, not an alpha. I posted that many thought system cleaners were not a good idea, and that maybe users should wait a while on this one. Melih was irate and gave me Hell about my disloyalty. Just an attitude check. ;)
TrojanHunter
March 8th, 2010, 04:29 PM
-{ Quote: " CIS is free and yet it is just as capable IMO as the suites you must pay for. " }-
It's Capable yes, but Comodo isn't quite there where user friendliness is concerned unfortunately and from what I've seen the Anti-virus could be better.
lordraiden
March 8th, 2010, 04:29 PM
-{ Quote: "BTW, I see you are a user of System Cleaner. One of the early betas was released with a couple of KNOWN problems that if you did certain things, XP would no longer boot and you would have to restore your system. This is for a public beta, not an alpha. I posted that many thought system cleaners were not a good idea, and that maybe users should wait a while on this one. Melih was irate and gave me Hell about my disloyalty. Just an attitude check. " }-
This is your version of the history anyway a beta is for be tested not used.
Brocke
March 8th, 2010, 04:30 PM
Egmen said that the beta for 4.1 will start maybe in 2 months time.
but next week they hope to release a bug fix update.
Brocke
March 8th, 2010, 04:31 PM
-{ Quote: "It's Capable yes, but Comodo isn't quite there where user friendliness is concerned unfortunately and from what I've seen the Anti-virus could be better." }-
the AV is on the list to be alot better.
lordraiden
March 8th, 2010, 04:32 PM
-{ Quote: "It's Capable yes, but Comodo isn't quite there where user friendliness is concerned unfortunately and from what I've seen the Anti-virus could be better." }-
Could you tell us any HIPS friendliness please?
They are trying to make a good AV but on the contrary to most of the suites they give you the option to install it or not, so if you dont like the comodo AV you dont need to install it, the world is wonderfull ;D
sded
March 8th, 2010, 04:34 PM
What are the plans for between now and the 4.1 beta then?
Scoobs72
March 8th, 2010, 04:35 PM
-{ Quote: "Could you tell us any HIPS friendliness please?
" }-
User-friendly HIPS? Online Armor.
lordraiden
March 8th, 2010, 04:36 PM
-{ Quote: "What are the plans for between now and the 4.1 beta then?" }-
I suppose bugfixes and add features to the sandbox, everything is going to be focus on the sandbox before 4.1
lordraiden
March 8th, 2010, 04:39 PM
-{ Quote: "User-friendly HIPS? Online Armor." }-
I have used OA and I got the same amount of popups for the same unknow exe's, the only difference is that OA had more trusted applications.
Now you dont have popups in Comodo and the trusted applications is increasing everyday so they care about User-friendly or not? now is the most user-friendly HIPS in the market.
TrojanHunter
March 8th, 2010, 04:40 PM
-{ Quote: "Could you tell us any HIPS friendliness please?
They are trying to make a good AV but on the contrary to most of the suites they give you the option to install it or not, so if you dont like the comodo AV you dont need to install it, the world is wonderfull ;D" }-
I don't want to turn this into a Vs Debate, but the average payware suite still has the advantage of being easier to understand for the mainstream. Comodo is improving here sure, but I still don't think my mum would understand...get my drift. User friendliness is what I was getting at. It can be as capable as a payware suite in the right hands, but appealing to the same market is completely different.
As for the AV eventually being decent I'll believe it when I see it :isay:
LagerX
March 8th, 2010, 04:44 PM
CIS 4 is working well for me. No problems what so ever.
Remember: CIS SB is not ordinary sandbox. It's sophisticated and has huge code base in order to cooperate with other parts of CIS. This said, I think there is some time needed in order to make it work as it should. At this point, I see no problem besides it's "leaking" in some cases (bug/vulnerability) :)
Peace.
sded
March 8th, 2010, 04:48 PM
-{ Quote: "This is your version of the history anyway a beta is for be tested not used." }-
Really? Known fatal errors that destroy your system in a beta version? Not on my watch!
lordraiden
March 8th, 2010, 04:49 PM
-{ Quote: "Really? Known fatal errors that destroy your system in a beta version? Not on my watch!" }-
So where is the problem? KNOWN fatal errors in a beta version
They warn this errors when they release the beta, the problem is noob users testing beta software.
aigle
March 8th, 2010, 05:02 PM
I think there are enough good sandboxes already in the market and I will like to cover sandboxing stuff with some other software rather than CIS, as an extra layer.
I am really waiting for behav blocker, it might be very interesting if they come out with something clever.
Watasha
March 8th, 2010, 05:39 PM
-{ Quote: "I don't want to turn this into a Vs Debate, but the average payware suite still has the advantage of being easier to understand for the mainstream. Comodo is improving here sure, but I still don't think my mum would understand...get my drift. User friendliness is what I was getting at. It can be as capable as a payware suite in the right hands, but appealing to the same market is completely different.
As for the AV eventually being decent I'll believe it when I see it :isay:" }-
You know there is a difference between "user friendly" and "idiot proof software for lazy people"::) . I think a lot of people need to learn a bit about security before using a computer in the first place. Think about it, I know people who can do ANYTHING on a PC including a lot of stuff I can't do but they can't set up a firewall?:blink: Gimme a break. Yeah sure it shouldn't be rocket science but it shouldn't have to appeal to the brain-dead either. If you want it to be that simple use the Windows FW and MSE.:P
ratwing
March 8th, 2010, 05:40 PM
-{ Quote: "Really? Known fatal errors that destroy your system in a beta version? Not on my watch!" }-
Agreed.
I am a little confused as to the difference between "test" and 'use" in this context..
How do you use a "System Cleaner"?
You run it to "clean" your system.
How do you test a system cleaner?
You run it to "clean" your system.
If the very act of running the software trashs the hopefully non-production test machine,If the bug that caused the trashing was known,the only testing being done is the lethality of the software.
Of course you could disable the "system cleaning" function of the "System Cleaner".
andyman35
March 8th, 2010, 05:54 PM
-{ Quote: "The only thing that annoy some betatesters, I included, is the fact that the sandbox could be implemented much better" }-
well said and I agree entirely that the poor implementation of the sandbox (so far at least) is a major point of irritation for me.It has been discussed at length for about 18 months around the forum and creating a 'Sandboxie-like' module really shouldn't be impossibly difficult given D+ overall control of the system.
Brocke
March 9th, 2010, 12:50 AM
Good news on the update
-{ Quote: "
Quotes by Egemen
hi Guys,
I have observed 2 issues.
1 - When realtime scanner detects this malware, and shows the alert, cfp.exe crashes. This is a minor issue and will be fixed with the next update.
2 - Rogue DOES change some of the protected registry keys unless it is executed inside the sandbox manually. We have identified the bug and it is fixed. The bug affects previous version of CIS too.
We will hopefully release an update the next week latest which should address these issues too.
Thank you very much for the feedback.
Egemen" }-
TrojanHunter
March 9th, 2010, 01:00 AM
-{ Quote: "You know there is a difference between "user friendly" and "idiot proof software for lazy people"::) . I think a lot of people need to learn a bit about security before using a computer in the first place. Think about it, I know people who can do ANYTHING on a PC including a lot of stuff I can't do but they can't set up a firewall?:blink: Gimme a break. Yeah sure it shouldn't be rocket science but it shouldn't have to appeal to the brain-dead either. If you want it to be that simple use the Windows FW and MSE.:P" }-
I've had to help people before now on installing the simplest things like an Anti-virus on their computer because they genuinely didn't know. If everyone in the world had the enthusiasm for security like the people on Wilders have, then the Internet would be a much safer place probably, but that's not reality unfortunately. Whether you like it or not User friendly/Idiot proof software is what is going to sell to the mainstream. Being user friendly doesn't always have to be bad for security either because look at what Kaspersky and Symantec have done to their security suites. Comodo still has some way to go in respect to this.
Watasha
March 9th, 2010, 01:23 AM
I'm not saying they have to be security professionals (I'm certainly not) but have you ever used Comodo? It ain't THAT complicated. Btw, I have read about quite a few problems with NIS so that may not be the best example. Anyway, if someone has no comprehension/common sense then no amount of software will keep them safe, bottom line. If you can't run CIS then I don't know how you can do anything on a PC, which reminds me; My 9yr. old sister can use the PC with Comodo just fine.:o ;D
ratwing
March 9th, 2010, 01:52 AM
That is really a very nice testimonial,and in keeping with that spirit of civility,it seems that many of those who are pegged as anti Comodo,are in fact simply hoping for the bug fixes,and improvements they see as necessary to allow the software to reach its full potential.
Others myself included,Have made the decision that one,We simply do not trust the Comodo development process,and two,we simply do not trust the integrity of the company.
Surely there is room for all respectful voices,even if the content is disliked by some.
It might be pointed out also that blaming Melih,is not the answer.
Melih is no more Comodo,than Bill Gates was Microsoft.
All aspects of corporate culture can not be laid at the head of the CEO,
even if as a practical matter,the "buck stops there".
lordraiden
March 9th, 2010, 02:55 AM
Why dont you trust in comodo? they sell your data or something?
Other companies pay for be tested by 3rd parts and they score always in first position, this give you more trust?
Brocke
March 9th, 2010, 03:02 AM
while i only used CIS 4 never did use 3. but CIS4 looking promising. yes they are making a quite suite for people who want a suite like norton where the app makes more if not all the decisions for you. they have grown greatly on there whitelisting. which is nice, because i hate having to surf the internet or play a game and have a ton of popups.
good for them.
bellgamin
March 9th, 2010, 03:07 AM
-{ Quote: "Could you tell us any HIPS friendliness please?" }-On a 10-scale (10 being perfect) friendliness of Online Armor ~7.5; Defense Wall ~9; Pi ~3.14159
-{ Quote: "Other companies pay for be tested by 3rd parts and they score always in first position" }-That is untrue. All those tested by AV-C pay for the privilege, but NOT all are in first place. Same is equally true for AV-test.com et alia.
lordraiden
March 9th, 2010, 03:15 AM
-{ Quote: "On a 10-scale (10 being perfect) friendliness of Online Armor ~7.5; Defense Wall ~9; Pi ~3.14159
That is untrue. All those tested by AV-C pay for the privilege, but NOT all are in first place. Same is equally true for AV-test.com et alia." }-
I was not talking about AV-test or AV-C, remember those test paid by norton...
Or the virus bulletin, have any sense get the 100% (the 90% of the AV got it every month) stamp in almos all the test, even knowing that we only need to spend 5 minutes finding for the malware that can bypass the AV, Is just marketing, like the ISO 9000 for the companies.
ratwing
March 9th, 2010, 03:56 AM
-{ Quote: "Why dont you trust in comodo? they sell your data or something?
Other companies pay for be tested by 3rd parts and they score always in first position, this give you more trust?" }-
It really does not matter if I trust Comodo or not,as I do not use their software.
Some would say that disqualifies me for expressing and opinion.
I say that is not in the Forum rules.
Do you really want to go into the security certs for malware domains,the Ask/resurrected as HopSurf stuff?(there is of course more*)
If you do,I will not bite.
Suffice that you trust them,and I don't.
Maybe you should keep your lovers quarrels on the beloveds forum.
*Do you know Mad Max?
lordraiden
March 9th, 2010, 07:19 AM
-{ Quote: "It really does not matter if I trust Comodo or not,as I do not use their software.
Some would say that disqualifies me for expressing and opinion.
I say that is not in the Forum rules.
" }-
Who said that? poor boy :'( are you ok?
-{ Quote: "Maybe you should keep your lovers quarrels on the beloveds forum." }-
By now I still cant love a company/software if you can, I am so sorry for you
TrojanHunter
March 9th, 2010, 08:02 AM
-{ Quote: "I'm not saying they have to be security professionals (I'm certainly not) but have you ever used Comodo?
It ain't THAT complicated. Btw, If you can't run CIS then I don't know how you can do anything on a PC" }-
I wasn't speaking about me personally not being able to run CIS, but the fact it's more advanced than your average payware suite.
I've used Comodo numerous times including the new version because I like to test them, but I wouldn't consider replacing my current solution with it...well not yet anyhow.
jmonge
March 9th, 2010, 08:07 AM
and what is your current set up trojanhunter?
kjdemuth
March 9th, 2010, 09:37 AM
-{ Quote: "I wasn't speaking about me personally not being able to run CIS, but the fact it's more advanced than your average payware suite.
I've used Comodo numerous times including the new version because I like to test them, but I wouldn't consider replacing my current solution with it...well not yet anyhow." }-
What "facts" are you making that statement on? I wouldn't say that is more advanced for average payware....definitely for most freeware.
pnbalaji
March 9th, 2010, 09:59 AM
-{ Quote: "I'm not saying they have to be security professionals (I'm certainly not) but have you ever used Comodo? It ain't THAT complicated. Btw, I have read about quite a few problems with NIS so that may not be the best example. Anyway, if someone has no comprehension/common sense then no amount of software will keep them safe, bottom line. If you can't run CIS then I don't know how you can do anything on a PC, which reminds me; My 9yr. old sister can use the PC with Comodo just fine.:o ;D" }-
Hi,
This is my first post on this topic.
I would like to disagree with the statement "It ain't THAT complicated". I would say it is somewhat complicated for an average user. I never tried comodo before because of the test results of the antivirus part, but CIS V4 looks promising (from the youtube video of languy99) and I decided to give it a try. I have installed this in my laptop. Immediately after the install, comodo sandboxed few of the items like syntray, vpnui etc. syntray is a tray utility for an excellent freeware text editor called syn and vpnui is the Cisco VPN client software that I use to connect to my work network. Comodo should not have sandboxed this. May be comodo's white list has to grow. I can take actions on these sandboxed items, since I know what each component is doing. However, my wife doesn't know anything about these components and if she uses my laptop, she need to call me for every comodo's popup. I don't know how many calls she need.
Having said that, I still love CIS V4 and I continue to use it on my laptop. I have immunet protect also running along with CIS. Comodo has to improve before I start using it on my desktop.
Thanks,
Balaji.
TrojanHunter
March 9th, 2010, 10:27 AM
-{ Quote: "and what is your current set up trojanhunter?" }-
Kaspersky internet security 2010 currently
raven211
March 9th, 2010, 10:37 AM
CIS4 does work much better on Windows 7 64-bit. :) Running it now and like how it handles things. ;)
Edwin024
March 9th, 2010, 11:42 AM
You are not alone on this :)
arjunned
March 9th, 2010, 11:55 AM
yup same here. all running well here too. :)
mantra
March 9th, 2010, 02:54 PM
-{ Quote: "Hi Everyone,
Egemen" }-
thanks
does the free firewall include the memory firewall , the anti buffer underunn feature?
raven211
March 9th, 2010, 02:59 PM
-{ Quote: "You are not alone on this :)" }-
Haha! Windows XP was just a big mess though. ;D
bellgamin
March 9th, 2010, 04:42 PM
-{ Quote: "I was not talking about AV-test or AV-C, remember those test paid by norton..." }-Nonsense! Each tested program pays its own way. Norton does NOT pay for any products tested except its own.
If you persist in posting out & out nonsense, that's why Wilders has an IGNORE button.
I have read your other posts. Outside of this Comodo thread, your other posts are well thought out. In this thread, you seem to be letting your fanship of Comodo overtake your otherwise good judgment.
In point of fact, I basically like what Comodo is trying to accomplish, but I won't touch their products for one main reason -- the aggressive fan-boyism of their forum, and the rant-posts by people from that forum who chose to afflict Wilders forum with their rants.
Watasha
March 9th, 2010, 05:01 PM
-{ Quote: "thanks
does the free firewall include the memory firewall , the anti buffer underunn feature?" }-
The firewall or CIS?
lordraiden
March 9th, 2010, 05:08 PM
-{ Quote: "Nonsense! Each tested program pays its own way. Norton does NOT pay for any products tested except its own.
If you persist in posting out & out nonsense, that's why Wilders has an IGNORE button.
I have read your other posts. Outside of this Comodo thread, your other posts are well thought out. In this thread, you seem to be letting your fanship of Comodo overtake your otherwise good judgment.
In point of fact, I basically like what Comodo is trying to accomplish, but I won't touch their products for one main reason -- the aggressive fan-boyism of their forum, and the rant-posts by people from that forum who chose to afflict Wilders forum with their rants." }-
There is a big difference between AVC where all the vendors paid for be tested and when norton or any other pays an "unknow" company for test their AV against other AV's, this is what I was saying, do you see the difference?
Could you tell me where I seem a Comodo fan? I have been criticizing them in most of my posts here and also in their forum:
http://forums.comodo.com/news-announcements-feedback-cis/bug-by-design-in-v4-vulnerable-by-default-t52440.0.html
http://forums.comodo.com/news-announcements-feedback-cis/are-comodo-betatesters-doing-seriously-their-job-t52461.0.html
http://www.wilderssecurity.com/showpost.php?p=1634339&postcount=115
I have made more than 15 posts in comodo forum since the final v4 was release and none of them has been for say something good about comodo.
Watasha
March 9th, 2010, 05:10 PM
-{ Quote: "Hi,
This is my first post on this topic.
I would like to disagree with the statement "It ain't THAT complicated". I would say it is somewhat complicated for an average user. " }-
It always makes me laugh when I see someone jump on the computer and really go to town, they'll fly through this app and that app, download and upload, extract and set up God knows what in the blink of an eye and never ask a question one. Then you show (or even mention) PC security, or God forbid Comodo, and their eyes glaze over they start to drool and their pulse....:wacko: well you get the point. I'm not computer genius by any means but if you aren't willing to spend a few minutes learning how to prevent PC meltdown I don't know what to tell you. I don't want software that requires a degree to understand, but I don't want "PC security for dummies" either.
All this being said, I appreciate your viewpoint and a non-user can make very valid points as well. As with anything else, sometimes we can't see the forest for the trees.;D
bellgamin
March 9th, 2010, 05:30 PM
-{ Quote: "There is a big difference between AVC where all the vendors paid for be tested and when norton or any other pays an "unknow" company for test their AV against other AV's, this is what I was saying, do you see the difference?" }-Okay -- next time try be a little more precise. It sounded like you were bad-mouthing ALL AV tests. Some are good. Some are questionable -- I can agree with that, but not as a basis for bad-mouthing Norton, or any other particular AV product.
-{ Quote: "I have been criticizing them in most of my posts here and also in their forum:
http://www.wilderssecurity.com/showpost.php?p=1634339&postcount=115" }-Okay, I stand corrected. I overlooked that Wilders post of yours. As to your Comodo posts -- I don't visit there very often any more -- unless I am doing penance for some truly horrible sin. ;)
ratwing
March 9th, 2010, 05:30 PM
-{ Quote: "Who said that? poor boy :'( are you ok?
By now I still cant love a company/software if you can, I am so sorry for you" }-
Very well,thank you,And You?
You can love anything you want too.(can we even choose what we love??)
But in a open democratic Forum,you can not expect all others to necessarily love it as much as you do.
You came complaining about their current release.
Then you are angry when other people do not praise Comodo.
You are acting like a high-school boy who runs to his buddies with his girlfriend problems,then wants to fight when some of them tell him she is no good.
lordraiden
March 9th, 2010, 05:43 PM
-{ Quote: "
But in a open democratic Forum,you can not expect all others to necessarily love it as much as you do." }-
Where I have written that comodo is the best and bla bla bla and I love them?
But dont worry I dont care which software do you love xD
-{ Quote: " You came complaining about their current release.
Then you are angry when other people do not praise Comodo.
" }-
Where am I angry? please tell me because I think that you are reading a different forum, I just asked you why you didnt trust in comodo...
So please stop to make up things that only are in your head
ratwing
March 9th, 2010, 05:47 PM
And you have the last word.
regards,
ratwing
lordraiden
March 9th, 2010, 05:49 PM
-{ Quote: "And you have the last word.
regards,
ratwing" }-
Please dont be angry I think that we had a big misunderstanding here, my english is not perfect and sometimes I can be a bit "basic" when I write.
ratwing
March 9th, 2010, 05:55 PM
Not at all. Absolutely no hard feelings.
If we all agreed about software,the "What is your security setup these days?" thread would not be ten miles long.
You English is very good by the way.
raven211
March 9th, 2010, 06:27 PM
Hmm... this is a weird one... why is Windows FW still enabled with CIS4 installed? :-\ :doubt:
Brocke
March 9th, 2010, 06:31 PM
-{ Quote: "Hmm... this is a weird one... why is Windows FW still enabled with CIS4 installed? :-\ :doubt:" }-
im not sure either i have disabled it. most software firewalls fail to it that.
odd i know .
PRUHDG
March 9th, 2010, 08:27 PM
-{ Quote: "Hmm... this is a weird one... why is Windows FW still enabled with CIS4 installed? :-\ :doubt:" }-
From my experience CIS has always run along side windows fw.
Watasha
March 9th, 2010, 08:35 PM
-{ Quote: "From my experience CIS has always run along side windows fw." }-
You have 2 firewalls running at the same time????
PRUHDG
March 9th, 2010, 08:45 PM
-{ Quote: "You have 2 firewalls running at the same time????" }-
Yes, they don't conflict.
Watasha
March 9th, 2010, 08:51 PM
Whether they do or they don't....why?
iTrendsNET
March 10th, 2010, 01:35 AM
-{ Quote: "Whether they do or they don't....why?" }-
I agree with your point and personally, I manually turn Windows Firewall off via Admin Services when I am using something else. That said, Comodo does not turn off Windows Firewall when installed. I think I have read of multiple other cases here and elsewhere that other third party firewalls leave Windows FW running. One reason I have read for this is Windows FW must be running for certain other services, such as Internet Connection Sharing to work.
lordraiden
March 10th, 2010, 04:45 AM
-{ Quote: "Hmm... this is a weird one... why is Windows FW still enabled with CIS4 installed? :-\ :doubt:" }-
The same happens with Outpost, I dont know why.
raven211
March 10th, 2010, 04:48 AM
-{ Quote: "The same happens with Outpost, I dont know why." }-
Yes, I mean there must be a really important reason, yet I've not read one from the devs. :-\
JamesFrance
March 10th, 2010, 05:35 AM
-{ Quote: "
In point of fact, I basically like what Comodo is trying to accomplish, but I won't touch their products for one main reason -- the aggressive fan-boyism of their forum, and the rant-posts by people from that forum who chose to afflict Wilders forum with their rants." }-
I think that is the nonsense. On the whole the Comodo forum members are very helpful to those asking questions, especially several of the moderators. That is the purpose of such a forum surely.
There have been many more anti Comodo rants on this forum than pro.
Hardly a valid reason not to use a product surely?
Victek123
March 10th, 2010, 01:18 PM
-{ Quote: "
Hardly a valid reason not to use a product surely?
" }-
.
Not a valid reason, but very annoying none the less. Mindless support and thoughtless criticism are both equally unhelpful and make it harder to evaluate a product.
Edwin024
March 10th, 2010, 01:41 PM
-{ Quote: "Yes, I mean there must be a really important reason, yet I've not read one from the devs. :-\" }-
And what did you do? Keep the Windows Firewall on or did you turn it off?
Brocke
March 10th, 2010, 01:43 PM
-{ Quote: "And what did you do? Keep the Windows Firewall on or did you turn it off?" }-
i turned mine off via services.
mantra
March 10th, 2010, 01:49 PM
is compatible with nod32 and avira?
on my desktop i have nod installed
on my laptop i have avira personal
thanks
Brocke
March 10th, 2010, 01:52 PM
version 4.1 is said to have full vitalization from what the mods on the forums are saying.
which will be great to see added.
Watasha
March 10th, 2010, 01:55 PM
-{ Quote: ".
Not a valid reason, but very annoying none the less. Mindless support and thoughtless criticism are both equally unhelpful and make it harder to evaluate a product." }-
Have you ever been to Alwil's forum? Avira? God forbid SYMANTEC? Every forum for every company has fanboy's. You are right though, there is a difference in the Comodo forum; it's loose, they have a sense of humor, and they don't have a stroke if you stray off-topic every now and again (which I tend to do here and there):dry: . Anyway, There is a very good reason the Comodo forum is one of the most active IMO. Whether or not you like the products, the forum is a totally different animal.
Ibrad
March 10th, 2010, 02:40 PM
I got to many different security forums but you are saying the Comodo forum is loose? I would rather have my company's security forum strict and professional. Yeah it may be fun to have a "fun" security forum but the forum is there to help solve your problems not joke around.
(I am not saying that the Comodo forum can't solve your problems, I have been to it a few times and they got user's that are good at fixing the problems. I am just wondering about your post)
Watasha
March 10th, 2010, 02:47 PM
-{ Quote: "I got to many different security forums but you are saying the Comodo forum is loose? I would rather have my company's security forum strict and professional. Yeah it may be fun to have a "fun" security forum but the forum is there to help solve your problems not joke around.
(I am not saying that the Comodo forum can't solve your problems, I have been to it a few times and they got user's that are good at fixing the problems. I am just wondering about your post)" }-
My post meant exactly what it said. If you're on a thread of a user that needs help, he gets help. If you're on a "grey area" thread, the entire forum doesn't fly into a tiz if someone says something the "mods" don't agree with or someone strays a bit off-topic. You can take yourself too seriously even when you have a point or a question. "Loose" doesn't necessarily mean "out of control".
bellgamin
March 10th, 2010, 04:46 PM
-{ Quote: "Hardly a valid reason not to use a product surely?" }-If CIS were the only fish in the ocean, then I would possibly use it. But there are numerous other apps of equal or greater effectiveness, with users who are more civil & helpful than is the case for several denizens of the Comodo forum. So why should I subject myself to the fan-boi aggro attendant to CIS?
Watasha
March 10th, 2010, 05:00 PM
-{ Quote: "If CIS were the only fish in the ocean, then I would possibly use it. But there are numerous other apps of equal or greater effectiveness, with users who are more civil & helpful than is the case for several denizens of the Comodo forum. So why should I subject myself to the fan-boi aggro attendant to CIS?" }-
I totally agree, if I were you I would subject myself to the "fan-boi aggro attendant" of ________. (insert any other "fish")
Those "denizens" exist on every single forum I have ever been to. Security forums breed this type of user by the very nature of the product. "Numerous other apps"? Numerous other forms with numerous other "fan-boi aggro attendants". :thumb: ::)
raven211
March 10th, 2010, 06:04 PM
-{ Quote: "And what did you do? Keep the Windows Firewall on or did you turn it off?" }-
I left it on since I'm not that FW dependent anyway. :P
CogitoTesting
March 10th, 2010, 07:05 PM
-{ Quote: "My post meant exactly what it said. If you're on a thread of a user that needs help, he gets help. If you're on a "grey area" thread, the entire forum doesn't fly into a tiz if someone says something the "mods" don't agree with or someone strays a bit off-topic. You can take yourself too seriously even when you have a point or a question. "Loose" doesn't necessarily mean "out of control"." }-
Is A vs B allowed there? ;D
Thanks.
Watasha
March 11th, 2010, 12:19 AM
-{ Quote: "Is A vs B allowed there? ;D
Thanks." }-
Actually, it is.;D
I'm honestly still on the fence about this new V4, I've gotten mad and threatened to uninstall (I may yet do it), but I do honestly like the forum there and (most) of the people on it.;)
burebista
March 11th, 2010, 01:37 AM
-{ Quote: "If CIS were the only fish in the ocean, then I would possibly use it." }-
Please give me other free Seven x64 FW and HIPS fish in the ocean and I'll gladly try them.
I'm not a hardcore security paranoiac freak and I've tried to date PrivateFirewall, Webroot Firewall, PCTools Firewall, Rising Firewall, Seven native firewall (with and without Windows 7 Firewall Control), Outpost free and even Pro (I won a lifetime license from one of their contest), Zone Alarm and Threatfire. I really want to try Online Armor free but I have to wait a bit.
After a while I come back to Comodo. I dunno why but I feel very comfortable with it.
As a home user I use only CIS (FW and D+) and CTM (with regular snapshots). IMO overkilll combination but is trendy to have some overhelming security products at home. ;D
lordraiden
March 11th, 2010, 04:44 AM
A little test of Comodo:
https://forums.comodo.com/news-announcements-feedback-cis/rouges-can-very-easily-bypass-cis-4-even-if-sandboxed-t52483.0.html;msg377207#msg377207
Toobys
March 11th, 2010, 04:47 AM
-{ Quote: "A little test of Comodo:
https://forums.comodo.com/news-announcements-feedback-cis/rouges-can-very-easily-bypass-cis-4-even-if-sandboxed-t52483.0.html;msg377207#msg377207" }-
I really am quite surprised on the AV detection. It's got a really nice decent detection rate at the moment.
As for the automatic sandbox, it works. There are still bugs to be fixed, but it still works for other malware tested. Honestly, until you test for your self, don't even complain on non-fact based info/mis leading stuff. :)
Tooby.
vBulletin® Copyright ©2000-2012, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2012, Wilders Security Forums