Comodo Memory Firewall Final Released

[Coolio10]

http://www.memoryfirewall.comodo.com/

[Perman]

Hi, folks:

Just installed 2 hours ago on this Intel duo 2 core processor, WinXP MCE, sp3.

Seems running very smoothly; very little impact on system resources, no noticeable slowdowns on Internet surfing, no traceable drags on system performance. I do not even notice its presence except an icon in system tray area.

Likely to be a nice companion to other security apps (transitional and revolutionary, all alike)

Thanks for the info, and congratulate to Comodo folks.

Take care.

[Tarq57]

Just installed it. XP Home SP2. Avast, SpywareTerminator, and CFP 2.4.
As above, barely noticeable.

[FadeAway]

I don't have any technical knowledge when it comes to buffer overflow
exploits. My machine supports DEP and it's turned on. Do I gain anything
from installing Comodo?

[Cerxes]

Originally Posted by FadeAway

...My machine supports DEP and it's turned on. Do I gain anything from installing Comodo?

If you are using Win XP then DEP provides no protection against return-to-libc attacks, which CMF detects.

/C.

[FadeAway]

Originally Posted by Cerxes

If you are using Win XP then DEP provides no protection against return-to-libc attacks, which CMF detects.

/C.

Yes, running XP 32 here. I'll give it a try. Thanks!!

[simmikie]

Originally Posted by Cerxes

If you are using Win XP then DEP provides no protection against return-to-libc attacks, which CMF detects.

/C.

while looking into Threatfires buffer overflow protection, i ran into this paragraph on their blog. so in support of what has already been said, here it is:

this exploit works on Vista systems when IE6 and IE7 do not have the "Data Execution Prevention" feature enabled. But techniques to disable the DEP check even when it is enabled have been published as well.

so mayhap CMG is worth taking a closer look at afterall.


Mike

[Cerxes]

So far I´ve discovered a smaller memory conflict between CMF and a Windows systemfile that handles updates. The solution is simple, just exclude the file in CMF:s application list:

C:\Windows\system32\wuauclt.exe

/C.

[Rasheed187]

I´ve asked it on the CMF forum, and luckily it´s not incompatible with SSM and ZAP, upon install it will warn you about this, but it´s because they have used the same installer as for Comodo Firewall. There also don´t seem to be any visible conflicts on my machine, so it´s looking good.

Now I only need to know if this tool is really effective or not, according to LUSHER it is not, apparently it´s explained on the Threatfire blog why this is the case, but I couldn´t find it. But Solcroft says that TF can´t protect against some type of BO´s itself. I think it would be useful for the Comodo team to create some new tests, and with that I mean real POC´s who can all be used in real life attacks.

[Pedro]

Rasheed: Slipfest. Then again DEP can grab it also i think.

[AshG]

I installed CMF. When I rebooted, I received a message box that said Windows had been altered without authorization and it would no longer be able to verify that I was licensed. It also refused to open the Control Panel or Computer - Properties dialogue.

Attempts to uninstall CMF did not work when using the Uninstall link in the program's Start Menu folder. It appeared to uninstall, but would reappear at next book. The program finally uninstalled correctly through CCleaner's Tools - Uninstall menu and the Windows message has not returned since.

I am using Vista Ultimate, with NOD32v3 for malware prevention. It returned the same error with the previous poster's file listed in the exclusion box of CMF.

[pettyracing]

Is this firewall used in place of comodos personal pro f/w? Are there now 2 distinct and separate f/w available?

I would not think it would be in conjuction with it. Is there an advantage to using one vs. the other.

I have a Zyxel route with SP1 stateful inspection f/w. Any idea which would work the best?

Thanks.

[jp10558]

Well, they do different things, this protects against buffer overflows, Comodo Firewall Pro 3 protects against anauthorized network traffic, program execution or file write...

[Tarq57]

Originally Posted by pettyracing

Is this firewall used in place of comodos personal pro f/w? Are there now 2 distinct and separate f/w available?

I would not think it would be in conjuction with it.

As said above, they do different things. So, yes, in conjunction with it. (or another firewall.)
Perhaps Comodo could have named it slightly differently...you can see how confusion is likely to arise....maybe something like Comodo Memory Protect, or Guard, or something.

Does anyone know how to get rid (permanently) of the balloon tip above the Systray at startup?

[dmenace]

Have a look at the following pages:

They show you in detail which buffer overflows various softwares have stopped and the benefits of using "Buffershield" instead of hardware DEP.

http://www.sys-manage.com/PRODUCTS/B...3/Default.aspx

https://www.sys-manage.com/PRODUCTS/...6/Default.aspx <---- DEP Test

http://www.sys-manage.com/BufferShie...1/Default.aspx

I wonder how Comodo will fair in the above prevented exploits page!!!

[Perman]

Hi,folks:

I d/l DEP test from the 2nd link provided by previous post.

Comodo memory firewall has FAILED in all five categories.

Any comments?

[innerpeace]

Originally Posted by Tarq57

~snip~
Perhaps Comodo could have named it slightly differently...you can see how confusion is likely to arise....maybe something like Comodo Memory Protect, or Guard, or something. ~snip~

Very confusing, especially since they already offer a real firewall. Forever people have been telling us to not run two firewalls or two Anti-viruses or etc... I guess they don't know the same people we do .

[dmenace]

I've downloaded the test as well and yeah Comodo fails all five DEP tests.

Obviously Comodo is a relative newcomer in this segment and thus has lots of room for improvement. My only worry is now it will give users a false sense of security...

Will be interesting to see how Prevx and DefensePlus fare...

[dmenace]

A great free alternative to Comodo Memory Firewall is Wehntrust Home User. However this is heaps more powerful and free.

Could someone test it with the DEP test mentioned above.

Be warned though WehnTrust creates BSOD with DefenseWall.

Link: http://www.wehnus.com/products.pl

[Perman]

Hi,

WehnTrust 1.0,0.9 ? Forget it;

I tested it with a testing machine, It rendered WinXP sp3 unbootable after first reboot, I have to use safe mode to reach recovery commander of system suite 8 to restore .

Do not even thinking about trying it, unless you are well prepared for the worst, besides, that version was released way way back in mid 2006, an aged app, no flavour any more, and could be poisonous. Take care.

[gerardwil]

Originally Posted by Perman

Hi,

WehnTrust 1.0,0.9 ? Forget it;

I tested it with a testing machine, It rendered WinXP sp3 unbootable after first reboot, I have to use safe mode to reach recovery commander of system suite 8 to restore .

Do not even thinking about trying it, unless you are well prepared for the worst, besides, that version was released way way back in mid 2006, an aged app, no flavour any more, and could be poisonous. Take care.

I tried it also but without probs here. XP SP2

Gerard

[Perman]

Originally Posted by gerardwil

I tried it also but without probs here. XP SP2

Gerard

Hi, interesting. Good for you.

Perhaps mine is primarily an apps compatibility issue. Comodo Memory Firewall is OK here. just can not please everyone, eh? Take care.

[Perman]

Hi, folks;

If I use the BO tester provided by Comodo, Comodo Memory Firewall passed the first two of three tests. Just wonder are these testers impartial at all ?

[Cerxes]

Originally Posted by Perman

...Just wonder are these testers impartial at all ?

I hardly think so since they tailoring the tests to let their own products pass at first hand.

/C.

[WilliamP]

I have SSM and Comodo Firewall [Without Defense+] activated. I had a couple of minor problems and found that even though it showed Defense was inactive it wasn't. I think I have it fixed now. I have been interested in this Memory Firewall ,and did have it installed for a short time with no problems. I want to know is it really effective in the real world with BO's . People with Vista should stay away. I have read of the software licenses being lost. Check on Comodo Forum.