COMODO Internet Security 5.x Thread

Discussion in 'other anti-malware software' started by Mops21, Jul 4, 2011.

Thread Status:
Not open for further replies.
  1. andyman35

    andyman35 Registered Member

    Joined:
    Nov 2, 2007
    Posts:
    2,336
    Yes the automatic sandbox will now equate to the manual one.
     
  2. Tyrizian

    Tyrizian Registered Member

    Joined:
    Apr 26, 2012
    Posts:
    2,839
    I'm glad they decided to do that.
     
  3. Solarlynx

    Solarlynx Registered Member

    Joined:
    Jun 25, 2011
    Posts:
    2,015
    AFAIK CCE isn't going to be integrated with the CIS 6 as COMODO's policy for CIS is first of all prevention and CCE is only for cleaning.
     
  4. wasgij6

    wasgij6 Registered Member

    Joined:
    Mar 29, 2011
    Posts:
    321
    if you look at the first screenshot under advanced tasks it says "Clean this endpoint - Run Comodo Cleaning Essentials tool to clean persistent infections"
     
  5. KelvinW4

    KelvinW4 Registered Member

    Joined:
    Oct 11, 2011
    Posts:
    1,199
    Location:
    Los Angeles, California
    Yeah, maybe that is for any threats that got through the system. However, it doesn't seem possible huh? :D
     
  6. Solarlynx

    Solarlynx Registered Member

    Joined:
    Jun 25, 2011
    Posts:
    2,015
    Sorry for my ignorance - what screenshots?
     
  7. a256886572008

    a256886572008 Registered Member

    Joined:
    Oct 26, 2007
    Posts:
    103
  8. Solarlynx

    Solarlynx Registered Member

    Joined:
    Jun 25, 2011
    Posts:
    2,015
    Thank you.
    Really, there CCE.
    I never had to use it but I really love the KillSwitch there.
     
  9. Brocke

    Brocke Registered Member

    Joined:
    Mar 16, 2008
    Posts:
    2,306
    Location:
    USA,IA
    I noticed when you manally update CIS the Time and Date will change and state that the Database has been updated on the exact same time you checked even if there is no database update.

    isnt that alittle misleading and when CIS checks even if there isnt a update it will still show the time it checked.
     
  10. Solarlynx

    Solarlynx Registered Member

    Joined:
    Jun 25, 2011
    Posts:
    2,015
    Really, that's rather misleading - sometimes newer date for older bases. :(

    They must mean the time of the last check. Then it must be written not "The virus database has been updated on ..." but "The last successful check was on...".
     
    Last edited: Jul 28, 2012
  11. Brandonn2010

    Brandonn2010 Registered Member

    Joined:
    Jan 10, 2011
    Posts:
    1,854
    Tell me if this seems okay:

    I am trying the whole suite on my brother's PC (11 y/o so high-risk user).

    For the AV: I have cranked up the heuristics to high, and enabled rootkit scanning (not sure why this is disabled by default).

    For the firewall: Default settings.

    For Def+: I have set to treat unknown processes as Blocked, hopefully turning it into an anti-exe for unknown processes and malware.

    Sandbox: Disabled as I feel the Def+ is enough and I don't want to deal with things being virtualized.

    Does this seem secure?

    EDIT: Yes I have checked Chiron's guide and I was also wondering whether it uses caching to improve scan speeds?
     
    Last edited: Aug 8, 2012
  12. cheater87

    cheater87 Registered Member

    Joined:
    Apr 22, 2005
    Posts:
    3,289
    Location:
    Pennsylvania.
    Seems good to me Brandon. :)
     
  13. KelvinW4

    KelvinW4 Registered Member

    Joined:
    Oct 11, 2011
    Posts:
    1,199
    Location:
    Los Angeles, California
    The AV has the rootkit scanning off because it lengthens the amount of time to scan the computer.
    Comodo only uses on-session caching, meaning that after a computer restarts it needs to rebuild cache again. :thumbd: hopefully it will be changed after v6
     
  14. Brandonn2010

    Brandonn2010 Registered Member

    Joined:
    Jan 10, 2011
    Posts:
    1,854
    Well I have a lot of confidence it the Def+ now. I went to install Minecraft on my brother's computer to see if it would work on there, and COMODO blocked it with the same message AppGuard gives when blocking something, that the file or path or whatever cannot be found :thumb: However, I added an exclusion for Minecraft's file in Def+ but it still kept blocking it. :thumbd:
     
  15. khanyash

    khanyash Registered Member

    Joined:
    Apr 4, 2011
    Posts:
    2,428
    The caching thing is changed & improved in CIS 6 as per Devs.

    Rootkit scan is there in Comodo AV by default. The option for Rootkit scan which is off is an advanced Rootkit scan so it may give FP & therefore off.
     
  16. CogitoTesting

    CogitoTesting Registered Member

    Joined:
    Jul 4, 2009
    Posts:
    901
    Location:
    Sea of Tranquility, Luna
    @ Brandonn2010

    Please do not disable the sandbox since they complement each other. Also enable parental control and suppress notifications for all modules i.e av, firewall, and D+.

    AV: Suppress notification and automatically quarantine threats.
    D+: Automatically block unknown threats.
    Firewall: Block all incoming connections

    P.S: make sure you create a very good password for the parental control so that your brother could not guess it or disable CIS modules when they become a pain in his neck :D. I would also suggest for you to use k9 web filter along side CIS. Then and only then your brother would develop some sort of vendetta against you. Good luck m8. ;).

    Thanks.
     
  17. Chiron

    Chiron Registered Member

    Joined:
    Jun 6, 2010
    Posts:
    174
    I'd advise that you enable the sandbox and turn Defense+ to Untrusted. Blocked does not even give you any indication of what was blocked. This can make it very frustrating to use.

    Also, leaving the sandbox enabled makes it much quieter and easy to use. BTW, this version of the automatic sandbox does not virtualize programs. It just functions like an automatic Defense+ and automatically limits their actions. V6 will have full virtualization of processes placed in the automatic sandbox.
     
  18. Brandonn2010

    Brandonn2010 Registered Member

    Joined:
    Jan 10, 2011
    Posts:
    1,854
    How is it safer to let the malware run in the sandbox than just blocking it in the first place?
     
  19. Chiron

    Chiron Registered Member

    Joined:
    Jun 6, 2010
    Posts:
    174
    I mainly just do it so I get the popup to let me allow it for safe apps. It's just for convenience.

    In reality I haven't seen any loss in safety by running things in the sandbox and setting it to untrusted.
     
  20. Brandonn2010

    Brandonn2010 Registered Member

    Joined:
    Jan 10, 2011
    Posts:
    1,854
    The alert from Def+ when blocking would be a nice feature for version 6.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.