Comodo Internet Security 2019 Beta v12.x Beta and Final Thread

Hi all

Comodo Internet Security 2019 Beta (v12.0.0.6798 is now available for download.

https://forums.comodo.com/beta-corn...-is-now-available-for-download-t123873.0.html

With best Regards
Mops21

 

Hi all

Comodo Internet Security 2019 Beta v12.0.0.6808 is now available for download.

https://forums.comodo.com/beta-corn...-is-now-available-for-download-t123973.0.html

With best Regards
Mops21

 

Hi all

Comodo Internet Security 2019 RC (v12.0.0.6810) is now available for download.

https://forums.comodo.com/beta-corn...-is-now-available-for-download-t123986.0.html

With best Regards
Mops21

 

Hi all

Comodo Internet Security 2019 (v12.0.0.6810) – Released

https://forums.comodo.com/news-anno...-2019-v12006810-ndash-released-t124007.0.html

With best Regards
Mops21

 

Anyone know how the new AV engine is? I hope it is lighter. The suite is very light with the exception of the AV.

 

can anybody post recommend settings for the comodo internet security? I have tried to find a guide step by step...but nothing found

 

i know that there is one here and at Malwaretips forum too

 

@ MT there is a really good Guide/Video for the Comodo Firewall and the Cloud AV.
I'm searching exactly that for Comodo AV/IS.

 

Hi all

Comodo Internet Security 2019 RC (v12.0.0.681 is now available for download.

https://forums.comodo.com/beta-corn...-is-now-available-for-download-t124137.0.html

With best Regards
Mops21

 

Hi all

Comodo Internet Security 2019 v12.0.0.6818 – Released

https://forums.comodo.com/news-anno...-2019-v12006818-ndash-released-t124172.0.html

With best Regards
Mops21

 

Hi all

Comodo Internet Security 2019 RC (v12.0.0.6850) is now available for download.

https://forums.comodo.com/beta-corn...-is-now-available-for-download-t124537.0.html

With best Regards
Mops21

 

Hi all

Comodo Internet Security 2019 RC (v12.0.0.6870) is now available for download.

https://forums.comodo.com/beta-corn...-is-now-available-for-download-t124579.0.html

Witzh best Regards
Mops21

 

Hi all

Comodo Internet Security 2019 v12.0.0.6870 – Released

https://forums.comodo.com/news-anno...-2019-v12006870-ndash-released-t124601.0.html

With best Regards
Mops21

 

Several Vulnerabilities Found in Comodo Antivirus

https://www.securityweek.com/several-vulnerabilities-found-comodo-antivirus

 

Next question, are the vulnerabilities present when only when using Comodo in default? Does Cruelsister Comodo suffer from them too?

 

And people still use Comodo, the thing is buggy as hell, and reported issues which some are 10+ years old are still unfixed, no wonder that such vulnerabilities are found.

 

Yes, Cruel Sisters rules are weaksauce and poor/silly advice.

While I have never encountered guests "disappearing rules" EVER, the sandbox/virt-desktop is very complex and IMO should only be used to harden apps you want eg: harden chrome/browser by running in virt. But even that is undesirable. It slows the system massively. Also, note change logs/bugs (filehippo notes them). The HIPS has had ONE noted bypass years ago...the sandbox has had several including this current one. Why use the sandbox outside of enterprise or, in general, potato users?

So yes, the CVE applies directly to CS rules aka ~running unknowns in a virt/sandbox container~. As Ive stated many times--WHY would you do that? To test? To show off to your cat? Well do that in a true virtual box or better yet on a test image or devoted test PC.

Smarter/simple: Hard BLOCK unknown exes and do not force sandboxing of unknowns--I can't stress this enough for most home-based Comodo users. Additionally, trim the signed vendor per personal usage. Use the HIPS to harden wanted/vetted but highly exploitable apps versus virt eg: Chrome/browser can only open chrome and cannot code inject another process nor open or access sensitive data disk access.

As stated, sandboxed/virt slows down the system and opens a new exe that chews up heavy cpu time. Running "unwanted"/"unknown" apps in a production sandbox is just dumb per CS rules.

 

Thank you Sordid and guest. I've run CFW off and on for a while. Time to look for something else. I still like the idea of Rehips and have a license, but I'm afraid it's a step beyond my capabilities. Andy Ful's Hard Configurator is another with default settings, and I reckon Win Defender (Win 8.1 Pro) and firewall.

 

if you have a license, you should definitely use rehips full-time. it's a great piece of sw.

 

+1

@Sordid
If my memory is good, it is on proactive mode, HIPS enabled, when you create a very large amount of personal rules, for some reason, comodo can't handle them all, and delete them, even the default ones.

 

fixes will be released soon:

 

I actually stopped using comodo, I noticed that even though it labeled DLL's on my PC as "unrecognized" it didn't do anything to stop them. SecureAPlus is objectively superior to comodo in terms of application whitelisting and DLL injection protection and many other facets of whitelisting too.

Their support team via email is faster too and actually cares about glitches and problems you find out it has during testing.

In the past, Comodo had malware and PUPs added to their whitelist in the cloud. Namely the "MyFasterPC" PUP and a lot of the garbage that's on download(dot)com. For the MyFasterPC scam-ware PUP, it took them a few months to finally answer back to me about it when I showed them that their database on virustotal had it flagged as malware, but their application allowed it all the same. They finally removed it from their whitelist in the cloud after nearly a whole month after they got back to me.

A few years ago, when Verisign got hacked, comodo never removed them from their list of "trusted" vendors and so had several pieces of malware that were signed by Verisign. It was common knowlegdge that Verisign signatures were no longer trustworthy, but comodo never removed them from their whitelist database.

And let's not forget, their virus database is trash. Around 2011 or so, they got anywhere between a high 80's to mid 90's percent detection of malware with a right-click and scan of a folder full of malware, but now on a good day, they'll get like 40 to 50% if that.

When Comodo first started causing me problems, I got rid of it and used avast, but when I got sandboxie, I had to ditch avast. So for a long time I used panda, but then Panda gave me problems. My current combo of VoodooShield and S.A.P. has been the only setup I've used with no horse crap in it.

 

While I'm not a particular fan of Comodo, to be fair, MyFasterPC is not malicious, it is a PUP, as you said. I don't have a problem with PUPs not being detected.

 

The problem is that the MyFasterPC PUP is used to facilitate something worse than malware. A fake tech support scam. If an uninformed user saw that comodo labeled it as safe then that plays into the hands of the scammers. Or at least the ones that are fully aware of what they're doing.

Granted, the application doesn't actually do anything harmful to your system, but it facilitates a scam.

What irks me is that it was in their malware database, but it was also in their whitelist in the cloud.

It literally took them months to first respond to me when I linked to virus total and gave them the hashes for it. Then another month to do something about it.

 

Comodo av is not a great product, I agree. And his sandbox can be bypassed. But CIS used as HIPS, without sandbox, is powerful and effective.