CFP Defense+ Clean PC mode?

Discussion in 'other anti-malware software' started by aigle, Jan 21, 2008.

Thread Status:
Not open for further replies.
  1. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Anybody can explain how does the clean PC mode works? When I switch to clean PC mode it doesn,t scan the HD, how does then it marks all executables on HD trusted?

    Thanks
     
  2. Pedro

    Pedro Registered Member

    Joined:
    Nov 2, 2006
    Posts:
    3,502
    Re: CFP Defnece+ Clean PC mode?

    I assume since it tracks down in real time what is new, it will create rules for "old" files as they are used.
     
  3. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Re: CFP Defnece+ Clean PC mode?

    So it means that if I turn off file protection in CFP, clean PC mode will become useless. Am i true?
     
  4. Coolio10

    Coolio10 Registered Member

    Joined:
    Sep 1, 2006
    Posts:
    1,124
    Re: CFP Defnece+ Clean PC mode?

    No. Clean PC Mode will affect all modules, not just file protection. Since it does not scan the HD i am guessing when files are open CFP will read their creation/modification date to see if it was made after or before Clean PC Mode was activated. Their is probably a time kept when Clean PC Mode was activated inside CFP instead of using the windows clock or else it would be easily bypassed by malware. As Pedro says it works in real-time. You can see for yourself by switching to Safe mode and switching back to Clean PC Mode it will make all current files be safe.
     
  5. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Re: CFP Defnece+ Clean PC mode?

    No, I don,t think it,s like this. I did a test.

    I put two exes on my PC. aa.exe and bb.exe. I switched to clean PC mode. Now I executed aa.exe, it was allowed to run and automatic allow rules were created. I switched back to learn with safe mode. I executed bb.exe, i got a warning popup.

    I put Defence+ again in clean PC mode. I downloaded two exe from internet via opera, the new exe craetion( download) was allowed by premade rules or Opera. I run, first exe, no popups. I change to Learn with safe mode, run second exe and got the pop up.

    I am too confused. I just wonder what is the use of Appliaction Execution rules in clean PC mode?

    But i am getting weired resluts sometimes. I am not able to reproduce them consistently and not able to understand it at all!
     
  6. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Re: CFP Defnece+ Clean PC mode?

    Aigle,

    My reason for removing it. I follow them for our vista64 box, but I suppose will have to wait until it is really ready to play with the different program settings.

    It is freeware after all, so I can understand that the go life when the main and most likely used settings work okay. With so many options it is a hell of a job to get this program tested anyway. So do not take this as Comodo bashing. Out of the box it runs fine.
     
  7. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Re: CFP Defnece+ Clean PC mode?

    Needs a lot of settings I agree!
     
  8. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Re: CFP Defnece+ Clean PC mode?

    Any other user pls?
    I guess there must be many users using this mode.
     
  9. ProSecurity

    ProSecurity Registered Member

    Joined:
    Dec 13, 2007
    Posts:
    123
    Re: CFP Defnece+ Clean PC mode?

    Mr. aigle, I did 32-bit assembly language for Comp Sci.
    I also created comp related circuits in Physics Lab.
    Comodo is pushing this "Clean PC" mode as revolutionary.
    I still don't understand how they can make it work.
    Maybe I should've gone for my Phd.
    I did run it for a while in that mode, but then I uninstalled, reinstalled, and now I run it in Paranoid mode.
    Pop-up Circus, yes, but at least now I feel comfortable knowing what is going on.
     
  10. ProSecurity

    ProSecurity Registered Member

    Joined:
    Dec 13, 2007
    Posts:
    123
    Re: CFP Defnece+ Clean PC mode?

    Just wanted to add:
    I use Comodo Firewall Pro, and still testing Comodo Memory Firewall, and Comodo BoClean, but something I just can't put my finger on...
    All of these are on workstations which have to go through corporate level firewall products.

    Something just doesn't feel right.

    Of course, that is just my opinion, or rather "feeling"; however, I am a nobody.
     
  11. ggf31416

    ggf31416 Registered Member

    Joined:
    Aug 20, 2006
    Posts:
    314
    Location:
    Uruguay
    Re: CFP Defence+ Clean PC mode?

    I think file protection cannot be deactivated (is working even in basic firewall mode). If you disable it you are allowing all changes, not stopping the monitoring.

    As Comodo keeps a list of new/modified files (aka My Pending Files) it can suppose that if a file is in the hard drive and not in the list then it's "safe".
     
  12. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Re: CFP Defence+ Clean PC mode?

    Are u sure about this? It,s part of Defence+ so how it can run in FW only mode?
     
  13. ggf31416

    ggf31416 Registered Member

    Joined:
    Aug 20, 2006
    Posts:
    314
    Location:
    Uruguay
    Re: CFP Defence+ Clean PC mode?

    Put defense+ in paranoid mode (even if deactivated) and change the defense+ policy of explorer.exe to ask about modification of protected files. Now try to rename the executable of your browser.
     
  14. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Re: CFP Defence+ Clean PC mode?

    U can,t do it. It can either be disabled or in paranoid or any other mode.
     
  15. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Re: CFP Defnece+ Clean PC mode?

    I don,t expect clean PC mode to be revlutionary. I even don,t understand it ATM!
     
  16. ggf31416

    ggf31416 Registered Member

    Joined:
    Aug 20, 2006
    Posts:
    314
    Location:
    Uruguay
    Re: CFP Defence+ Clean PC mode?

    With deactivated I mean "Deactivate the Defense+ permanently" (Basic Firewall).
     

    Attached Files:

  17. Pedro

    Pedro Registered Member

    Joined:
    Nov 2, 2006
    Posts:
    3,502
    What i have a hard time with is exactly that: i turn D+ off, but it's not completely off - file protection is on, and the rules are applied.

    Since it's not completely on either, and doesn't do file integrity check, can i trust that it will see what's going on?
     
  18. ronjor

    ronjor Global Moderator

    Joined:
    Jul 21, 2003
    Posts:
    57,802
    Location:
    Texas
    One spam post removed. Thanks for the heads up everyone.
     
Loading...
Thread Status:
Not open for further replies.