CIMA Wishlist

[Guest]

[John Buchanan]

Sorry Ronny.  Egemen has already stated 3.9 will not have the CIMA-like heuristics.  Maybe version 4.

[EricJH]

This topic was kicked back to life after two months..... two months ago that was the expectation indeed.... 

[John Buchanan]

I didn't read the date on Ronny's post.  My error.

[Commanding The Celsius]

I would like to be able to upload many files.. Like a whole RAR file with maby 30 executables or files.. and they would all get unpacked and analysed separately.. =) and hopefully sent to comodo if suspicious! =)

Not something I badly sees as something needed.. But it's always nice to analyse files faster! =)

[Tesk]

I would like to be able to upload many files.. Like a whole RAR file with maby 30 executables or files.. and they would all get unpacked and analysed separately.. =) and hopefully sent to comodo if suspicious! =)

Not something I badly sees as something needed.. But it's always nice to analyse files faster! =)

That would take a lot of server ressources. Imagine I uploaded 30.000 samples. It takes 5-7 minutes to analyze every file usually, if the file still runs, to see which TCP/IP connections it tries to do.

[ngocbang_tran]

I worry! 

[LaserWraith]

I worry! 

Umm...about what? 

[SilentMusic7]

Better noticing of keyloggers.
Usually slips by..

The same problem as with most rogues. Those are the installers and as they won't do anything harmfull, nothing will be said ...

I am new to CIMA.  Let's see if I understand how to detect a key-logger...
1. Submit the installer to CIMA.
2. If CIMA doesn't detect anything suspicious, install on my PC.
3. Submit all the installed executables to CIMA.
4. If CIMA doesn't detect anything suspicious, I then trust the installed executables.

There would be less risk to my PC, and the process would go faster, if CIMA provided the option to analyze the installed executables directly.  The option could be offered after CIMA analyzes the installer.

[OmeletGuy]

Here are my wishes:   

1. Have CIMA detect Buffer Overflow attacks

2. Rate applications that create processes with windows names but are not signed by MS rated suspicions.

3. Rate application that call out to the web more than 150 times suspicious. 

i hope at least 1 of these ideas get added to CIMA   

[OmeletGuy]

Ok i have thought of a bunch more stuff CIMA should detect. (it might already)

Malware that prevents you from running programs.
Malware that truns TaskManager Off
Malware that adds proxys
Malware that changes MAC address
Malware that Pops ups all the time
Malware that puts a screen over your screen (fake BSODs)
Malware that truns system restore off
Malware that truns DEP off

I wish to see this plus the other wishes i posted, be put into CIMA before CIS v4.

[frances29]

Hello Everyone,

I am new here at this forum and I joined to learn more about Comodo.

In my opinion, I think it would be nice if CIMA can scan ordinary/regular files and documents like:

-.doc
-.xls
-.mp3
-.jpeg
-.pdf
-.flv

And also, it would also be nicer if it can scan all the files on our disk, this way you'll know if there's a malware lurking inside our files. 

[zyrelle27]

Hello.

I saw the other thread, about CIMA's new version released, and I've read one post in there that should have bee posted in this thread.

So let me do the honor of posting it here and my own question included. 

Would there be a .pdf file of report and would there be any chance that it would be send into our e-mail accounts?

Thanks. 

[EricJH]

And also, it would also be nicer if it can scan all the files on our disk, this way you'll know if there's a malware lurking inside our files. 

Comodo has an online AV scanner for this purpose: http://personalfirewall.comodo.com/scan/avscanner.html .

[Co-Mo-Do]

My wish:
- Upload to CIMA from desktop.
Right-click "suspected_file.exe" > Send To > CIMA

Just like VirusTotal has done.
Thanks. 

[Co-Mo-Do]

Another wish:

Could CIMA analyse new/old websites for malware?

Then state whether it's a risk or not.

Then create some sort of add-on: (see my other post).
http://forums.comodo.com/which_product_do_you_want_comodo_to_develop_next/website_reputation_rating_security_advisor-t44355.0.html

[Tags:]