Comodo AV Database update page

[Guest]

[3xist]

Currently: 95.5 MB (100,204,544 bytes)

Cheers,
Josh

[fOrTy_7]

What about the issue where CIS uses up to 300MB of ram and quite a lot of CPU while updating signatures. Normally the main cmdagent.exe process uses less than 10MB of ram. It could be really a problem on low ram systems. Do devs work on this? Can we expect fix / redesign before CIS 4.0 ? Maybe as a workaround scheduled updates could be added with customizable time interval to CIS 3.10. What's the progress on that matter, if any?

[umesh]

Hi Josh,

Cangrats on this!

Been watching bases.cav in C:\Program Files\COMODO\COMODO Internet Security\scanners and it seems to be going down... Very very slowly. Yesterday bases.cav was 99MB, Today it's 97MB and noticing only generic signatures are being added.

It seems the clean up is making some sort of progress, Unless I'm being paranoid. Am I paranoid Melih/Umesh? 

Cheers,
Josh

Yes, we have started cleaning up so you should start seeing reduction in base size. This is continuous process and over the period of time base should get smaller.

Thanks
-umesh

[LeoniAquila]

Hi Josh,
Yes, we have started cleaning up so you should start seeing reduction in base size. This is continuous process and over the period of time base should get smaller.

Thanks
-umesh

Great to hear!

Thanks

[3xist]

Hi Josh,
Yes, we have started cleaning up so you should start seeing reduction in base size. This is continuous process and over the period of time base should get smaller.

Thanks
-umesh

Great Work!

So indeed, You guys are only adding a handful of Generic Signatures to catch all the malware family, Are you guys removing signatures that are already caught by these new generics?

What about "Unclassified Malware" We will say goodbye to this? (Which takes a large portion of reported FP's).

Just curious how the clean up works... I am sure the FP's will also reduce, with a smaller base size. It looks promising while having outstanding detection.

Cheers,
Josh

[umesh]

Hi Josh,

Great Work!

So indeed, You guys are only adding a handful of Generic Signatures to catch all the malware family, Are you guys removing signatures that are already caught by these new generics?

What about "Unclassified Malware" We will say goodbye to this? (Which takes a large portion of reported FP's).

Just curious how the clean up works... I am sure the FP's will also reduce, with a smaller base size. It looks promising while having outstanding detection.

Cheers,
Josh

Unclassified malware signs will continue to be there as that is part of automated system which generates those signs. We add generic signs and we have parallel process in places which cleans up redundant signs.

Thanks
-umesh

[3xist]

Hi Josh,
Unclassified malware signs will continue to be there as that is part of automated system which generates those signs. We add generic signs and we have parallel process in places which cleans up redundant signs.

Thanks
-umesh

Awesome Umesh. Thanks for your responses. Another question, What is the aim of the size of CAV base to be at? (Estimate, For example 20MB) - Like in the next few months or so?

And how many malware do generic signatures catch on average? (Like a range).

Cheers,
Josh

[HeffeD]

Awesome Umesh. Thanks for your responses. Another question, What is the aim of the size of CAV base to be at? (Estimate, For example 20MB) - Like in the next few months or so?

Ah, exactly what I was going to ask.

I have a brother that is still on dial up and I've been holding off recommending CIS to him because of the giant database download.

[umesh]

Hi Josh,

Awesome Umesh. Thanks for your responses. Another question, What is the aim of the size of CAV base to be at? (Estimate, For example 20MB) - Like in the next few months or so?

And how many malware do generic signatures catch on average? (Like a range).

Cheers,
Josh

Our target is to bring it under ~25MB.
Generic signs catch ~500K samples as of today and this number is going to increase on daily basis.

Thanks
-umesh

[3xist]

Hi Josh,Our target is to bring it under ~25MB.
Generic signs catch ~500K samples as of today and this number is going to increase on daily basis.

Thanks
-umesh

Wow!!!  Excellent! Under 25MB and Generics catching 500K (growing daily).  Keep up the great work!

So # of Generics Added in a 24 hour period today = Catch 500K.

Cheers,
Josh

[umesh]

Wow!!!  Excellent! Under 25MB and Generics catching 500K (growing daily).  Keep up the great work!

So # of Generics Added in a 24 hour period today = Catch 500K.

Cheers,
Josh

So # of Generics Added in a 24 hour period today = Catch 500K.

No, till date.

Thanks
-umesh

[3xist]

No, till date.

Thanks
-umesh

Okay. Still good though! Meaning 500K since v3.10 was launched or since first CIS was launched?

Cheers,
Josh

[umesh]

Okay. Still good though! Meaning 500K since v3.10 was launched or since first CIS was launched?

Cheers,
Josh

Since CIS 3.10 launched.

Thanks
-umesh

[3xist]

Since CIS 3.10 launched.

Thanks
-umesh

Thanks Umesh.

Absolutely Outstanding... I wish you and the entire AV Labs the very best. I am sure you guys will produce the best AV's (detection) in a few months.

Sorry, one more question: How is the response time to malware going? Like when a user sends you a malware via Email, Web Submission? Since Signatures and FP Fixes are released every 2 hours now and wondering what kind of progress is being made with responses to users on the malware submission side... I know you guys fix FP's in a few hours.

Cheers,
Josh

[umesh]

Hi Josh,

Thanks Umesh.

Absolutely Outstanding... I wish you and the entire AV Labs the very best. I am sure you guys will produce the best AV's (detection) in a few months.

Sorry, one more question: How is the response time to malware going? Like when a user sends you a malware via Email, Web Submission? Since Signatures and FP Fixes are released every 2 hours now and wondering what kind of progress is being made with responses to users on the malware submission side... I know you guys fix FP's in a few hours.

Cheers,
Josh

We are going to come up with some promise time for submissions done via web interface.
http://internetsecurity.comodo.com/submit.php

and will slowly cover all other submissions also to be responded withing given time frame.
We are on it.

Thanks
-umesh

[Tags:]