GAMES & APPLICATION INSTALLATION & COMODO FIREWALL PRO 3

Initial CFP Defense+ setup

CFP comes with an HIPS called Defense+.

CFP is required to be installed on a Clean system and the installer either ask the end user to confirm this or scan the system to help threats removal.

To help with initial Defense+ configuration CFP D+ defaults to Clean PC Mode.

This mode will make CFP learn all application currently installed on your PC (including Leaktests) and you'll not see alerts for these existing applications BUT you'll be alerted if new, unrecognized application are installed.

In Clean PC Mode all NEW files will be listed in 'My Pending Files' and will not be considered Clean thus CFP will monitor those applications and ask you to examine their behaviour by means of alerts.

If you install a new unrecognized application when CFP D+ is set to Clean PC Mode and you do not wish to see any alert for it because you TRUST that application you can remove its files from 'My Pending Files' list and CFP will learn them.

My Pending Files list will also provide you an easy way to Lookup your new applications and check if Comodo Trusts them.

You can also submit new unrecognized applications to Comodo and have them analyzed. Meanwhile CFP D+ alerts will give you a way to check those applications and evaluate their safeness.

CFP Defense+ and Application installation/uninstallation

Sometimes it will be necessary to launch an installer without having D+ monitor the installation process and show the related alerts.

In these cases you need to run setup.exe (or whatever the installer is named) and wait for the first D+ alert that being with these words:

setup.exe is trying to ... (other text). What would you like to do?

When you get this alert you can select Treat this application as and choose "Installer or Updater".
CFP will ask you to switch to Installation mode and you need to answer yes.

Since the installation mode is meant to be enable only for short time periods, CFP will periodically show you a reminder.
You can safely ignore this reminder until the installation/uninstallation is completed but after that make sure to click on the yes button of that Reminder alert (you can also switch back to previous mode from CFP summary Panel)

Important Topics

Prevention Vs Detection
Detection, Prevention & Cure

Thanks
Josh