* Home Help Search Login Register  

Welcome, Guest. Please login or register.
Did you miss your activation email?
May 19, 2013, 12:52:58 PM

Login with username, password and session length

663039 Posts
70580 Topics
145158 Members
Latest Member: cyber33

more news...
Search:     Advanced search | Tag Cloud
+  Welcome to the Comodo Forum
|-+  Learn about Computer Security and Interact with Security Experts
| |-+  Leak Testing/Attacks/Vulnerability Research
| | |-+  CLT leaktest - Tried everything on this forum still get 320/340!		 « previous next »
Pages: [1] Go Down Print
Author Topic: CLT leaktest - Tried everything on this forum still get 320/340!  (Read 10105 times)
SecurityDave
Newbie
*
Offline Offline

Posts: 8
« on: January 06, 2011, 05:45:34 PM »
 Huh I've been running the Comodo leaktest over and over and always get 320/340 and always says im vulnerable to: 10. Injection: SetWinEventHook and 11. Injection: SetWindowsHookEx!

My setup:

Windows 7 32bit, 2GB DDR, 2.5GHz Pentium Dual Core
Comodo Firewall and D+ only both set to safe mode, Sandbox disabled
Avast anti-virus (always run Comodo and Avast together in past and always 340/340 til now

I've been through the guide to configuring Comodo for accurate leaktest results many times been through the Computer Security Policy list looking for anything to do with CLT.exe but nothing, any help would be greatly appreciated, thanks!
Logged
FreewareHobo
Comodo Family Member
***
Offline Offline

Posts: 58
« Reply #1 on: January 18, 2011, 05:05:34 PM »
BUMP!
Same here, 320/340 after trying all the setups and with Sandbox Disabled it's a lot worse.
Windows 7  SP1 x64
Latest CIS installed
Logged
elliotcroft
Presto User
Malware Research Group
Comodo's Hero
*****
Offline Offline

Posts: 419


I draw strength from my HIPS.
« Reply #2 on: January 18, 2011, 06:00:50 PM »
Quote from: FreewareHobo on January 18, 2011, 05:05:34 PM
BUMP!
Same here, 320/340 after trying all the setups and with Sandbox Disabled it's a lot worse.
Windows 7  SP1 x64
Latest CIS installed
What are the tests that you fail on? What sandbox level are you at?
Logged

FreewareHobo
Comodo Family Member
***
Offline Offline

Posts: 58
« Reply #3 on: January 18, 2011, 06:07:29 PM »
Failing on both wineventhook only.
Sandbox level set as untrusted  Grin
Logged
elliotcroft
Presto User
Malware Research Group
Comodo's Hero
*****
Offline Offline

Posts: 419


I draw strength from my HIPS.
« Reply #4 on: January 18, 2011, 06:09:07 PM »
Quote from: FreewareHobo on January 18, 2011, 06:07:29 PM
Failing on both wineventhook only.
Sandbox level set as untrusted  Grin
Is virtualisation on or off?
Logged

FreewareHobo
Comodo Family Member
***
Offline Offline

Posts: 58
« Reply #5 on: January 18, 2011, 07:29:06 PM »
Virtualization ON, Sandbox ON, actually eerything is ON and in Proactive mode, all set to highest.

I also made sure nothing was being excluded and the .exe wasn't being trusted or allowed Cheesy
Logged
elliotcroft
Presto User
Malware Research Group
Comodo's Hero
*****
Offline Offline

Posts: 419


I draw strength from my HIPS.
« Reply #6 on: January 19, 2011, 10:42:49 AM »
Quote from: FreewareHobo on January 18, 2011, 07:29:06 PM
Virtualization ON, Sandbox ON, actually eerything is ON and in Proactive mode, all set to highest.

I also made sure nothing was being excluded and the .exe wasn't being trusted or allowed Cheesy
The testing suite isn't being denied the files' creation, but the files are being created in the virtualised file system which the testing suite thinks is the real file system and counts it as a fail.
Don't worry about it, you just hit a limitation in the suite.
Logged

FreewareHobo
Comodo Family Member
***
Offline Offline

Posts: 58
« Reply #7 on: January 20, 2011, 07:23:00 AM »
Thanks man  Roll Eyes
Now i can use Comodo with peace of mind  Thumb Up
Logged
Tags:
Pages: [1] Go Up Print 
« previous next »
Jump to:  

SSL Certificate Free Virus Removal Firewall
Page created in 0.033 seconds with 20 queries.
Powered by SMF 1.1.18 | SMF © 2006, Simple Machines Design by 7dana.com