Author Topic: Cloud scanner can't remove malware...  (Read 7807 times)

Offline atomas31

  • Comodo Loves me
  • ****
  • Posts: 120
Cloud scanner can't remove malware...
« on: October 22, 2011, 10:47:15 AM »
Hi,

I made some test with malware and using Comodo firewall (with D+ and sanboxe) and when I download a malware on my desktop, try to open it comodo indicate to me that it has sandboxe what I was trying to open and I receive an alert from the cloud that it is a Trojan. So when I click on clean, it didn't work and I received another message about getting in contact with live support... To delete the file (easylly) I have to go on D+, untrusted files and delete the file!

Is this normal that the cloud alert can't clean the files it found has malware? I joint the alert I received...

Offline a256886572008

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 956
Re: Cloud scanner can't remove malware...
« Reply #1 on: October 22, 2011, 11:51:37 AM »
Hi,

I made some test with malware and using Comodo firewall (with D+ and sanboxe) and when I download a malware on my desktop, try to open it comodo indicate to me that it has sandboxe what I was trying to open and I receive an alert from the cloud that it is a Trojan. So when I click on clean, it didn't work and I received another message about getting in contact with live support... To delete the file (easylly) I have to go on D+, untrusted files and delete the file!

Is this normal that the cloud alert can't clean the files it found has malware? I joint the alert I received...

You should install the antivirus module first.

If you set the configuration as "CIS", then CFW will not popup the alert window, "removed failed".
« Last Edit: October 22, 2011, 12:00:28 PM by a256886572008 »

Offline atomas31

  • Comodo Loves me
  • ****
  • Posts: 120
Re: Cloud scanner can't remove malware...
« Reply #2 on: October 22, 2011, 12:57:22 PM »
Not sure I undestand?

I download and install only the comodo firewall (I use Avast for AV) so I don't understand when you say that I should Install the AV module first???

As for my configuration it is set as Proactive security. Is it that configuration that made the cloud scanner unable to delete the malware it founds???

Offline a256886572008

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 956
Re: Cloud scanner can't remove malware...
« Reply #3 on: October 22, 2011, 01:08:30 PM »
Not sure I undestand?

I download and install only the comodo firewall (I use Avast for AV) so I don't understand when you say that I should Install the AV module first???

As for my configuration it is set as Proactive security. Is it that configuration that made the cloud scanner unable to delete the malware it founds???

If you install the firewall only, then CFW will not delete malwares but just popup alerts.

Offline atomas31

  • Comodo Loves me
  • ****
  • Posts: 120
Re: Cloud scanner can't remove malware...
« Reply #4 on: October 22, 2011, 01:17:25 PM »
If you install the firewall only, then CFW will not delete malwares but just popup alerts.


What is the point then to scan on the cloud things that are sandboxe and then receive a popup alerts saying that this is a malware with 2 option : clean or ignore. If you click clean, it doesn't works and then receive another popup saying that removing failed and ask if I want to contact live support (yes or no)...

What is the point of the cloud scanner in D+? What is the point of having a popup alerts with the options of cleaning or ignore if the function cleaning doesn't work?

Sorry but I am a little bit confuse here...

Offline loveboy_lion

  • Comodo's Hero
  • *****
  • Posts: 463
  • COMODO Is Good Hope We Make it The BEST !
    • Facebook
Re: Cloud scanner can't remove malware...
« Reply #5 on: October 22, 2011, 06:26:37 PM »
What is the point then to scan on the cloud things that are sandboxe and then receive a popup alerts saying that this is a malware with 2 option : clean or ignore. If you click clean, it doesn't works and then receive another popup saying that removing failed and ask if I want to contact live support (yes or no)...

What is the point of the cloud scanner in D+? What is the point of having a popup alerts with the options of cleaning or ignore if the function cleaning doesn't work?

Sorry but I am a little bit confuse here...
defence+ cannot quarantine threats its to stop malware from being executed so that they dont cause any harm defence+ lacks quarntine module and depends on antivirus to quarantine if it detects anything you could easily install the antivirus and disable it if u want defence+ to quarantine

in simple words
Antivirus = Police. :P0l
Firewall = Watchmen.
Defence+ = Personal bodyguard ( so when a bodyguard finds any suspicion or threat it stops./blocks the threat and alerts the police  :P0l to put the threat in jail since it lacks the authority

I kind of think it as funny but simple and true
hope you understand and don't blame defence+ since its doing what it has to do perfectly  :D :-TU

Offline naren

  • Comodo's Hero
  • *****
  • Posts: 4379
Re: Cloud scanner can't remove malware...
« Reply #6 on: October 23, 2011, 06:56:14 AM »
Hi,

I made some test with malware and using Comodo firewall (with D+ and sanboxe) and when I download a malware on my desktop, try to open it comodo indicate to me that it has sandboxe what I was trying to open and I receive an alert from the cloud that it is a Trojan. So when I click on clean, it didn't work and I received another message about getting in contact with live support... To delete the file (easylly) I have to go on D+, untrusted files and delete the file!

Is this normal that the cloud alert can't clean the files it found has malware? I joint the alert I received...

Your prob is similar in a way here. Read the thread

http://forums.comodo.com/news-announcements-feedback-cis/cis-58-serious-bug-part-1-2-merged-t77374.0.html

The only difference is you have not installed CAV but Cloud AV is there & it use to delete the malware in the previous version. It may not be able to delete the malware now for few reasons

Previously Clean meant Delete, clean use to delete the files. But now Clean means Quarantine & as there is no quarantine folder coz CAV is not installed, quarantine is not possible so the remove failed error.

 If you read the thread above, there is a bug in Realtime Scanner of CAV which is going to be handled in the next release within few weeks.

Thanxx
Naren



Offline atomas31

  • Comodo Loves me
  • ****
  • Posts: 120
Re: Cloud scanner can't remove malware...
« Reply #7 on: October 23, 2011, 10:26:23 AM »
Thanks for taking the time to explain the problem to me  ;D

So, if I understand correctly, the problem is that now when clicking on "clean", the cloud scan want to quarantine the object instead of deleting it but since there is no quarantine folder with Comodo firewall (with D+ and Sandbox) the cloud scan can't "clean"/quarantine the objects... Can I simply create a folder call "quarantine" somewhere in the comodo folders to rectifie the problem?

If that is, this is a bug that should be corrected...

Offline loveboy_lion

  • Comodo's Hero
  • *****
  • Posts: 463
  • COMODO Is Good Hope We Make it The BEST !
    • Facebook
Re: Cloud scanner can't remove malware...
« Reply #8 on: October 23, 2011, 10:39:21 AM »
Thanks for taking the time to explain the problem to me  ;D

So, if I understand correctly, the problem is that now when clicking on "clean", the cloud scan want to quarantine the object instead of deleting it but since there is no quarantine folder with Comodo firewall (with D+ and Sandbox) the cloud scan can't "clean"/quarantine the objects... Can I simply create a folder call "quarantine" somewhere in the comodo folders to rectifie the problem?

If that is, this is a bug that should be corrected...
yes you are right but i dont thing creating a quarantine folder would work but atleast you could give it a try if it works for u it way work for others as well i dont know if this is a bug or no ?

Offline a256886572008

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 956
Re: Cloud scanner can't remove malware...
« Reply #9 on: October 23, 2011, 11:23:26 AM »
Thanks for taking the time to explain the problem to me  ;D

So, if I understand correctly, the problem is that now when clicking on "clean", the cloud scan want to quarantine the object instead of deleting it but since there is no quarantine folder with Comodo firewall (with D+ and Sandbox) the cloud scan can't "clean"/quarantine the objects... Can I simply create a folder call "quarantine" somewhere in the comodo folders to rectifie the problem?

If that is, this is a bug that should be corrected...

But, you can not restore the quarantined objects.

 :'(

Offline webbie146

  • Comodo's Hero
  • *****
  • Posts: 262
Re: Cloud scanner can't remove malware...
« Reply #10 on: October 24, 2011, 05:27:52 AM »
defence+ cannot quarantine threats its to stop malware from being executed so that they dont cause any harm defence+ lacks quarntine module and depends on antivirus to quarantine if it detects anything you could easily install the antivirus and disable it if u want defence+ to quarantine

in simple words
Antivirus = Police. :P0l
Firewall = Watchmen.
Defence+ = Personal bodyguard ( so when a bodyguard finds any suspicion or threat it stops./blocks the threat and alerts the police  :P0l to put the threat in jail since it lacks the authority


I kind of think it as funny but simple and true
hope you understand and don't blame defence+ since its doing what it has to do perfectly  :D :-TU

Nice metaphor haha, explains it perfectly :)

Offline naren

  • Comodo's Hero
  • *****
  • Posts: 4379
Re: Cloud scanner can't remove malware...
« Reply #11 on: October 24, 2011, 05:31:22 AM »
Quarantine Function was suggested with D+ & FW Only but Devs didn't replied. D+ has cloud AV & detects malware so there has to be quarantine function.

Thanxx
Naren

Offline AyeAyeCaptain

  • Usability Study Member
  • Comodo's Hero
  • *****
  • Posts: 618
Re: Cloud scanner can't remove malware...
« Reply #12 on: October 24, 2011, 05:41:58 AM »
Quarantine Function was suggested with D+ & FW Only but Devs didn't replied. D+ has cloud AV & detects malware so there has to be quarantine function.

Thanxx
Naren

But would this not conflict with the other AV installed?
Film Scum Remake
Comodo: Where is your Tool
User: What Tool?
Comodo: This f****** Tool.
Protect Yourself With Comodo...... lol

Offline a256886572008

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 956
Re: Cloud scanner can't remove malware...
« Reply #13 on: October 24, 2011, 05:52:10 AM »
For "install firewall only"

1.
Please replace the buttom, "clean", with this one.

terminate process

2.
If the user enables auto mode, then the cloud scanner terminates the processes of threats automatically.


Offline naren

  • Comodo's Hero
  • *****
  • Posts: 4379
Re: Cloud scanner can't remove malware...
« Reply #14 on: October 24, 2011, 06:04:21 AM »
But would this not conflict with the other AV installed?

There should be a way to handle threats detected by Cloud AV. And it can be handled in various ways like providing quarantine, blocking processes, etc.

Thanxx
Naren

 

Seo4Smf 2.0 © SmfMod.Com Smf Destek