Comodo Cloud Antivirus v1.12.420066.533 RC

[nasion]

@woodrow post:42

The second screenshot from mad shows the dates, for me these dates change every time to the current date when I open that window.

Could this be an issue? The date should be the date the files were submitted right?

/W

The date will not be changed until the file have a accurate rating eg: safe or malware.

[woodrow]

@nasion post:59

1 Yes, you can install a new ccav too.
2 Yes, You should run the same malware again.
3 “these must be detected by now ?” I donot know ,because you say you can reproduce it , so I want you to reproduce it and get the ccav log .

Is it not better I send you the malware, or do you suspect there is a issue between me and your servers?

/W

[woodrow]

@nasion post:61

The date will not be changed until the file have a accurate rating eg: safe or malware.

Do you mean that the dates will become static when rating are in place?

/W

[nasion]

@woodrow post:63

Do you mean that the dates will become static when rating are in place?

/W

Yes for now,But we will estimate your propose.

[nasion]

@woodrow post:62

Is it not better I send you the malware, or do you suspect there is a issue between me and your servers?

/W

I donot reproduce your problem ,so I want you help us to get log.I think we use the same fls/valkyrie server.

[woodrow]

Can you post a link for .537? This is what I run now.
I can only find .533

/W

[umesh]

Hi woodrow,
Following always points to latest version, so you can use it:
http://download.comodo.com/ccav/installers/ccav_installer.exe

Thanks
-umesh

@woodrow post:66

Can you post a link for .537? This is what I run now.
I can only find .533

/W

[woodrow]

:-TU

/W

[mad]

Is it normal that the Valkyrie screen shows another amount of files being analyzed (28 vs 1) than the main window? (see screenshot)

[umesh]

Seems a bug.
Any one else with same problem?

@mad post:69

Is it normal that the Valkyrie screen shows another amount of files being analyzed (28 vs 1) than the main window? (see screenshot)

[BlueTesta]

@umesh post:70

Seems a bug.
Any one else with same problem?

Nope, neither my pc or the home theater pc dont have that bug.

[woodrow]

@woodrow post:58

Hi nasion,
I will try to get this done, but I cannot promise when, my one year old do not like me in front of the computer ;D

I will install CCAV in a new VM, does that work for you?
Regarding not updating after install I do not understand, I have not found a way to manually update CCAV?
Do you want me to run the same malware again, these must be detected by now and will not give the correct picture, or?

/W

Hi nasion,
You now have mail to both your inboxes from service@sprend.com containing the log file you asked for.
I did run a few files previously analyzed by Valkyrie including one of the ones we talked about before, and they all got analyzed again.
One of the them got detected when I opened that folder, so something must have been detected at Valkyrie, hope you find something in the log to solve this.

/W

[nasion]

@mad post:69

Is it normal that the Valkyrie screen shows another amount of files being analyzed (28 vs 1) than the main window? (see screenshot)

Hello ,The main UI is the all Valkryie analyzed files ,but the sub UI is the last week(past 7 days) .so please select all Valkyrie log for sub UI.

[nasion]

@mad post:69

Is it normal that the Valkyrie screen shows another amount of files being analyzed (28 vs 1) than the main window? (see screenshot)

[nasion]

@woodrow post:72

Hi nasion,
You now have mail to both your inboxes from service[at]sprend.com containing the log file you asked for.
I did run a few files previously analyzed by Valkyrie including one of the ones we talked about before, and they all got analyzed again.
One of the them got detected when I opened that folder, so something must have been detected at Valkyrie, hope you find something in the log to solve this.

/W

Hello woodrow,
I find some information about your test .

fls_query_file_vendor: date=2017-07-23 11:23:25 file_service,current file path=\Device\HarddiskVolume2\Users\Virru\Desktop\Virus\2\AHxzPvhr4.exe,current sha1=21864c4139d7e7f7f6ff6e23f458a4eaf73c0e3e,current verdict=3 ,proto=tcp,interval=4
fls_query_file_vendor: date=2017-07-23 11:22:55 file_service,current file path=\Device\HarddiskVolume2\Users\Virru\Desktop\Virus\2\nothing.exe,current sha1=d42ebd58d5437afc884019ce81f5be48349b1f43,current verdict=3 ,proto=udp,interval=0
fls_query_file_vendor: date=2017-07-23 11:22:55 file_service,current file path=\Device\HarddiskVolume2\Users\Virru\Desktop\Virus\2\Test message.exe,current sha1=89dfd961e0a219a0e424ca0a02d0ac9b934720a5,current verdict=3 ,proto=udp,interval=0

we can see the “current verdict=3”, the file rating is unknow, so it will be added to Valkyrie analyzed list. and the Valkyrie will analyze them.
CCAV get file rating by file SHA1 at fls and the rating is unknow too at valkryie.

I guess you generate a new file and file name is the same too as provious file. In this case ,Valkyrie dispaly UI treat file name as unique ID to user. so valkryie have to overwrite the privous record.

[woodrow]

Hi nasion, I did not generate any new files, they are all the same that have already been sandboxed and analyzed by valkyrie.

/W

[nasion]

@woodrow post:76

Hi nasion, I did not generate any new files, they are all the same that have already been sandboxed and analyzed by valkyrie.

/W

As I know from others (I donot know if they are from you),the sha1 should be following:
c5b5b46f69e3ef9db69e047da249f4762fe1a6e8
41b019700a7c936e85a49faa31638553fe6899b8
85c3b57ca19f5b8212fefd32533ef4902a2eefe5
b22a82b28e235f59e75a0cb1794ef08b0a442f9a
ece7e3e87e5a12c2898eac368e83ca47db4217c5
17b0b7dcc06fcdfd7470085aa55c872b81248d96
045604914c7dda45adce2969d69ccc3f0ea6b4b1
They are all malware files.

Another potential reason is for “down to 0” ,Valkyrie cannot read the file ,the Valkyrie will delete the the related record .

[mad]

@nasion post:73

Hello ,The main UI is the all Valkryie analyzed files ,but the sub UI is the last week(past 7 days) .so please select all Valkyrie log for sub UI.

Ah, yes, indeed. I have missed that selection. Now it shows the 28 as the main window does.

Any luck finding out why I have so many files for analysis and some dating to 2016?

[nasion]

@mad post:78

Ah, yes, indeed. I have missed that selection. Now it shows the 28 as the main window does.

Any luck finding out why I have so many files for analysis and some dating to 2016?

Hello mad,
Can you give me a screenshot ?I am sorry for I miss your meaning.

[mad]

Hello nasion,
I have attached the screenshots on the 3rd page of this thread (post is from 17.07.).
I also sent some sample files from the list to Flykite.