Author Topic: Comodo release 5 new security tests [CLOSED]  (Read 67924 times)

Offline SplittingDistant

  • Newbie
  • *
  • Posts: 6
Re: Comodo release 5 new security tests
« Reply #15 on: April 20, 2008, 08:44:50 AM »
My setup (CFP & CAVS - which I thought were configured correctly) managed:

"Vulnerable" on Rootkit Installation 1
"Protected" on Rootkit 2
"Error" for both .dll injections
"Vulnerable" to the BITS hijack.

Are we going to see any advice  from Comodo regarding ways to configure their products to protect against these threats?

Comodo, you've told me about the monster in the wardrobe, but not how to keep him locked in there. If you don't help me I'm going to have nightmares and probably wet the bed. I'm sure you don't want that to happen.

 
« Last Edit: April 20, 2008, 08:55:58 AM by SplittingDistant »

Offline Coolio10

  • Computer Security Testing Group
  • Comodo's Hero
  • *****
  • Posts: 464
Re: Comodo release 5 new security tests
« Reply #16 on: April 20, 2008, 09:35:31 AM »
They must of released it without testing against cfp. Many firewalls are passing but a lot of them come up with error which is basically saying your firewall passed. And many are also coming up vulnerable to BITS. I highly doubt comodo would release tests their own firewall couldn't pass so these tests seem to be screwed up.
(\__/)
(='.'=)
('')_('')

Giveaway of the Day" style="border: none

Offline kail

  • Randomly Appearing
  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 11361
  • The future is much like the present, only longer.
    • COMODO's free software!
Re: Comodo release 5 new security tests
« Reply #17 on: April 20, 2008, 10:49:02 AM »
BITS: The BITS vulnerability has been know about for some time. Unfortunately, BITS is a required component of Windows Updates (WU). Because of this vulnerability I, and probably many others, have disabled WU from automatically running on their systems and, for me, this included BITS itself. I used to manually turn BITS on (usually set to Manual) when I wanted to run WU, but since AutoPatcher rose from the ashes recently (with APUP) I don't use BITS any more.

I'm boring everybody with these.. BITS.. since I wonder if this why some people are passing the BITS test, whilst others are not.
My System Details: W10Px64 with CIS 10 Beta, Firefox & Becky!
Forum Policy.
____
The problem is not the problems, the problem is people's attitude towards those problems.

Offline Copy, right?

  • Comodo Member
  • **
  • Posts: 38
  • How old are you anyway?
Re: Comodo release 5 new security tests
« Reply #18 on: April 20, 2008, 06:13:03 PM »
Oh, NOW I get it, ...I think... where was I? Is this utility testing the firewall or the defence+? Because I was granting it access to execute, because I thought it was trying to "phone home", and that I was supposed to configure my firewall to stop it.

But I am not supposed to let it execute, is that right?

I'm so very confused...

Offline david banner

  • Comodo's Hero
  • *****
  • Posts: 326
  • NOT Comodo's hero
Re: Comodo release 5 new security tests
« Reply #19 on: April 27, 2008, 04:57:54 PM »
I was protected on the first, error for next 3 and  vulnerable to BITS Hijack. But it is not clear at all how to respond. Should all firewall alerts be blocked?
« Last Edit: April 27, 2008, 05:59:58 PM by david banner »
I am NOT Comodo's hero as claimed beside my name. Comodo is a joke

Offline ailef

  • Computer Security Testing Group
  • Comodo's Hero
  • *****
  • Posts: 946
Re: Comodo release 5 new security tests
« Reply #20 on: April 27, 2008, 08:12:29 PM »
it depends which alers u got, when the test wants to modify protected keys or create new ones or create files or load driver and run it or try to connect to the network, u should block all activities that are dangerous, like accessing high privileges too. all those activities can be allowed for safe apps but with unknown files, u see that his activities are just a way to attack your system.
Windows 8.1 Enterprise 64bit

Security programs installed : Comodo FW v12.2.2.7036

Offline marren

  • Newbie
  • *
  • Posts: 5
Re: Comodo release 5 new security tests
« Reply #21 on: May 01, 2008, 06:16:22 AM »
commodo fails on test 2-4 on my system regardless if I allow or block. I've just installed this and is trying to get this to work but I must say loosing confidence in this program fast. if a program is this hard to get configured to pass a test that "any decent security app" should pass then I guess it doesn't qualify as such an application I'm really surprised it won't pass it own tests out of the box without questions

Josh123

  • Guest
Re: Comodo release 5 new security tests
« Reply #22 on: May 03, 2008, 10:29:58 PM »
commodo fails on test 2-4 on my system regardless if I allow or block. I've just installed this and is trying to get this to work but I must say loosing confidence in this program fast. if a program is this hard to get configured to pass a test that "any decent security app" should pass then I guess it doesn't qualify as such an application I'm really surprised it won't pass it own tests out of the box without questions

Did you read the instructions in the first post, marren?

Some Alerts you need to ALLOW in order to past this test. That's what I figured. No need to lose trust in it :)

Josh

Offline don67

  • Comodo Loves me
  • ****
  • Posts: 133
  • Oh! Yeahhh!!!
    • My Site
Re: Comodo release 5 new security tests
« Reply #23 on: May 04, 2008, 09:57:57 AM »
My comodo fails all the test?




Offline salmonela

  • Computer Security Testing Group
  • Comodo's Hero
  • *****
  • Posts: 637
  • COMODO Volunteer DEModerator
Re: Comodo release 5 new security tests
« Reply #24 on: May 04, 2008, 10:33:27 AM »
don67, find clt.exe and remove it from "security Policy" and run test again (see picture)

[attachment deleted by admin]
Bad English, I know...
Thanks
PLEASE DO NOT REPLY DUMB QUESTIONS/ANSWERS

Offline don67

  • Comodo Loves me
  • ****
  • Posts: 133
  • Oh! Yeahhh!!!
    • My Site
Re: Comodo release 5 new security tests
« Reply #25 on: May 04, 2008, 11:54:59 AM »
DLL Injection 1, 2 is error :THNK

Comofo

  • Guest
Re: Comodo release 5 new security tests
« Reply #26 on: May 04, 2008, 12:38:15 PM »
Yeah, um, this one's a bit vague...I got:
1) Protected
2) Protected
3) Protected
4) Error
5) Crrrrashhhh...

At least I know I got the alerts...that's something anyway... 88)

Offline marren

  • Newbie
  • *
  • Posts: 5
Re: Comodo release 5 new security tests
« Reply #27 on: May 04, 2008, 01:32:29 PM »
Did you read the instructions in the first post, marren?

Some Alerts you need to ALLOW in order to past this test. That's what I figured. No need to lose trust in it :)

Josh

Hmm yes and the first time I ran the test I did allow all, but the result was the same. I then tried blocking all just for good measure and still I got the results:
Passed; Error; Error; Error; Crash. Seems more people have problems with the test so it not unique for me.

Offline don67

  • Comodo Loves me
  • ****
  • Posts: 133
  • Oh! Yeahhh!!!
    • My Site
Re: Comodo release 5 new security tests
« Reply #28 on: May 04, 2008, 02:19:26 PM »
here's mine

Josh123

  • Guest
Re: Comodo release 5 new security tests
« Reply #29 on: May 05, 2008, 03:19:34 AM »
Some funny results, eh?

Hope Paul gets back...

Josh

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek