Author Topic: CPIL Tests Passed - But need help - [Resolved]  (Read 5379 times)

Offline Not So Naff

  • Comodo Member
  • **
  • Posts: 36
CPIL Tests Passed - But need help - [Resolved]
« on: December 16, 2006, 06:06:48 AM »
I am running XP Pro SPII, currently protected by Comodo Firewall 2.3.6.81, Prevx1 2.0.5 Build 6 and NOD32, all are fully up to date. (:AGL)

The CPIL Test Suite was run and Comodo Firewall identified, and I blocked, each of the attempts to send the data to the web site.

Very shortly after running the CPIL Suite Tests a few Warning Messages pop up in quick succession, all indicate that “IE explore” requires permission to..... In the main body of this information text there is clear mention of CPIL in combination with other familiar elements of other programs running on the machine.

I became confused by these Pop Up messages and faced with two choices:

1. Deny these requests because of the danger suggested by the mention of CPIL.
But if this option is taken access to the internet is cut off.

2. Allowing may enable CPIL, if it were truly nasty, send information back to its masters.

Please can somebody tell me the correct decision Deny or Allow?

Clarification as to the function differences between using or not using the pop up Warning Message Check Box “Always Remember This Choice” would be useful. Not using it implies that the choice would be applied once only but in use this does not appear to be the case.

I am probably missing something elementary and I would be most grateful for an indication as to what is likely to be displayed in the Warning Message if a real threat of the three CPIL types occurred?

I was directed to Comodo from Castlecops, quite the best link I have followed for a long time.:BNC

Sincere thanks to the Comodo Team for providing CPF (:CLP) and warmest seasons greetings to you all.   
« Last Edit: February 03, 2007, 03:57:25 PM by AOwL »
Stay VE safe, best regards, NSN
COMODO Firewall 2.4 temp?  VE 2.5.0.4  Prevx2 v1.0.2 Bld 112   NOD32 3.0.566.0  PerfectDisk v8  Bld 67

Offline Kamigatta

  • Newbie
  • *
  • Posts: 20
Re: CPIL Tests Passed - But need help to understand the 'Follow On' Pop Ups
« Reply #1 on: December 19, 2006, 05:26:52 AM »
yep i am having the same problem.. denying it will take away any connection to internet explorer PLUS it keeps sending the pop ups anyway if you dont check "Remember this option" :/

Any solutions?

Offline N.T.T.W.

  • Comodo's Hero
  • *****
  • Posts: 1124
  • A minute of your time can help many.
Re: CPIL Tests Passed - But need help to understand the 'Follow On' Pop Ups
« Reply #2 on: December 19, 2006, 06:06:07 AM »
After finishing the leak test I think you need to restart your pc in order to get rid of the pop up messages. Re-starting seems to clear them.

 :SMLR
Post proelia praemia.
Die dulci fruere.

Offline panic

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 11825
  • Linux is free only if your time is worthless.;-)
Re: CPIL Tests Passed - But need help to understand the 'Follow On' Pop Ups
« Reply #3 on: December 19, 2006, 06:32:49 AM »
G'day,

Categorically, after each individual leaktest, you should reboot! Yes, even in between CPIL 1, CPIL 2 and CPIL 3. Leaktest are designed to screw around with things at a low level. When CPF blocks the outbound attempt, the leaktest is still there in memory.

In the words of St. William of Redmond - Reboot, reboot and sin no more!

Hope this helps,
Ewen :-)
As your mums would say, "If you can't play nice with all the other kiddies, go home".
All users are asked to please read and abide by the  Comodo Forum Policy.
If you can't conform, don't use the forum.

Offline Not So Naff

  • Comodo Member
  • **
  • Posts: 36
Re: CPIL Tests Passed - But need help to understand the 'Follow On' Pop Ups
« Reply #4 on: December 19, 2006, 09:19:59 AM »
G'day to you panic, anderow and Kamigatta

Thanks for your input panic, I do not recall seeing and directions to this effect when carrying out these tests. In saying that I am not implying that the directions do not exist but they certainly need highlighting and improved prominence. A sort of cigarette packet job,

WARNING USING THIS PROGRAM CAN DAMAGE YOUR COMPUTER

In my case regaining access to the internet forced a re-installation of CPF and the test .exe was placed immediately in my specifically banned list.

There is a need for guidance, in my case at least, on how to handle the pop up message situation should truly vicious malware strike.

1. The Pop Up appears
2. The warning message is read, but is highly unlikely to be fully understood.
3. The request would therefore be Denied.
4. If the Parent is "iexplore.exe" access to the internet is ceased.
5. The machine is re-booted
6. What is the scenario now?
           [Where is the malware, is it secured, what action has to be taken, etc.]

At 4 the internet access may not be ceased but 6 still applies.

If there is more documented material available please can someone point toward it, or advise what has been overlooked in this exercise?

My first reaction in a real life incident would be to pull the plug on the internet connection, preventing the malware sending outbound or perhaps getting incoming help. I have no idea whether such action would be useful, but doing something positive is better than sitting looking at the screen.

I am seeking to collect the information that will benefit anyone finding themselves in a desperate situation, forewarned being forearmed.

You may have noted the avoidance of the use of "panic" for obvious reasons, a very apt handle in this case. I hope it did not originate because of a disaster.  (:WIN)
Stay VE safe, best regards, NSN
COMODO Firewall 2.4 temp?  VE 2.5.0.4  Prevx2 v1.0.2 Bld 112   NOD32 3.0.566.0  PerfectDisk v8  Bld 67

Offline Not So Naff

  • Comodo Member
  • **
  • Posts: 36
Re: CPIL Tests Passed - But need help to understand the 'Follow On' Pop Ups
« Reply #5 on: December 19, 2006, 03:29:04 PM »
Before this thread was started I Searched the Forums for answers and all I could find had incomplete answers and failed to address my concerns. This Thread was amongst those found:


At that time it appeared to have "stalled" before reaching any conclusion. With fresh input from panic it has sprung back into life and provides many of the answers needed. I would suggest that interested readers glean what they can from that thread.

When I have taken on board all the information, that I am capable of retaining, I will attempt to write it up [with due credits] in a check list fashion. This will be done off Forum and I will seek clearance for any subsequent posting.

Please do not expect a rapid response.
Stay VE safe, best regards, NSN
COMODO Firewall 2.4 temp?  VE 2.5.0.4  Prevx2 v1.0.2 Bld 112   NOD32 3.0.566.0  PerfectDisk v8  Bld 67

Offline Not So Naff

  • Comodo Member
  • **
  • Posts: 36
Re: CPIL Tests Passed - But need help - [CASE CLOSED]
« Reply #6 on: December 25, 2006, 12:04:01 AM »
Please follow this link to a full coverage of this subject:

http://www.personalfirewall.comodo.com/Comodo_Firewall_2.3_vs_The_Leaktests.pdf

Thanks to the Comodo Team for this publication.

This is CASE CLOSED.
Stay VE safe, best regards, NSN
COMODO Firewall 2.4 temp?  VE 2.5.0.4  Prevx2 v1.0.2 Bld 112   NOD32 3.0.566.0  PerfectDisk v8  Bld 67

Offline AOwL

  • Comodo SuperHero
  • Comodo's Hero
  • *****
  • Posts: 2349
  • Comodo Firewall Pro - Be safe, use protection...
    • NordicNatureMedia
Re: CPIL Tests Passed - But need help - [CASE NOW CLOSED thanks COMODO]
« Reply #7 on: February 03, 2007, 03:56:56 PM »
I will put resolved on this , and lock it.

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek