Author Topic: Comodo Cloud Antivirus v1.12.420066.533 RC  (Read 12560 times)

Offline Yousername

  • Comodo's Hero
  • *****
  • Posts: 236
Re: Comodo Cloud Antivirus v1.12.420066.533 RC
« Reply #30 on: July 11, 2017, 09:29:08 PM »
On my end it is the same old song with Valkyrie, is there an ETA when the wait between submit (sandboxed files) and remedy from Valkyrie?

Or is there an "expected"  time to wait for Valkyrie?

Or a better answer would be how long the expected wait will be when you (the comodo crew) consider this Vakyrie project final?

/W
Quote from CEO:
We are investing heavily on detection technologies.....
We created "prevention" technologies...so we can protect our users and customers....Now we turned our attention to detection technologies.....you are seeing the affects of it, and this is only the beginning. We have created some really funky ways to detect malware....it blows your mind.......when these capabilities get into production you will see how powerful they are...

Cloud AV users should not have any "Unknowns" after 3 days of seeing that unknown.....we are reducing this to 4 hours........So between amazing protection and awesome detection I think we will serve our users well.


Offline woodrow

  • Comodo Family Member
  • ***
  • Posts: 77
Re: Comodo Cloud Antivirus v1.12.420066.533 RC
« Reply #31 on: July 14, 2017, 03:43:26 PM »
Thx for the info, the thing is that I have unknowns that are weeks old?

From earlier I learned that your computer would not have to be on all the time for Valkyrie to do what it does.
If you sandbox an unknown today it gets submitted to Valkyrie, I close down my computer and start it up next morning and the verdict should be in.
This does just not happen, now I wonder if this problem only exist on my end, or is there others out there who also experience this?

/W

Offline Yousername

  • Comodo's Hero
  • *****
  • Posts: 236
Re: Comodo Cloud Antivirus v1.12.420066.533 RC
« Reply #32 on: July 14, 2017, 05:25:01 PM »
Thx for the info, the thing is that I have unknowns that are weeks old?

From earlier I learned that your computer would not have to be on all the time for Valkyrie to do what it does.
If you sandbox an unknown today it gets submitted to Valkyrie, I close down my computer and start it up next morning and the verdict should be in.
This does just not happen, now I wonder if this problem only exist on my end, or is there others out there who also experience this?

/W

I think you should try to manually upload them.
It can take a long time. If your unknowns are random obscure unknowns then most likely the files submitted will require human analysis. Valkyrie tries to determine file verdict automatically using automated detection techniques. The obvious safe and malicious files are probably processed quickly, but I imagine that it is harder to provide automated verdicts for files that are more in the gray area, like a clean file that does not have a digital signature or a random dependency of a legit app, so human analysis is required. Human analysis can take a long time with the number of files that need to be analyzed. If you want something whitelisted it is probably better to submit it for whitelisting here https://forums.comodo.com/news-announcements-feedback-cis/submit-applications-here-to-be-whitelisted-2017-t117714.0.html


Offline pio

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 556
  • I like CIS , Kali Linux , IDA Pro & Fl Studio ;)
Re: Comodo Cloud Antivirus v1.12.420066.533 RC
« Reply #33 on: July 14, 2017, 08:36:21 PM »
Or a better answer would be how long the expected wait will be when you (the comodo crew) consider this Vakyrie project final?

A final stage of valkyrie ? This question is easy to answer . NEVER EVER !!!

Because the development of malware never stops , the same must also apply to valkyrie ! A never ending story of development and fight for improvements !  ;)

Regards !!!

« Last Edit: July 14, 2017, 09:12:25 PM by pio »
*** Paranoid Bastard since CIS 3.5 ! Independent - NON Profit Malware Analyst ***

Offline woodrow

  • Comodo Family Member
  • ***
  • Posts: 77
Re: Comodo Cloud Antivirus v1.12.420066.533 RC
« Reply #34 on: July 15, 2017, 04:55:08 PM »
A final stage of valkyrie ? This question is easy to answer . NEVER EVER !!!

Because the development of malware never stops , the same must also apply to valkyrie ! A never ending story of development and fight for improvements !  ;)

Regards !!!

Maybe I was not clear enough, English is not my native language after all.
I understand that development will never stop, but the question was, how long the expected time for a unknown file should be, until I get a verdict?

/W !!!


Offline pio

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 556
  • I like CIS , Kali Linux , IDA Pro & Fl Studio ;)
Re: Comodo Cloud Antivirus v1.12.420066.533 RC
« Reply #35 on: July 15, 2017, 07:22:57 PM »
Maybe I was not clear enough, English is not my native language after all.
I understand that development will never stop, but the question was, how long the expected time for a unknown file should be, until I get a verdict?

Hi woodrow ,

to answer that I quote Melih again .

Cloud AV users should not have any "Unknowns" after 3 days of seeing that unknown.....we are reducing this to 4 hours........So between amazing protection and awesome detection I think we will serve our users well.

Valkyrie is constantly evolving . To implement any improvements completely , it takes time . Maybe it is also possible to reduce the waiting time even further . You also have the possibility to upload the file to valkyrie ! >>> https://valkyrie.comodo.com/login?next=%2Ffvs . At the moment ,  the waiting time is about 20 to 45 seconds . So try it out if you want ?!  ;)

Best Regards !!!

Pio

« Last Edit: July 15, 2017, 09:11:34 PM by pio »
*** Paranoid Bastard since CIS 3.5 ! Independent - NON Profit Malware Analyst ***

Offline woodrow

  • Comodo Family Member
  • ***
  • Posts: 77
Re: Comodo Cloud Antivirus v1.12.420066.533 RC
« Reply #36 on: July 16, 2017, 02:30:48 PM »
Ok, the problem is not that the files needs to be uploaded to Valkyrie, they are already there, since 170623.
CCAV tells me that Valkyrie is still analyzing these 7 files, almost 4 weeks later.
I consider this a problem, (maybe even a bug?) that is why I ask if there are others in the same situation.

From what I know, these are all malware, and they are still sitting on my system.
I know I am safe because of the sandbox, but that is not the question here.

/W

Offline pio

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 556
  • I like CIS , Kali Linux , IDA Pro & Fl Studio ;)
Re: Comodo Cloud Antivirus v1.12.420066.533 RC
« Reply #37 on: July 16, 2017, 04:46:26 PM »
hi woodrow ,

i send you an PM !!!

Anyway ... , sometimes when valkyrie gets maintenance , then it is possible that some files can not be transmitted correctly . Perhaps you had caught such a moment  ?!

Kind Regards !!!

pio
*** Paranoid Bastard since CIS 3.5 ! Independent - NON Profit Malware Analyst ***

Offline mad

  • Comodo Family Member
  • ***
  • Posts: 67
Re: Comodo Cloud Antivirus v1.12.420066.533 RC
« Reply #38 on: July 17, 2017, 05:29:38 AM »
I have a similar problem like woodrow.
I am not sure if this is a bug or something that is still being worked on (that is why I have let it be until now).
I attached 2 screenshots. I have 27 being analyzed files (e.g. from the screenshot: it is a Realtek driver and a bunch of MS Office files).
Can someone have a look at this?
If needed, please move post. I can provide additional info if needed. Thank you.

Offline woodrow

  • Comodo Family Member
  • ***
  • Posts: 77
Re: Comodo Cloud Antivirus v1.12.420066.533 RC
« Reply #39 on: July 17, 2017, 01:20:26 PM »
Ok, then we are two guys with the same problem, only difference is that all mine are malware.
I guess Umesh are sipping drinks on a well deserved vacation, but if you read this, please do not release CCAV final until this is resolved once and for all.
This will be a killer AV if all features that are in now would just work 100%.

/W

Offline Flykite

  • Comodo Staff
  • Comodo's Hero
  • *****
  • Posts: 516
Re: Comodo Cloud Antivirus v1.12.420066.533 RC
« Reply #40 on: July 18, 2017, 03:29:32 AM »
Hi mad & woodrow,

Could you please provide us some "Being analyzed" files? I want to check them on our side.

thanks in advance!

I have a similar problem like woodrow.
I am not sure if this is a bug or something that is still being worked on (that is why I have let it be until now).
I attached 2 screenshots. I have 27 being analyzed files (e.g. from the screenshot: it is a Realtek driver and a bunch of MS Office files).
Can someone have a look at this?
If needed, please move post. I can provide additional info if needed. Thank you.

Offline woodrow

  • Comodo Family Member
  • ***
  • Posts: 77
Re: Comodo Cloud Antivirus v1.12.420066.533 RC
« Reply #41 on: July 18, 2017, 04:26:12 AM »
The second screenshot from mad shows the dates, for me these dates change every time to the current date when I open that window.

Could this be an issue? The date should be the date the files were submitted right?

/W

Offline mad

  • Comodo Family Member
  • ***
  • Posts: 67
Re: Comodo Cloud Antivirus v1.12.420066.533 RC
« Reply #42 on: July 18, 2017, 05:41:49 AM »
[at]woodrow
The dates do not change in my case. The files and the dates stay the same.
Only when I am installing a new game and give it exception in CCAV, it gets added to the end of the being analyzed list; upon uninstalling the game, the entry disappears.

[at]Flykite and pio
I send you a link to the archive containing some sample files from the previously posted list.

Offline Umesh

  • Comodo Alumni
  • Comodo's Hero
  • *****
  • Posts: 3421
  • Comodo Alumni
    • COMODO
Re: Comodo Cloud Antivirus v1.12.420066.533 RC
« Reply #43 on: July 18, 2017, 09:39:35 AM »
Hi woodrow,
We are not there yet but working towards that goal.
There are significant improvements but every submitted file can not be classified over night at the moment, some do get analyzed very fast and some don't.

Rest assured, we are working towards that goal, where you get up and CCAV world is classified into black and white :)


Thanks
-umesh
Thx for the info, the thing is that I have unknowns that are weeks old?

From earlier I learned that your computer would not have to be on all the time for Valkyrie to do what it does.
If you sandbox an unknown today it gets submitted to Valkyrie, I close down my computer and start it up next morning and the verdict should be in.
This does just not happen, now I wonder if this problem only exist on my end, or is there others out there who also experience this?

/W
We can't stop malware entering user's PC but we render them use-less when they enter PC: Welcome to Comodo's Default Deny innovation

Offline woodrow

  • Comodo Family Member
  • ***
  • Posts: 77
Re: Comodo Cloud Antivirus v1.12.420066.533 RC
« Reply #44 on: July 18, 2017, 10:49:51 AM »
Hi woodrow,
We are not there yet but working towards that goal.
There are significant improvements but every submitted file can not be classified over night at the moment, some do get analyzed very fast and some don't.

Rest assured, we are working towards that goal, where you get up and CCAV world is classified into black and white :)


Thanks
-umesh

Great Umesh!
Then it is not a good idea to release information that detection should take only 4 hours,  this only adds to the confusion. (See posts above)
It is always better to say that this is still a work in progress, or else people trying CCAV will just uninstall it, and start spreading crap.

Keep up the good work!

/W
« Last Edit: July 18, 2017, 11:01:06 AM by woodrow »

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek