Author Topic: Comodo Cloud AV Test Results & Reviews  (Read 20453 times)

Offline yigido

  • Malware Research Group
  • Comodo's Hero
  • *****
  • Posts: 5691
  • COMODO Rocks!
    • Free Comodo Products!
Comodo Cloud AV Test Results & Reviews
« on: February 15, 2016, 08:43:17 PM »
Please share your findings about Comodo Cloud Antivirus Reviews and Test results under this topic. This will make all things together and easy to find  :-TU Let's share them..

Here is what I found today.
AVLab Review of CCAV : https://avlab.pl/przeglad-mozliwosci-najnowszego-comodo-cloud-antivirus

Original website is in Polish. See the Google Translate: https://translate.google.com.tr/translate?sl=auto&tl=en&js=y&prev=_t&hl=tr&ie=UTF-8&u=https%3A%2F%2Favlab.pl%2Fprzeglad-mozliwosci-najnowszego-comodo-cloud-antivirus&edit-text=

The video (process kill): https://www.youtube.com/watch?v=DF6VU7u8l00
« Last Edit: February 15, 2016, 08:48:28 PM by yigido »
COMODO Cloud Antivirus
Firefox Quantum
Encrypt the web! Use HTTPS Everywhere..
Block spying ads and invisible trackers! Use Privacy Badger..

Offline Sheepolina

  • Comodo's Hero
  • *****
  • Posts: 212
Re: Comodo Cloud AV Test Results & Reviews
« Reply #1 on: February 16, 2016, 05:10:05 AM »
What, it has ZERO self-protection? You can just kill it using task manager. Well, that's can't be good.

Offline qmarius

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 3841
  • making simple things complicated
Re: Comodo Cloud AV Test Results & Reviews
« Reply #2 on: February 16, 2016, 06:10:18 AM »
It is intended behavior. Horrible test.

Offline Sheepolina

  • Comodo's Hero
  • *****
  • Posts: 212
Re: Comodo Cloud AV Test Results & Reviews
« Reply #3 on: February 16, 2016, 06:25:49 AM »
How is killing a security software using ordinary Task Manager an "intended behavior" ?

Offline qmarius

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 3841
  • making simple things complicated
Re: Comodo Cloud AV Test Results & Reviews
« Reply #4 on: February 16, 2016, 06:38:08 AM »
Firstly, it is a trusted application. In some unexpected scenario, you would like to kill the process. Besides that, an unknown application is unable to terminate. More over, tampering is not allowed (eg with GUI).
Secondly, using such restrictions translates as no process monitoring in general. This is common behavior among oher vendors. The user won't be able to report process hangs caused by your graphics driver for example.
and many others.

Offline costi1977

  • Comodo Family Member
  • ***
  • Posts: 97
Re: Comodo Cloud AV Test Results & Reviews
« Reply #5 on: February 16, 2016, 07:08:03 AM »
Firstly, it is a trusted application. In some unexpected scenario, you would like to kill the process. Besides that, an unknown application is unable to terminate. More over, tampering is not allowed (eg with GUI).
Secondly, using such restrictions translates as no process monitoring in general. This is common behavior among oher vendors. The user won't be able to report process hangs caused by your graphics driver for example.
and many others.
you are right.  I think Cis apply the same policy. if you want to kill, kill-it.
« Last Edit: February 16, 2016, 07:48:10 AM by costi1977 »

Offline liosant

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 984
  • Terra é circo onde nós somos palhaços...
Re: Comodo Cloud AV Test Results & Reviews
« Reply #6 on: February 16, 2016, 10:35:31 AM »
This is one of the risks of practicality or lists of trusted applications.
Fortunately or unfortunately this is not the exclusive problem of COMODO >:-D

Offline Sheepolina

  • Comodo's Hero
  • *****
  • Posts: 212
Re: Comodo Cloud AV Test Results & Reviews
« Reply #7 on: February 16, 2016, 03:17:45 PM »
you are right.  I think Cis apply the same policy. if you want to kill, kill-it.

For GUI maybe, not for scanning service/server.

Offline qmarius

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 3841
  • making simple things complicated
Re: Comodo Cloud AV Test Results & Reviews
« Reply #8 on: February 16, 2016, 06:34:59 PM »
For GUI maybe, not for scanning service/server.

Once you grant kernel-mode access, it is not possible to deny termination trough bypass.  Impossible task. :)

Offline costi1977

  • Comodo Family Member
  • ***
  • Posts: 97
Re: Comodo Cloud AV Test Results & Reviews
« Reply #9 on: February 17, 2016, 03:15:50 AM »
I believe it was designed this way by the developers, when you want, you can stop processes. in your opinion, a virus (malware) can kill comodo? in 6 years of using comodo i never saw this think happening.
« Last Edit: February 17, 2016, 03:18:44 AM by costi1977 »

Offline Sheepolina

  • Comodo's Hero
  • *****
  • Posts: 212
Re: Comodo Cloud AV Test Results & Reviews
« Reply #10 on: February 17, 2016, 04:03:32 AM »
Because CIS cannot be killed. Interface yes (afak), scanning server, no. Just try killing it with a task manager. It won't work.

Offline wasgij6

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 5708
Re: Comodo Cloud AV Test Results & Reviews
« Reply #11 on: February 17, 2016, 02:33:40 PM »
CIS will allow the user to kill its processes but will not allow any application (known or unknown) kill it.
| Win 10 Pro (x64) | UAC Disabled | CCAV | Intel i7 4770k | Asus Maximus VI Formula Mobo | Asus GeForce GTX 780 | G.Skill TridentX 32gb RAM | Samsung 850 Pro SSD |

Offline costi1977

  • Comodo Family Member
  • ***
  • Posts: 97
Re: Comodo Cloud AV Test Results & Reviews
« Reply #12 on: February 17, 2016, 02:54:39 PM »
Actually, i cant kill any off the cis  processes from task manager.
in the ccav case its a bug or its made that way on purpose?

Offline wasgij6

  • Global Moderator
  • Comodo's Hero
  • *****
  • Posts: 5708
Re: Comodo Cloud AV Test Results & Reviews
« Reply #13 on: February 17, 2016, 02:58:27 PM »
Actually, i cant kill any off the cis  processes from task manager.
in the ccav case its a bug or its made that way on purpose?

im honestly not sure how CCAV is designed. I would think it would be different since it doesnt have the HIPS functionality of CIS. The most important thing to test is if CCAV can be killed by a known or unknown application.
| Win 10 Pro (x64) | UAC Disabled | CCAV | Intel i7 4770k | Asus Maximus VI Formula Mobo | Asus GeForce GTX 780 | G.Skill TridentX 32gb RAM | Samsung 850 Pro SSD |

Offline qmarius

  • Star Group
  • Comodo's Hero
  • *****
  • Posts: 3841
  • making simple things complicated
Re: Comodo Cloud AV Test Results & Reviews
« Reply #14 on: February 17, 2016, 04:58:18 PM »
Actually, i cant kill any off the cis  processes from task manager.
in the ccav case its a bug or its made that way on purpose?
It depends on your configuration and if you are using administrator rights. It is possible with 'Internet Security' configuration if I remember correctly.

im honestly not sure how CCAV is designed. I would think it would be different since it doesnt have the HIPS functionality of CIS. The most important thing to test is if CCAV can be killed by a known or unknown application.
It would require a process with high privilege level (eg System). I assume that CCAV does not use such privileges. It's safer (eg prevents privileges escalation), less resources intensive, etc.

 

Free Endpoint Protection
Seo4Smf 2.0 © SmfMod.Com Smf Destek