A review of Comodo Cleaning Essentials

[Melih]

Comodo Cleaning Essentials: Your PC's second line of defense

thx

Melih

[Tech]

The major utilization of KillSwitch that is arising in my mind is as a second scanner (opinion) for running processes. You can run it side by side with any other antivirus. But it should alert the user about the processes. Ok, it won’t be on access, but the results of the cloud would be great and if the user is alerted about the verdict.

[Melih]

@Tech post:2

The major utilization of KillSwitch that is arising in my mind is as a second scanner (opinion) for running processes. You can run it side by side with any other antivirus. But it should alert the user about the processes. Ok, it won’t be on access, but the results of the cloud would be great and if the user is alerted about the verdict.

that would be D+

[Citizen_K]

That’s nice and informative review. :-TU

[GakunGak]

Would it ever be a version of one file only and “force breach” startup like in hitman pro?
Other than that, it’s awesome! :-TU

[Tech]

@Melih post:3

that would be D+

What do you mean? That we can run D+ to get the verdict of the cloud?
Right now I’m using D+ only in a virtual environment and it’s working very good.

[icr]

@GakunGak post:5

Would it ever be a version of one file only and “force breach” startup like in hitman pro?
Other than that, it’s awesome! :-TU

I also agree with this idea, If KillSwitch would start in force breach method then it would be really good addition in malware removal capability otherwise KS would just act like another fancy software(No offense please, I like KS but the above mention idea would be icing in the cake)

[Melih]

@icr post:7

I also agree with this idea, If KillSwitch would start in force breach method then it would be really good addition in malware removal capability otherwise KS would just act like another fancy software(No offense please, I like KS but the above mention idea would be icing in the cake)

what does force breach do? can u pls explain. thx

[wasgij6]

@Melih post:8

what does force breach do? can u pls explain. thx

from the hitman pro website: "We received feedback from users that were infected by nasty malware, in this case a Rogue Anti Virus program, that was preventing them to start any application. Which means that Hitman Pro could not be started either.

Every program that is started by the user, is terminated by the malware.

The development team introduced a “Force Breach” mode for Hitman Pro. Hold down the left CTRL-key when you start Hitman Pro and all non-essential processes are terminated, including the malware process."

[Melih]

@wasgij6 post:9

from the hitman pro website: "We received feedback from users that were infected by nasty malware, in this case a Rogue Anti Virus program, that was preventing them to start any application. Which means that Hitman Pro could not be started either.

Every program that is started by the user, is terminated by the malware.

The development team introduced a “Force Breach” mode for Hitman Pro. Hold down the left CTRL-key when you start Hitman Pro and all non-essential processes are terminated, including the malware process."

so what do you guys want to see in KillSwitch?
a mode whereby u can start KillSwitch in a mode where only “Safe” processes are allowed to run and everything else is killed?

[miloszcz]

@Melih post:8

what does force breach do? can u pls explain. thx

Here is quick explenation: How to start Hitman Pro in Force Breach mode - YouTube

so what do you guys want to see in KillSwitch? a mode whereby u can start KillSwitch in a mode where only "Safe" processes are allowed to run and everything else is killed?

Yes!
CCE also. I’ve already e-mailed to Haibo Zhang who leads this projects? He told that he got this into consideration.

[wasgij6]

@Melih post:10

so what do you guys want to see in KillSwitch?
a mode whereby u can start KillSwitch in a mode where only “Safe” processes are allowed to run and everything else is killed?

this is a necessity because there are so many rogues these days they block everything from running including killswitch and cce

[Whoop-dee-doo]

@Melih post:10

so what do you guys want to see in KillSwitch?
a mode whereby u can start KillSwitch in a mode where only “Safe” processes are allowed to run and everything else is killed?

Something similar was suggested a while ago in the usability forum:

@Whoop-dee-doo post:5

Auto suspend
How about an option for Killswitch to automatically suspend any newly launched process that is unknown, suspicious, or malicious?. If you have this option, it may be helpful in two scenarios:

1. Early-load start-up. Have a small installer that can install a special “lock-up rescue” version of killswitch. This installer would early-load killswitch on start-up (using a random filename), but this version of killswitch will automatically “suspend all unsafe objects” when it starts. When an infected system is too bogged down by malware, trying to run killswitch in its current configuration is often impossible.
2. Running Killswitch in background. If you have malware that keeps re-launching new processes, Killswitch will automatically suspend the processes and not let them lock up the machine. This would be most useful for zero-day malware for which there is no signature (so verdict from comodo, other AV vendors, and Camas may be unknown).

[BoredNow]

@wasgij6 post:12

this is a necessity because there are so many rogues these days they block everything from running including killswitch and cce

Hmmm, I was playing with malware today, and nothing stopped Killswitch from running, including rouge AVs.
I had it running in the background, maybe that makes a difference?

However, when a Blackhole covers the screen you can’t click on the confirmation window that asks if you really want to terminate the process.
It would be nice to be able to press ‘enter’ rather than having to use that confirmation window.
Are there keyboard shortcuts that I’m not aware of?

[wasgij6]

@BoredNow post:14

Hmmm, I was playing with malware today, and nothing stopped Killswitch from running, including rouge AVs.
I had it running in the background, maybe that makes a difference?

yes this does makes a difference. try infecting a system with a rogue and then try and run killswitch if its like the rogues i have dealt with it wont always be able to run. sometimes i have luck if i right click and run as admin but not always

[GakunGak]

I would also suggest “live cd” of cce running in linux environment, for the worst case scenario…
Avira does it, Kaspersky does it [or is it pre-installed windows environment?!]; Symantec has that too, Dr. Web…

But focus on force breach should be priority, so that only critical processes remain running… :-TU

[gvvsss]

@GakunGak post:16

I would also suggest “live cd” of cce running in linux environment, for the worst case scenario…
Avira does it, Kaspersky does it [or is it pre-installed windows environment?!]; Symantec has that too, Dr. Web…

But focus on force breach should be priority, so that only critical processes remain running… :-TU

+1