Bugs report for CAVS Beta 2.0.8.20

Hi,
Could you Please send/upload Troubleshhot log after installing 2.0.8.20?

regards
Kishor

Hi
Can you pls send/upload the cavSn.log from troubleShoot log?

regards
Kishor

I agree that it’s odd. But on the other hand, it’s good news that the on-access scanner detected the virus. The only question I’ve left is why the on-access scanner didn’t detect the files when it was downloaded?

Hi Roy,

Thanks for pointing this issue out. There is a problem in on-access driver that accidentally thinks that the downloaded eicar file was already scanned. It is being fixed now.

On-access scanner displays virus alert when you move the mouse over the infected file because Windows opens file to read its properties for displaying them in a tooltip. At this point on-access catches and denies access to the infected file.

Thanks,
Alex.

Hi Kail,

Thanks for the info. Could you please also do a search for the “verclsid.exe” file, and give me a full path to it?

Thanks,
Alex.

That’s it. I’m removing CAVS for now. It keeps on freezing my system. Even with the StartRight it freezes my laptop. I’ll wait for the next version and hopefully the problem is fixed then.

Hi Kishor,

Here is the LSP log file showing the failure.

hlb

[attachment deleted by admin]

Hi Kishor, thanks for your response. Yes, I do have a T drive, it is a Logical Partition. But, no system files are present on that drive.

Hi!

Thank i know that spyware Terminator has HIPS. I don’t use it but i have uninstall it and reinstall CAV it’s the same problem. I don’t have more power to fight with CAV i have testet the betas on all possible Machines windows 200,Xp,2003 now and do screenshots so on.

CAV is at the moment not stable enough (for me). And the HIPS feature in CAv i don’t like better was a rootkit detection eg. However. I will now stopping posting possible bug. Sorry i can’t no more i don’t have power enough to do this.

my wish for CAV is to push down the system requirements about CPU and Ram usage and improve the performance overall in CAV i think this is high priority not HIPS. It was possible to Put out a Stable release with bugfixes and performance optimizions and remove HIPS for now. When this feature is stable enough and works without problem than can come back to CAv so the users have a goot Antivirus Product and Stable And Comodo have enough tome to integrate HIPS later in CAV. So i am done.

regards jovan

Hello again!

I’ve come across another issue on my PC.

All was running OK on my user (admin) account in XP (SP2). CAVS running with hips on. I then switched back to the user log on screen (pressing window symbol key & L on my keyboard). I then logged on to another user account on my pc (also an admin account).

The first strange thing occurred - instead of going straight to the “loading your user setting” screen (whatever the phrase) for this second account, my PC went back to “loading windows” screen that I normally get before the user accounts screen comes up (during boot). Then my pc proceeded to the loading settings screen, and got as far as loading the background & a couple of icons (network icon& volume icon)… but then…

Second strange thing - neither the CAVS or CFP icons appeared in the taskbar, and my pc was unusable - frozen. I had to switch off and start again.

I then tried the same thing with HIPS disabled. I had the same issue of going back to the loading windows screen, but this time the other account loaded OK, PC working. I then re-enabled HIPS from this second account. Then logged off this account (start, log off) at which point the log off process initiated, got part way through & ground to a halt. Again - I had to re-start my pc.

Repeating the above again with HIPS de-activated and all was OK. Log on/off, switch account etc.

SO… my (amateur) conclusion is that there is a process related to user account switching, logging on/off etc that is being caught by HIPS. But I can not “allow” it as I can not see any pop ups - as the PC is in mid-flow switching accounts or whatever.

Cheers. R. :■■■■

Today i did the following on one of the computers which solved the 100% cpu usage problem (right now it seems):

  1. cpf uninstall
  2. reboot;
  3. cavs beta uninstall;
  4. cavs reinstall;
  5. i let cavs create my user database;
  6. i’ve updated cavs;
  7. i installed latest downloadable hungarian cpf;
  8. reboot;

I’ll try later at home.

UPDATE: this just seems to solve the cpu bug but this release caused a blue screen.

My bug with this beta is in HIPS it seems. When the computer starts, a HIPS Application Alert pops up for yupdater.exe (yahoo messenger updater), but the box won’t let me click on any of the checkboxes, and the popup won’t go away. The system also moves at a crawl at this point. No CPU usage being used by anything, or disk reads/writes, just is crawling. If i mange to shut off HIPS the box kinda goes away, but a white shadow box stays there where the popup used to be.
If i then try to restart the Comodo Anti-Virus/Anti-Spyware windows service, it won’t stop properly, just sits in the Stopping… state.

My system is:
Dell XPS Gen 2 Laptop (2Ghz/2GB/100GB)
Windows XP Pro SP2 with all updates
No other antivirus program ever installed, but Windows Defender is installed.
Also running Comodo iVault

-Tony

There seem to be more and more posts regarding the HIPS pop up buttons being hidden!

:THNK

Since my last post on Feb 4, I have been using CAVS very successfully. The only small problem that shows up now is once a scan is finished and it asks to submit files to Comodo for inclusion in the safe list, I click submit, it cues the files and then nothing happens. The files are cued for sending but they are not sent. This happens each time and the same files show up each time. Also I am sure they do not want my jpg’s and registry backups in the safe list so a way of keeping these from showing up each time would be a good fix. In spite of this I love the program. Keep up the good work.
Thanks
John

I have so much hopes for CAV 2 however. The 1.1.0.3 had installed now. But I must say is it simply slowly both the version 1.1 and that 2 you must really very much at the work on the Performance .

I want a answer from a Dev what is the problem why it’s so slow and need so much on System recources. thank you!

Hi Kishor,

In my previous reply to you, I sent the LSP log.

I have since been able to successfully install CAVS Beta 2.0.8.20 on both of my systems. Here is what I did.

  1. Uninstall - Got an error that the removal of the email scanner failed - Same as before.
  2. Ran WinsockxpFix.exe to repair Winsock BEFORE doing the install - New added step.
  3. Installed 2.0.8.20 - No failure to install email scanner this time because Winsock was repaired.

Inbound and outbound email scanning appear to be working now.

The email Mass Worm Detection does not work correctly. If I turn it on, I can’t send SMTP email.

I hope that this is helpful to you.

hlb

Yeah…I had to repair my Winsock for installation to work as well (email scanner didn’t work before)

Solution: more thorough uninstallation

Today after 4 succssful days, My outgoing email scanner has slowed down. I don’t know any reason for that as yet. I have not changed any settings for the 4 days CAVS has been running well. If I figure it out I will post, and if someone else has solved this let me know.
John

Hi hlb,
It seems that LSP related registry read/write operation fails.
Do you have CPF installed? If so, can you pls try it after uninstalling CPF. Pls let us know the result.

regards
Kishor

I have excluded vncviewer.exe (RealVNC) from being scanned (both on-access and on-demand) but I am still being alerted. If this makes any difference, I had changed from the default “automatically disinfect objects” to the option below.

:slight_smile:

Edit: Also, I am constantly being prompted to create a rule for an application running from the server (using UNC path).