CCAV Hotfix is available today ; Performance issues solved !

[Sheepolina]

Haven’t got any reply to my question at the end of 3rd page. Why is CCAV slowing down file transfers to a super fast USB 3.0 drive with insane HDD grinding on the source drive? I was copying a ~2GB movie…

[patrice58]

Only the 3rd page you’re doing well! I have no real answer or acknowledgement for my bug report on page 2!

[Flykite]

@yigido post:60

Please check your inbox, thanks

OK , I have received your mail , thank you .
I will give you a feedback about the issue when we have a conclusion

[Flykite]

@Sheepolina post:61

Haven’t got any reply to my question at the end of 3rd page. Why is CCAV slowing down file transfers to a super fast USB 3.0 drive with insane HDD grinding on the source drive? I was copying a ~2GB movie…

Hi, Sheepolina
You try to close sandbox and antivirus in CCAV main UI ,then try to copy action ,check the speed .
pls tell me the result ,thanks

[231]

CCAV cannot detect this file for a second day in a row.

VirusTotal

It cannot run in the sandbox either. Even if I intentionally try to execute it inside, it starts for 2 seconds and then sandbox is empty.

[Dennis2]

@patrice58 post:62

Only the 3rd page you’re doing well! I have no real answer or acknowledgement for my bug report on page 2!

If you mean using CIS and CCAV together, the programs overlap in there functions so cannot be used together.

CIS as a firewall has other functions even if you disable them, CCAV has a sandbox plus other functions so is not a pure AV only.

Dennis

[lugo_58]

@23 post:65

CCAV cannot detect this file for a second day in a row.

VirusTotal

It cannot run in the sandbox either. Even if I intentionally try to execute it inside, it starts for 2 seconds and then sandbox is empty.

Maybe this sample is unique one. It can has anti-VM feature. It checks itself, does it run on a real system or not?
This is why it ends after ran.

[231]

@yigido post:67

Maybe this sample is unique one. It can has anti-VM feature. It checks itself, does it run on a real system or not?
This is why it ends after ran.

My mistake. Disabled PrivateFirewall and it started, showing some script error. After running for half a minute in the sandbox disappeared again. Now I have 2 instances of regsvr32.exe running inside.

But question is, what will the average user do in this case, if he/she is convinced that this file is safe? Will just disable the sandbox and run it again. It’s not detected by the AV after all, thus it must be safe.

Zemana AM shows this* .See screenshot.

edit: Oops…after starting PF again, it shows that now regsvr32.exe is constantly trying to connect to internet.

edit2: We need a button to empty the sandbox.

[attachment deleted by admin]

[Jon79]

@23 post:68

But question is, what will the average user do in this case, if he/she is convinced that this file is safe?

This is exactly my concern about sandbox/virtualization… you can check my comment here

@Jon79 post:10

That’s true, but I guess the keylogger comes with another software to hide it, right?
If so, if you run that software as virtualized, maybe something can’t work properly because of the virtualization (this happens with some unarmful softwares not yet whitelisted by Comodo).
So the average user will run again the software asking CIS to not virtualize it.
Then, what will happen? You get keylogged!!!

That’s why I think (just a personal opinion) it’s better to run any unknown software as “Run Restricted → Untrusted”. Like this you will get some pop-up from the HIPS and that can let you better understand what the software is trying to do and decide whether to allow it or not.
Of course, it’s user-dependent, but I think CIS warnings are quite clear to understand and manage

Some more references:
https://forums.comodo.com/defense-sandbox-help-cis/spyshelter-test-t109758.0.html
https://forums.comodo.com/format-verified-issue-reports-cis/limited-and-restricted-block-screen-capture-but-untrusted-does-not-m399-t95001.30.html

In my opinion HIPS and FW are two key components of a security software, so I’ll keep CIS even if CCAV is available.
What I think would be worth is to have an option in CIS to choose either the full AV (i. e., download the database on your PC) or just the cloud AV (which would be much lighter)

[231]

@yigido, check your PM.

[Sheepolina]

Would be nice if you could turn off AV or Sandbox without getting warnings all over the GUI. It’s so annoying. Isn’t it enough to have a switch that says OFF or Disabled enough, we have to change everything into RED and have bunch of buttons that say “Fix it”.

[BuketB]

Hello 23,

I would like to kindly inform you that devs are working on this regarding cloud av detection. Regarding regsvr32.exe; malware can not behave correctly in sandbox so it is possible to see such behaviour since some access are blocked.

Regarding the clear button, when you close the apps running inside sandbox, sandboxed is cleared automatically.So even if we put a clear button on that that would be a close button for the apps.

By the way, I ve inserted the fix list in the announcement following to your request; for your kind information.

Best Regards
Buket

@23 post:68

My mistake. Disabled PrivateFirewall and it started, showing some script error. After running for half a minute in the sandbox disappeared again. Now I have 2 instances of regsvr32.exe running inside.

But question is, what will the average user do in this case, if he/she is convinced that this file is safe? Will just disable the sandbox and run it again. It’s not detected by the AV after all, thus it must be safe.

Zemana AM shows this* .See screenshot.

edit: Oops…after starting PF again, it shows that now regsvr32.exe is constantly trying to connect to internet.

edit2: We need a button to empty the sandbox.

[231]

@BuketB

Thanks! :-TU

[Flykite]

@Sheepolina post:3

It’s still horrendously slow compared to other products like avast! and Panda Free AV. Not to mention it’s sandboxing things that weren’t sandboxed by first beta and that were not sandboxed by CIS. Even programs that have existed and are most likely widely used (Intel RST components). It seems like there is NO whitelist that is otherwise used in CIS. Quite annoying as I had to populate trusted apps by myself and that kinda defeats the purpose of such app (especially considering the existence of CIS).

Hi, sheepolina

Thanks for you tell us about your test result ,we want to reproduce the issue.
Can you tell or send me your safe file that sandbox by ccav ?
Very thanks

[BuketB]

Hi Guys,

Thank you very much for all of the feedbacks. I would like you state that our QA for CCAV product is processing related bug & wish reports on a daily base and we are processing them as fast as possible according to sprint plans.

Now that we have a bugs board please pay attention to post bugs in bugs board in the requested format . You may paste the link for the related bug report on the topic if you prefer for sure.

Thank you very much !

Kind Regards
Buket

[yro]

@BuketB post:75

Hi Guys,

Thank you very much for all of the feedbacks. I would like you state that our QA for CCAV product is processing related bug & wish reports on a daily base and we are processing them as fast as possible according to sprint plans.

Now that we have a bugs board please pay attention to post bugs in bugs board in the requested format . You may paste the link for the related bug report on the topic if you prefer for sure.

Thank you very much !

Kind Regards
Buket

Hy BuketB. Do You know if devs intent to use this new interface on the comodo security for linux and for android?

One more question: Do You know if this will be released, too, for Microsoft Windows Phone? It would be nice…

[wasgij6]

@yro post:76

Hy BuketB. Do You know if devs intent to use this new interface on the comodo security for linux and for android?

One more question: Do You know if this will be released, too, for Microsoft Windows Phone? It would be nice…

Please stay on topic. This is not the place to ask about other products

[yro]

@wasgij6 post:77

Please stay on topic. This is not the place to ask about other products

whata hell?

There is no other topic of sub-forum to ask this question. And this question is related to ccav. Just read it again and take care of text interpretation.

[BuketB]

Hey Yro,

I guess this means that you like the new UI design on CCAV , thank you very much :-TU

This new interface will be applied to windows CIS applications for now.

Kind Regards
Buket

@yro post:76

Hy BuketB. Do You know if devs intent to use this new interface on the comodo security for linux and for android?

One more question: Do You know if this will be released, too, for Microsoft Windows Phone? It would be nice…

[Sheepolina]

Is performance going to be addressed? Because despite advertised “lightness”, this AV is anything but light. And despite the performance fix, performance isn’t much better, it just isn’t horrendously awful anymore.