CIS4: Failed to update the virus signature database.

Does not work for me either. None of this methods.

Mine doesn’t update at first time (failed… notification) but every next time it tries to download, goes to 5% in seconds and fails as well.

Hm, can you tell me guys how much RAM memory you got?

I have 2GB of RAM, which should be plenty since my other computers that run COMODO are much smaller (my VAIO only has 256MB). The rest of my specs are in my signature.

Ronny, I had heard of SmartSniff, however I have never needed to use it. Will this help?

It will help pinpoint the cause, if it’s on the network or not.

See my other post here for more details about the capture
https://forums.comodo.com/news-announcements-feedback-cis/39-508-virus-defs-wont-update-t39348.0.html;msg303099#msg303099

Hmm, I ran smartsniff and began capturing, however when I went to update COMODO, nothing appeared on the list (as if it didn’t even touch the network). Seems like it’s being blocked. :confused:

http://img232.imageshack.us/img232/7971/imageoo.jpg

http://img232.imageshack.us/img232/7971/imageoo.jpg

Not sure what would be blocking it. None of my programs (except for COMODO and WinPatrol) can actually block an application. Those that do have already allowed COMODO. Nothing from COMODO is quarantined either.

Hi Sonic Gal,

Can you please verify if packets show up if you open a Browser window?
We need to verify if SmartSniff is working…

How many adapters does it show after you have pressed F9?

Maybe we need to install WinPcap to get the captures working.

Ronny, no need to worry; SmartSniff detects and shows connections from Firefox and other programs when they connect to the network. My bad; I should have cleared that. :slight_smile:

There is only one adapter, since I am using only one network card (my Netgear wireless USB adapter).

Good to know :wink:

Well then there are 2 options left.

  1. An intercepting proxy like for example Avast Webshield is intercepting the traffic before it can reach the Network card etc…
  2. Some form of proxy setting on IE.

How many of your other security software scan Web traffic? And if you “pauze/disable” them temporarily does it work then?

i think making all the properties of internet explorere to default will sove the issue
:slight_smile:

Akhil, read my posts on page three. Resetting IE’s settings made no difference.

Ronny, Avast is currently uninstalled; I removed it a few days ago to see if it was interfering, however it wasn’t and COMODO AV still doesn’t update.

I don’t have a single proxy setting in my browser, or anywhere else on my computer/network. I have never needed one.

The only other web shield I have is Spyware Doc. I shut it down as well, but COMODO AV still fails to connect. WinPatrol just notifies me when critical system files are being added (startup, services, etc) and isn’t a web shield. The last anti-malware program I have is COMODO, and it doesn’t seem likely that it would be blocking itself.

I’d like to try the following, can you find a “public” proxy server and put that in to the CIS configuration to see if it can update using that public server.
Maybe your Internet Provider has a proxy you could use to see if that works…

Can you also post a screenshot of the following regkeys HKLM\Comodo\Firewall Pro\Options\Proxy

Tried a public proxy, but it still doesn’t work (it failed immediately rather than showing 5% and stopping).

I can’t find Firewall under COMODO in regedit (under HKEY_LOCAL_MACHINE). Am I looking in the wrong place?

Sorry my bad \HKLM\Software\Comodo\Firewall Pro\Options\Proxy

Still can’t find it. All that’s under Comodo is a folder called CDI, and under that is a folder called “1.” Screen below:

http://img707.imageshack.us/img707/6402/screenqh.jpg

http://img707.imageshack.us/img707/6402/screenqh.jpg

:-[ :-[
\HKLM\System\Software\Comodo\Firewall Pro\Options\Proxy

No biggie, it happens to all of us. :smiley:

http://img682.imageshack.us/img682/493/screenav.jpg

http://img682.imageshack.us/img682/493/screenav.jpg

Is everything up to snuff?

That looks good.

So it won’t go off the wire, let’s see if we can access the url it would like to access by using IE.
Can you verify that you can open this link in IE

http://download.comodo.com/av/updates40/versioninfo.ini

Can you also ping two hosts for me to see if they are resolvable and reachable

ping download.comodo.com
ping downloads.comodo.com

Do you have some kind of hosts file protection/bulk blocking etc active?

Because in this 5% stage the following happens

  1. verifies proxy config
  2. no proxy so direct connection
  3. resolve DNS for download.comodo.com
  4. open HTTP session to download.comodo.com

Issues in that past that have caused this.

  1. Infected systems
  2. Faulty proxy settings (browser toolbars/automatic anonymous proxy etc)
  3. IE setting to “Work Offline”
  4. Other Security software intercepting
  5. Hosts file entries blocking the resolving of e.g. download.comodo.com to answer on 127.0.0.1

Yes, I was able to open the page in IE (led to the .ini file for download).

Second question, yep. I pinged the two sites and received a reply without fuss. Screen below:

http://img695.imageshack.us/img695/7473/cmdc.jpg

Third, no, I have no host blocking software.

My system has been infected once, however I reformatted the hard drive and restored my PC to a clean state (this was two years ago. Never been infected since).

Proxy setting is fine. I don’t use one, but everything works as it should without error.

IE is NOT set to work offline. Neither of my browsers are.

I already shut down all my security software, restarted my computer, and COMODO AV still does not update. Doesn’t seem like my other anti-malware programs are conflicting.

Since COMODO only receives connections from download.comodo.com, I will replace it with downloads.comodo.com and see if that makes a difference.

Nahh, still didn’t work. :-\

(This is off the point, but I believe it should be addressed. I really want to thank you Ronny for your help. I know the issue isn’t resolved yet, but I want you to know that I really appreciate your determination on solving this problem). :slight_smile:

No problem I like to help, and i can’t stand it we haven’t found the issue yet :wink:

Up for some more?
Can you download Process Monitor from M$

I’d like to make a trace of cfp.exe during the intended download.

One more other thing, can you open the CIS log viewer by selecting “View Antivirus Events”, press “More” and then go to “Other logs”, Tasks Launched.
It should state the number of AV update attempts and a “code” according to that attempt, can you please post a screenshot of that?