COMODO Cleaning Essentials 1.5.181743.64 RC2 Ready!

[languy99]

I like that now it fixes problems in the registry. One has been missed though.

Hkey_Current_User/software/microsoft/windows/cucrrentVersion/Policies/Systems/DisableRegsitryTools

Bad Value (1)

Good Value (0)

[Melih]

@egemen post:1

Hello Everyone,

We are very excited to announce that Comodo Cleaning Essentials is ready for private beta testing.

What is Comodo Cleaning Essentials?

Simple. CCE is a set of tools we created for cleaning the infected computers. The main application, CCE, is a powerful virus, spyware, rookit scanner and cleaner. It has many advanced scanning and cleaning techniques that are not present in CIS yet. And then we have a powerful tool called Killswitch, which is purely for experts to diagnose EVERYTHING in a computer. Give it a try!

CCE features:

• Portable: No installation is necessary!
• DACS, Distributed and Collaborative Scanning, http://www.melih.com/2010/12/23/anti-virus-companies-are-protecting-criminals-not-anymore-thanks-to-dacs/
• Rootkit and hidden file/key scanner
• Aggressive file removing capabilities
• KillSwitch, advanced system activity monitoring tool

Whats new in CCE 1.5.181743.64?
NEW: CCE can now fix critical system settings (disabled task manager, ms config, run, regedit, etc).
NEW: New languages supported: Russian and Ukrainian
IMPROVED: More powerful MBR scanner
IMPROVED: Save CCE options in config.ini instead of registry
FIXED: Hidden files scanner does not work for some NTFS partitions
FIXED: KillSwitch crashes when opening properties of certain process
FIXED: KillSwitch does not show BHO correctly in some cases
FIXED: “Handle properties” can not be closed under certain circumstance in KillSwitch

[b]This is a private BETA and must not be used for any other purpose than testing. It can contain serious bugs and must be used only by community members.

DO NOT distribute it outside this forum as it is not intended for end-users even for testing purposes.[/b]

Bug Reports:

Please use http://forums.Comodo.com/Comodo-cleaning-essentials-cce-killswitch/Comodo-cleaning-essentials-1117429427-beta-bug-reports-t66866.0.html

Download Locations:

http://download.comodo.com/cce/download/setups/cce_1.5.181743.64_x32.zip
http://download.comodo.com/cce/download/setups/cce_1.5.181743.64_x64.zip

Regards,

Egemen

excellent work guys!

now…does anyone know any other AV cleaning that does this’ CCE can now fix critical system settings (disabled task manager, ms config, run, regedit, etc).'?
thanks
Melih

[Jiangtao]

@languy99 post:21

I like that now it fixes problems in the registry. One has been missed though.

Hkey_Current_User/software/microsoft/windows/cucrrentVersion/Policies/Systems/DisableRegsitryTools

Bad Value (1)

Good Value (0)

Hi,

Thanks, we will add it.

Best Regards,

[wasgij6]

@Melih post:22

excellent work guys!

now…does anyone know any other AV cleaning that does this’ CCE can now fix critical system settings (disabled task manager, ms config, run, regedit, etc).'?
thanks
Melih

superantispyware does this just not automatically and i think hitman pro fixes internet problems

[rhgtyink]

@J.T. post:23

Hi,

Thanks, we will add it.

Best Regards,

I assume where talking about DisableRegistryTools

[SerB]

Hi guys!

Why different some test results from KillSwitch 1.4(CCE 1.4.177889.49 RC1) and KillSwitch 1.5(CCE 1.5.181743.64 RC2) ?

What I do:

run KillSwitch 1.4 → View → Show only the unsafe images in memory.

After that, on the same computer, run KillSwitch 1.5 → View → Show only the unsafe images in memory… and the results are different(lot of unknown files)!

also did a few times on two computers - Windows 7 Ultimate(x86, SP1) and Windows XP Professional(x86, SP3), - same situation.

What is this bug KillSwitch 1.5?

[attachment deleted by admin]

[languy99]

@Ronny post:25

I assume where talking about DisableRegistryTools

yup spelling mistake on my part.

[Melih]

@wasgij6 post:24

superantispyware does this just not automatically and i think hitman pro fixes internet problems

i see…i wonder if they do it as thoroughly as CCE? worth testing…

This is a very important feature for any cleaning product imo.
Doesn’t symantec or others do that for cleaning?

Melih

[siketa]

@Melih post:28

i see…i wonder if they do it as thoroughly as CCE? worth testing…

This is a very important feature for any cleaning product imo.
Doesn’t symantec or others do that for cleaning?

Melih

Melih, I thought you like Symantec? ;D >:-D

[lodore]

I would like to see an extra tab in killswitch which shows all the programs which shows all the autostart with windows and an option to hide all the safe ones just like the process tab.
would it also be possible in the services tab to hide all the safe services?

[jay2007tech]

i see...i wonder if they do it as thoroughly as CCE? worth testing..

I think I'm going to intentionally cripple the living hell out of windows 7 on another computer later, if it fails to fix it I'll report back >:-D

[Melih]

@jay2007tech post:31

I think I’m going to intentionally cripple the living hell out of windows 7 on another computer later, if it fails to fix it I’ll report back >:-D

good plan

[siketa]

“They are violating the license, so I can make requests. But any further legal action is pointless for such an insignificant product which will probably die anyway because of the questionable status of DACS.”

:o ??? 88)

[gvvsss]

Melih,

Kaspersky also has a system restore functionality which does exactly the same. I do not know how thorough it is in doing so.

Where do I find what system cleaning functions does CCE RC2 implement?

[wasgij6]

@J.T. post:23

Hi,

Thanks, we will add it.

Best Regards,

maybe you guys should also add this
HKEY_LOCAL_MACHINE \ Software \ Policies \ Microsoft \ Windows NT
SystemRestore

[dmex]

@Ronny post:12

I’m not sure if this will be implemented like this, this would put a HUGE load on the DACS infrastructure and will increase you scan time immensely because it would need to upload way to much files for the systems to handle. They have to come up with some sort of smart coding that only verifies stuff in suspicious places like hitman pro does.

What I’d also like and would possibly be more interesting is the ability to select files and offer to scan them by DACS manually.

Comodo could remove a huge load from DACS by storing the SHA1 hash of dlls and sys files from a virgin Windows install.

Something like a xml file for each version of windows containing the hash of every dll and driver stored on the comodo server for local download, KS already hashes the files so it would be trivial to check the list before contacting DACS. This would also improve the terrible performance on slow-link connections.

[rhgtyink]

@dmex post:36

Comodo could remove a huge load from DACS by storing the SHA1 hash of dlls and sys files from a virgin Windows install.

It already has this in place, it first checks local store, then for SHA1 in the cloud, next it sends it to CAMAS for analysis and if that doesn’t result in blacklist it will forward to DACS p2p. At the point where CAMAS is involved there is upload of binary involved. And yes on dial-up links this is not really optimal.

[icr]

Tested and working smoothly, but what about killSwitch using force execution mode(I guess members know this), I thought it was going to be implemented

[evil_religion]

This software always eats up every little piece of memory it can get, causing it to stop working.
My testing environment is Windows 7 x32 in VirtualBox.

I tried to clean severe malware registry changes and the next time a TDSS 4 infection.
Comodo always begins to eat up all memory while scanning clean files like sidebar.exe oder autoexec.cfg.

KIS works perfectly.

[jay2007tech]

Quote from: jay2007tech on March 03, 2011, 11:49:30 AM I think I'm going to intentionally cripple the living hell out of windows 7 on another computer later, if it fails to fix it I'll report back >:-D

Seems to pass my tests, maybe I'm not being creative enough in trashing windows 7 :o >:-D