The new features are always good but the thing about killswitch is I prefer the old interface. Some quirks about the new killswitch are:
-Cannot see window contents while dragging
-Column width isn’t remembered
-I would like the original icons at the top instead of the new toolbar
-Program usage analyzer doesn’t work. The green progress bar is always full and the scan button does nothing.
-Single click and double click to show/hide from tray don’t work. Only a double click to restore from the tray works.
These aren’t huge issues, but it would be kind of nice if they were addressed before the final release. There are still plenty of betas beforehand to accomplish this.
idk if you have realized that this killswitch is completely new. in cce 1.7 comodo used the open source Process hacker and just built on that. in this version comodo does not use process hacker anymore and wrote there own code
Yes, I am aware that this happened. Does comodo have to avoid letting their own killswitch look like the process hacker killswitch? I think you can write a program from scratch but allow the GUI to look similar to an existing program. Let me know if some kind of licensing issues forbid this.
idk about licensing but i dont see a reason to make it look the same. comodo has never followed what others do and its better that they keep it that way. they should not make their own killswitch look like someone elses product. i understand that you like process hacker’s GUI better but comodo should not copy PH
Finally, this versions works for me in my VM so I’m able to test CCE against malware now.
I got a sample that modifies .exe classes in registry. After it is deleted by CCE no exes can’t be started anymore:
I do not know if this sort of “program” (as per your explanation) makes practical sense in this particular program. But, I do see it’s effectiveness again if I’m not mistaken if that was to be implemented into CIS in a way to pinpoint how many times a particular service has been a use. Haven’t I read in a various of threads asking why CIS has “svchost.exe” being used all the time? or at least it did.
Yes, this malware will modify the .exe file extension association in registry, CCE only cleaned the .exe samples but not restore the .exe file association. CCE will scan the .exe file association in next build. As for now, the solution as follows:
my computer is down so i can’t try the new version of cce but if comodo just changed the gui to be different then that in my opinion is changing for the wrong reason. i hope they built the gui based on efficiency and user friendliness which i’m sure they did. i hope it is better in those areas than the previous gui even though i didn’t discover any problems in previous versions of cce with the little time i’ve spent with cce. comodo should go with what is effective and works well regardless of whether or not it looks similar to another program