:-TU
nice job team!
Detection test of several free antivirus (sorry, it’s in Italian):
Why CCAV’s detection is so much lower than CIS’ one (67,6% vs. 82,1%) ?
Last year it was nearly the same (86,8% vs. 86,9%)
I thought cloud lookup database (used on both CCAV and CIS) was wider than the offline database (used on CIS only).
Or perhaps CCAV’s cloud lookup is different compared with CIS’ cloud lookup ?
Hi Jon79,
CIS has complete antivirus base and has generic signatures. So a file that’s not in Comodo back-end, can still be detected.
While for CCAV, file must exist in comodo back-end.
So when you make a static scan using CCAV, files are looked up in cloud and in case they are present in there, they will be detected else not.
However due to default deny, protection level is the same and once you execute, file will be submitted to Valkyrie and detection can be seen immediately.
So if you take bunch of files and make a static scan, differences can be there depending on files set in use.
Thanks
-umesh
Hi umesh,
Thanks for the confirmation, that was my understanding too 
I thought Comodo Antivirus total databases are available in the Cloud too, and CCAV have access to the total databases.
So CCAV have access to Valkyrie databases only?
When you scan file using CCAV, hash of file is looked up, if back-end has related file, results are returned.
In case we don’t have file and if you upload file, file will be scanned using complete bases in cloud and results will be returned.
Thanks
-umesh
Currently only sandboxed files are uploaded, right?
Yes.
Correct.
That policy must change, imho! Unknown is the biggest enemy and we let it be unknown on that computers. File must be uploaded to Valkyrie, if it got sandbox alerts.
We are planning to submit all unknown programs soon even seen via static scan.
Privacy comes first.
Then, if the user allows the submission, that’s fine
:-TU Thanks umesh for the info
Exactly that :-TU
We don’t need Comodo data slurping like many other AV companies do.
COMODO Cloud Antivirus Review By: Softpedia.com Apr 2nd, 2018
http://www.softpedia.com/get/Antivirus/Comodo-Cloud-Antivirus.shtml
Comodo scored as high as anyone in the latest AVLab tests
https://avlab.pl/en/best-antivirus-software-2018-based-three-security-tests
Could you please have a look at this video? It looks like an MBR bypass
Thanks for pointing out, we are analyzing it.
umesh
https://www.youtube.com/watch?v=aJuJOzxqYOQI send some links "PM" for the .zip files from the youtube video in case they take it down
Although in the .zip file I dont see anything usefull.