Comodo Firewall Free inflate the Windows registry

Comodo Internet Security - CIS Defense+ / Sandbox Help - CIS
1

Hello

CF should have a section exclusion in Defense + to include any file or folder (eg Avast Free) to cause any conflict.

The behavior verification avast has made Comodo Firewall Free create keys ceaselessly inflating the registry.

An example of the registry key and value that they may have an idea of the location:

HKLM \ SYSTEM \ Software \ COMODO \ Firewall Pro \ Configurations \ 2 \ HIPS \ Policy \ 6 \ Rules \ 1 \ Allowed \ 489

C:\WINDOWS \ TEMP \ avast5 \ unp57428155.tmp

The entries in the registry can spend a thousand.

I discovered this with the registry cleaners.

I use Windows XP Professional SP3 and Avast 5 Free (latest release).

EDIT.

Maybe solved:

STEP 1

Defense+ Settings > Create rules for safe applications

STEP 2

Defense+ > Computer Security Policy > Defense+ Rules > All applications > C:\Files Programs\Alwil Software\Avast5\AvastSvc.exe > Customize > Protected Files/Folders > Allow

2

Yeah, he’s goin to do that given the temp folder. Virtually every one of those files will never be seen again.

I suggest that you edit the protected file/folder exclusion list like so:

C:\WINDOWS \ TEMP \ avast5 \ *.tmp

3

Or

C:\WINDOWS \ TEMP *

4

No, it wouldn’t be a good idea to exclude the entire temp folder.

5

Why not ?

The rule is related to “AvastSvc.exe”.

6

HeffeD:

Excluding from ‘ask’ permission, i.e. ‘allow’ permission to write to.

In other words, one trusts Avast to write to that folder w/out asking. The wildcard fullfills any and every write request.

Henrique:

Is better to implement security policy of least permissions necessary.

If avast also needs additional file type, add as necessary, e.g.,

C:\WINDOWS \ TEMP \ avast5 \ *

i.e., files w/out extensions.

If another app wants to write into its own folder, create a rule specific to the app using appropriate wildcard.

Here’s another example:

C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.100.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.101.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.102.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.103.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.104.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.105.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.106.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.107.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.108.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.109.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.110.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.111.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.112.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.113.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.114.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.115.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.116.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.117.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.118.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.119.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.120.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.121.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.122.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.123.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.124.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.125.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.126.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.127.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.128.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.129.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.130.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.131.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.132.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.133.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.134.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.135.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.136.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.137.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.138.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.139.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.140.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.141.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.142.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.143.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.144.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.145.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.146.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.147.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.148.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.149.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.150.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.151.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.152.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.153.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.154.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.155.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.156.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.157.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.158.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.159.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.160.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.161.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.162.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.163.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.164.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.165.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.166.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.167.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.168.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.98.aawdef
C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw2009-excluded-build-150.99.aawdef

If using ‘auto create rule for safe app’, registry soon become bigger than hard disk.

Make one rule:

C:\Documents and Settings\All Users\Application Data\Lavasoft\Ad-Aware\Update\aaw*.aawdef

Problem goes away.

7

Sorry, I was reading too quickly. :-[

I saw the word exclusion and assumed the AV… 88)

8

Well reading this thread, I’m confused. I have Avast! 5. What exactly do I need to do to stop Comodo from making a bunch of registry keys, and how do I get rid of the ones it’s already made?

9

STEP 1

Defense+ Settings > Create rules for safe applications

STEP 2

Reboot the computer

STEP 3

Update Avast 5

STEP 4

Defense+ > Computer Security Policy > Defense+ Rules > All applications > C:\Files Programs\Alwil Software\Avast5\AvastSvc.exe > Customize > Protected Files/Folders > Modify > Remove any that you have in “Files / Folders Allow” > Add the directory: C: \ WINDOWS \ TEMP \ * > ok > ok > Apply > ok

STEP 5

Defense+ > Computer Security Policy > Defense+ Rules > All applications > C:\Files Programs\Alwil Software\Avast5\Setup\avast.setup > Customize > Protected Files/Folders > Modify > Remove any that you have in “Files / Folders Allow” > Add the directory: C: \ WINDOWS \ TEMP \ * > ok > ok > Apply > ok

STEP 6

Use a registry compactor, and optimizer such as the free Auslogics Registry Defrag (Windows XP).

10

Huh, kind of confusing, and I can’t find Avast.setup. Also, is it a problem since I have Windows 7, not XP? And I though it’s bad to add Windows/TEMP folder?

11

Seems ok with proactive configuration, at its default settings.

Avast updates fine, no such entries for me in defense+ rules or registry.

where are your inflated rules appearing? if its under explorer.exe, that is trusted anyway by default in proactive, so protected/files are allowed, “create rules for safe applications” is also off