D+ Alerts

I combined some suggestions for the D+ alert window into a few sample pics. My wishlist for the D+ alerts and the sample pics are located here.

What do you think?

Whoop

Just answered it. i like the suggestions

Me too :-TU
Good job.

See additional D+ alert pic posted by fOrTy_7 here (it is nice and concise). With the alerts I made, I did not want the threatcast graph to look like the A-squared graph, so I showed different ways of illustrating the info.

I fiddled with the alert again and came up with another look (see pic).
I divided the detailed info into:

    1. Explanation of the processes activity.
    1. Advice for the user, which includes the advice given by Comodo(e.g. “you can safely allow this”) and the advice offered by threatcast.

This seems to be better organized and more clear, especially since the advice is concise and all in one place. I think someone with more artistic ability can probably make it look nicer than I did

[attachment deleted by admin]

This alert looks fine, Woop. presents the needed info nicely. I’d be happy with it.

Here are some additional pics of sample D+ alerts.

Summary of changes/suggestions:

  • When the alert recommends to send the file to Comodo, the “submit to Comodo” option at the bottom of the alert should be selected by default,
  • At the bottom of the alert, I added a “terminate process” option (i.e. stop the process altogether, rather than just block a single event). When “terminate process” is selected, the “remember this action” is unselected and greyed out (i.e. it cannot be activated).
  • I divided the alert into two sections: 1) Explanation of the processes activity (e.g. Why did I get this alert?), and 2)Advice for the user, which includes advice given by Comodo (e.g. “you can safely allow this”) and advice offered by threatcast.
  • I moved the “What would you like to do?” question from the top of the D+ window (where it is far away from the choices, and barely noticable) to the bottom of the window (near the choices). The question and potential answers should be close together.
  • I placed the detailed info (what Comodo calls “special considerations”) and the threatcast info on a single screen. I think it makes sense to let the user see all the info at one time: it helps establish an overall impression of how to answer the alert.
  • I removed the cancel button. The cancel button never made sense to me (if you cancel the alert, does it allow the process or block the process?). Get rid of the cancel button.

Whoop

Edit: I added a 2nd pic, which uses a different threatcast graph (the one proposed by fOrTy_7 here and here). I thought it may be nice to combine some of our concepts to see what they look like together.

[attachment deleted by admin]

The extra option is great, Whoop. My question is: why did you grey out the “Remember my Answer” ? Did you not wish this to be a user option if it is a valid application?

Well, I thought that remembering to terminate a process may cause problems, mainly with important system files (such as explorer.exe). If the user does not ever use Training mode or clean PC mode, but instead sets D+ initially to paranoid mode (so all programs generate a D+ alert), then the user selected remember terminate “explorer.exe”, I think the computer may become unresponsive. I was just trying to prevent an issue like this from happening. Maybe my concerns are unfounded…perhaps someone with more experience in this area can tell me if remembering a terminate process can really cause this kind of problem.

The solution would be simple: Does not matter if the check box is checked or not, Terminate would not remember.
Issue resolved.

That is what I was trying to demonstrate in the pic…when the user selected terminate process, the “remember” option would uncheck (so it would not remember) and would grey out (so the user could not re-select it).

If it we just let “terminate process” ignore the “remember” checkbox…there would be a ton of bug reports saying D+ won’t remember! ;D

You could place in brackets next to “terminate Process” (will not remember).

And if the user wants terminate and block?

Well, I think the options can be tweaked to implement whatever choices are deemed worthwhile. The pic below is one way of incorporating the option you suggest (terminate and block).

Okay, I put that in the pic below to see what it would look like.

I’ll just keep trying to fine tune things based on everybody’s input.

Whoop

[attachment deleted by admin]

One thing that doesn’t make sense to me is the radio buttons on the dialogue, and how you have to check the correct radio button, and then click okay. I realise that these are necessary for all the different ways in which you could answer, but most of the time I would like a big simple ‘block’ or ‘allow’ button.

I’ve made a mock-up based upon fOrTy_7’s idea. It’s shorter than the normal alert due to the saved space.
Selecting to treat application as trusted or something, and then clicking block doesn’t have sense, though.

Another idea I had was to add an extra button with a drop-down menu (or should that be drop-up?) for choosing to treat an application as trusted application etc. I named the button ‘Other’, but somebody should be able to think of a better name.

Oh, and has anyone actually ever used the ‘Fewer Options’ button? I don’t think it’s necessary.

[attachment deleted by admin]

The “fewer options” button actually converts the alert window to a format very similar to what you suggest: it condenses the alert into the basic “allow” and “block” buttons. (see pic below…this is an actual D+ alert, not a mock up). So, the format that you suggest is already available. Of course this simplified layout can be modified to include things such as “submit file” and “treat application as” (as shown in your pics).

I like the idea of having a more comprehensive set of choices (the more options) and a simplified set of options (the fewer options).

[attachment deleted by admin]

In your picture seems that the user block and terminate the behavior. I’m talking about a button with a drop-down menu to terminate the behavior and block the exe, v.g., like the exes put into My Blocked Files.

I am not sure I understand what you are asking for. Are you suggesting an option to add a file to the “my blocked file” list?

Yes!