I think something is blocking wireshark from accessing the interface.
Can you post ALL your security related software you have installed?
I have CIS.
SpyBot S&D is installed, but not active (TEA timer is off, program is not running).
Windows firewall is not on. I had AVG, but uninstalled it AND ran the removal tool. I also recently had SAS and MalwareBytes, combofix, rootrepeal, DeFogger, and MGTools installed as part of an infection clean up per majorgeeks.com. But those are all out now and everything has been set back to normal.
Then there’s just the modem and router. Perhaps I need to adjust some setting on the router’s own firewall?
Can you try to see if a remote proxy works?
More, Preferences, Connection
[v] Use proxy
Server = 211.115.185.50
Port = 8080
For reference this address comes from this list here:
Tried that already (and now again), had no effect on anything- everything that worked prior still works now, everything that isn’t working still does not work.
Though, my dropbox folder is now opening successfully from the tray (something that was not working before today). It opens now with or without the proxy though.
I’ve been having other issues as well. Adobe will not install an update, or uninstall completely. And, the above mentioned dropbox issue, which is no longer an issue.
Can you verify Windows Event logs to see if your system complains about stuff?
Tools like combofix can also cause trouble instead of fix issues, maybe your LSP is crippled now, and causing trouble for that, you can try this here LSP-Fix - a free program to repair damaged Winsock 2 stacks
Have a good read and see if you want to try that.
But if I had my system infected, I’d start with a fresh install.
Backup your data/documents/media etc and start clean, once a system has been infected you can never trust it again (my point of view)…
People have been complaining for a long time about the now-predictable failure of the initial download of the virus signature database, after a new CIS install. It happened to me this evening, too.
Hasn’t enough time passed since this problem was first called to Comodo’s attention that one would not be out of line to now EXPECT that this inexcusable problem had finally been resolved?
And what’s with the download speed even if one manually downloads it from the web site. Mine’s maxing at between 50Kbps and 70Kbps… a tiny FRACTION of the rated (and actual) speed of my Internet DSL connection. So the problem’s obviously at Comodo’s end. This, too?
Is Comodo serious about being in this business, or isn’t it?
HarpGuy
I second that. I understand that I may have other problems on my machine as well, but the AV update problem clearly isn’t limited to my machine or my situation.
I am looking at a clean wipe of the HD and a fresh install at this point (my problems with my registry have begun to multiply beyond the adobe issue mentioned here), and I do plan to try CIS again after all that is done with, but I really have no expectation of the AV component working properly.
I’m hoping to use Microsoft Security Essentials- so long as I end up with a legit Windows OS again (the story of the lost WinXP disc).
Good luck with your AV update issues, Comodo.
hi all
I am having the same problem. I had no problems with Avast and I switched to comodo to get the firewall + antivirus figuring there would be fewer problems getting them to work together. I was wrong…
I have reinstalled comodo, checked for other antivirus in autoruns, and still cannot get it to update. Usually when I hit update it goes to 5% and then says failed to update signature database. check your internet connection.
I have these installed on the machine:
comodo internet security (latest version) 4.1.150349.920 virus database 1
superantispyware (no real time protection)
malaware (no real time protection)
spybot search and destroy
spyware blaster
all of the other programs can update without a probem.
also, when I ran the wireshark there was NO activity posted when the update was done. I then opened IE and went to google and activity showed. when I run the program update I get activity on wireshark.
any ideas?
this is winxp sp3 32 bit
thanks 
O0
Hi johny3,
I think we need a process monitor trace, are you familiar with Sysinternals Procmon tool?
We could try to see if it shows network activity for cmdagent.exe
not familiar with it but I DL’d it. there is a lot of information there, of course. A lot of processes running. Is there a filter that I can use or that you suggest? Otherwise it might be tough to figure out what is what. might the cmdagent.exe be working under IE to get the update?
anyway, let me know I have it installed and was looking at it and playing with the filters.
edit:
got this when trying to update, I think
here is the screenshot
http://img186.imageshack.us/img186/6481/cmdr.jpg
Hi, same problem here! Switched to comodo after using other various other antivirus programs. Figured I should have a decent firewall… downloaded comodo internet security premium.
Tried everything that i have found on these forums to get the updates running auto. I have started with downloading every antivirus removal tool, I have windows firewall and defender disabled. I have changed the administrative tools thingy that someone mentioned to my login and password for windows. I have tried using the custom port that you gave few pages ago.
I havent tried the shark thingy, can do that if you need it.
I also have comodo trustconnect, tried updating in that mode too didnt help. I have uninstalled the IE, and deleted the comodo/tmp folder, didn’t help. I have deleted comodo groups from firewall and defender… and tried updating while it adds the groups back there. Nothing changed.
I have manually updated it.
This is the screen from sysinternals.com
ImageShack - Best place for all of your image hosting and image sharing needs.
P.S: about 2 weeks when I had Avast it stopped updating automatically too. No idea why, but it was quickly fix by changing settings from proxy to connection to internet directly. Unfortunatelly COMODO does not have such setting?
If you want me to try something else just let me know. I am interested to get this sorted out, I am sure there is a way.
Igor
Windows 7 (upgraded from Vista)
Toshiba a300d-15b laptop
one more update. I looked at the process monitor and filtered to just include network.
I get this when I hit virus database update:
http://img714.imageshack.us/img714/4773/cmd2.jpg
some strange things of note.
after getting that SS I pressed update multiple times without getting any cmdagent.exe activity.
also, does it make sense that the version of cmdagent.exe when I choose properties for the process is different from the version shown in comodo “about?”
cmdagent.exe version - 4.1.8600.916
anyway, let me know if I need to do other things to get the information from process monitor that you need.
thanks
Can any of you guys try to see if this is still an issue with the latest version 5.x BETA?
You can find it here:
https://forums.comodo.com/beta-corner-cis/comodo-internet-security-501588361079-released-t60364.0.html
downloading it now, will install and check it out tomorrow.
One thing though… install pack that i am downloading from that link appears to be exactly the same as I already had?
Will know for sure after work tomorrow.
Hi,
Another one having problems.
XPSP3 - a near to clean install yesterday of a disk image of basic progs only, from about a year ago to keep suspects at a minimum.
Security - only Windows Firewall, Zone Alarm basic, Windows Defender - all removed with Revo Uninstaller and cleanups run if available. Then installed Comodo v…920 Update said it was downloading the huge initial update, then went on to the next one and got stuck. The summary stated no updates had been made.
After I ran Wireshark the Summary is showing it is updated to today at 4:18 pm. It is now 5:01pm. It still won’t allow me to do a manual update, so I don’t know whether it has downloaded all available and is giving me a ‘misleading’ message or if it is still stuck.
I have checked the All Users/Comodo/tmp folder and the auto downloads start at 5766 up to 5772.cav but it won’t allow me to do a manual download.
D-Link DSL 504T router/modem.
I will check the status tomorrow and see if it has decided to update completely.
If it hasn’t I will send the Wireshark .pcap file as a PM to one of the gurus. It shouldn’t be this hard, but maybe something has been fixed.
Cheers,
hi, nope beta doesnt let me update either.
Guess i will have to just update it once a week manually. Or switch to another antivirus and leave the comodo firewall… which is a shame as i think av + firewall from the same manufacturer would be the best protection.
i even uninstalled the firewall + av and then reinstallled the av…nothing. i might have to go to another av too i was really hoping to use av and firewall from comodo.
any other help would be great as I am not giving up yet
thanks
It takes molasses to the first update… hours! Can’t believe…
[attachment deleted by admin]
Known.
Maybe a workaround would be a full setup download (that could pass through download managers). I don’t think it will increase the server bandwidth as the user needs to download the virus definitions after all… The setup downloads the antivir and/or firewall. Why not antivir/firewall/virus definitions ?