Failed to update the virus signature database

Can you also try to ping the following host

ping download.comodo.com

And see if that resolves and ping’s back…
Do you have any other security software running?
Did you install some proxy toolbar for IE to you can switch proxies easily?
Did you tweak default security settings for Windows?
Did you remove the Comodo group rules from the Firewall policy?

Further to my post of 18 August 2010.

Problem is now intermittent - since resetting Internet Options had no effect, I had decided Keypass, Secunia PSI or other resident app might be the cause. On two machines I also had a problem doing a manual Windows time sync - it was not finding the server. I got that sorted on both, but it had no effect on the update problem.

However, everytime I run Wireshark and ProcessMonitor (SysInternals) to send the files to the forum - with all resident apps exited, it seems to fix the blockage for a few days.

This has happened twice now over the last week.

I will keep monitoring and will post if the situation changes.

well there is absolutely nothing in wireshark, i cant even save the file because there is nothing to save… i clicked about 10 times on update in CIS with different pauses in between…

http://i37.tinypic.com/qq7km9.jpg

ping download.comodo.com

And see if that resolves and ping’s back…

http://i35.tinypic.com/xfxg9d.jpg

Do you have any other security software running?
im running Microsoft Security Essentials since CIS wont update, no its not the reason why updates fail, i had the problem before i installed it.

Did you install some proxy toolbar for IE to you can switch proxies easily?
No proxys

Did you tweak default security settings for Windows?
havent touched that, the only tool that might change that is your CSC… gona see if thats causing trouble…

Did you remove the Comodo group rules from the Firewall policy?
tried with everything removed, didnt make any difference, did a clean install after it failed.

oh and the great news, because of these problems my system got infected with some nasty trojans… i really think about leaving comodo. to bad i only had good experience for a couple of years now and without any infections…

any more help on this problem?

HI Mahiro,

Sorry to hear your system got infected, if you need assistance in removing it I think it would be probably helpful if you’d contact Live PC Support; You can ask for a free license for CIS Complete here:
https://forums.comodo.com/empty-t57664.0.html

If you still like to help troubleshoot we’re going to need a process monitor trace from what cmdagent is doing during/around the update verification.

You can create a filter to only show/capture cmdagent.exe as “Process Name”
Clear all “auto update” boxes, reboot, start proc mon, enter filter and try to update AV to see if it outputs, once that’s done, please save the .PML and drop me a PM.

[attachment deleted by admin]

thanks for the tip with the tool, i think i might be on to the problem… and i believe its caused by “Spybot search&destroy” which commented the localhost 127.0.0.1 out and made a other adress the “first” host so its redirecting there:/
here a link to the spybot forum where the problem is explained: hosts immunisation. www.007guard.com

i will try to change it manually after i scanned my system for more infections and see if that fixes the problem.

Thanks for the update, hope the scan turns out clean :-TU

the scan was clean, however changing the localhost did not solve the update problem:(

Do you use more settings from S&D like blocked zones etc?
Can you clean out the S&D settings for IE also, it could be very well related to some IE setting causing issues.

Also Spywareblaster set’s all kinds of kill-bits for CLSID’s do you have that installed, or have you had that installed?

i have cleared the whole immunization in spybot which resets the hosts file to default… that didnt help either.

i never had any other security software installed than spybot and CIS and i cant remember that i changed anything when the problem first happened…

Can you please check your PM?

i think we should continue our conversation here and not via the PM system. i guess there are lots of systems with the same problem and people are probably interested in a solution as well.

so i would like to talk with someone who has an idea why comodo is the only software on my system that fails updating…

i dont like remote connections and will not allow a unknown person on my system, even if its for analyzing such a thing. you should have enough systems where you can test the problem by yourself, just reinstall CIS and im almost sure you will get the problem on a lot of them…

I too still have virus database update issues with CIS 4x. I also had AVG 9 and Spybot S&D (I removed them via Glary Tools) before installing CIS.

I checked my hosts file and see all those spybot entries :

127.0.0.1 localhost

Start of entries inserted by Spybot - Search & Destroy

127.0.0.1 www.007guard.com
127.0.0.1 007guard.com
127.0.0.1 008i.com
127.0.0.1 www.008k.com

and so on…a very long list


IF I change my Hosts.ini file back to the original one (I kept a copy), would my PC be OK? I’m gonna try it…in a few days If no answers here, and I’ll post if all is good and if I can then update the virus database through CIS.

I think, yes PC OK, not sure if CIS will update, since my 1st entry in my Hosts.ini is:

127.0.0.1 localhost

Which I believe should be OK.

IS there an entry I should have in my Hosts.ini to allow CIS to be able to update?

can you please upload the hosts file that causes the blocking of AV uploads?
or send me a PM if you wish to keep it off the boards…

it has nothing to do with the hosts file… the entrys will only prevent you from going to these adresses and has nothing to do with the update problem.
if you remove the entrys that Spybot put in the hosts file you gain nothing but lose security.

im really no noob when it comes to computer problems and solving them, and i never ever reinstall the system unless no other solution come up… but this time it got me really good and there was no other solution left…

the updating problem was only the beginning, something else was messing up my system more and more, and with all the different “reg cleaners” and solution i tried things only got worse.
i couldn’t activate the restore functionality and the task scheduler was broken as well… i only noticed that because i found some hints with updating problems that lead to the same problems… after i searched and tried solutions for a couple of days… many many hours.

i can only recommend you to let it be now and do a clean system installation. it will save you a lot of time and nerves.
i thought i would never ever recommend such a solution but i had the same problem and it would have been maybe 5 hours for a clean installation compared to about 20-30? for problem searching and trying to fix it…

as for comodo: i dont hope we are just the beginning of this problem and most users will get this problem, you should probably work out some effective strategy how to investigate and help with a problem if someone comes to the forums with a severe problem like that.

For what it’s worth, I solved this problem via the following method:

I had 3 machines running v3.14. Two of them stopped updating with the “failed to update” error. The third machine hadn’t been connected to the Internet since March. I decided to connect it and it successfully updated. I copied bases.cav from this machine to a USB drive. I then booted both of the other computers into safe mode, renamed bases.cav to bases.old, and copied the bases.cav from the USB drive to the …/scanners directory, and rebooted to normal Windows. Comodo came up and still showed the old update date, so I let it update automatically and it worked fine. I assume it would work OK if you downloaded the latest bases.cav file from Comodo and followed the same procecure. I didn’t download because I’m on dial-up and it would have to have been done overnight.

This is a heck of a thing to have to go through to get Comodo back up and running. It just seems that Comodo would have enough machines running with complete logging to be able to nail down this problem. ???

Hi,
I have read that others have the same problem and what causes it–but as I can tell you an error code -2147024897 I might not have the same problem. My CIS 5.0.162636.1135 is set to update automatically. Everything is okay with my internet connection–as you can see it, since I can browse the Internet. My OS is XP
Thanks for your reply in advance!
Nika

i also update the download the base.cav manually it was updated to the day that i downlaod only. after the manual download it still fail to automatic update. say check internet connection setting. i consider to change to ohter vendor if that doset fix ASP.

Same here.

Hi guys
sometimes happens that CIS5 fails the virus database update…like now. I know that the latest update available is 6342, but I’m blocked on 6340…my internet connection is ok…and I didn’t change anything on firewall configuration…it’s the second time it happens to me…so…is there anyone facing the same issue right now?? cause in taht case, it could be a comodo server problem… :slight_smile: