Feedback for CAVS beta 2.0.11.43

I’ve found a bug: CAVS aren’t checking screen saver files at first start up. So in case of a running a screen saver the HIPS will bring up the allow/deny window what i can’t see! So after this accident i’m no longer able to log in to my computer nor i can kill the screen saver .src file from the current computer. It is very important to fix this problem!

Hi Arkangyal,

CAVS tracks the system logon activity and doesn’t display alerts if screen saver is running, user is logged off or workstation is locked. So it sounds a bit strange, can you please post the exact steps to follow for reproducing the problem?

Thanks,
Alex.

Hi Alex,

Maybe you are right, i “guessed” what’s happening. The steps are:

  1. set up screen saver time to 15 minutes
  2. set up an unknown screen saver file
  3. when the screen saver is running, i can’t disable it

Maybe this is important: at the first time i saw this, i was running a full test on that computer. Later on the user said she must reboot the computer with the reset button, then after a while she logged in, the screen saver came up and she wasn’t able to dismiss it.

Later, when i’ve logged in at that computer i’ve tried to run the screen saver from display properties where HIPS asked to allow/deny it: this was the point i guessed it’s a problem with hips.

If this is a unique computer problem, if you need anything else, please, let me know.

Arki

wonder if anyone has been reading my last post… installed and tested this latest version for quite a while now, everything runs well and smooth. 99% satisfied. the 1% is, can’t we don anything about the memory footprint? using 73MB is a lot of memory!

Hi Foxman,
I agree with you. But with this amont of memory also you will not feel slow running of system. Two instances of on-access scanner is running to make the system performance better.

Pls see these post
https://forums.comodo.com/index.php/topic,7398.msg54559.html#msg54559
https://forums.comodo.com/index.php/topic,7398.msg54686.html#msg54686

We have room for further reduction of memory in next version.

regards
Kishor

PLEASE give the user the option of restarting after the upgrade uninstalls the previous version. Restarting without an option is big time taboo.

-Tony

Anyone can confirm this?

Ok… I have found something which, I don’t think is a bug but more like something that should be there but is missing.

I am using OutlookXP (2002) and has a pop3 account from my ISP and also using a Gmail account. The e-mail scanner automatically tied the outbound scanning to the ISP account’s smtp but not the Gmail’s smtp. In another word, when I send e-mail thru my ISP account, CASV does an outbound scan but not when I send thru my gmail [both using the OutlookXP]. When I checked the setting of CASV, there was not setting for me to add or change that. Am I missing something here? (:SAD)

I have been watching the progress of the betas for some time.

I am not in anyway experienced enough to be a beta tester, but when I saw you had released it for general use I took the plunge, uninstalled avast and installed CAVS.

So far the only problem for me is the lack of recognition by Windows Security Center which does make me rather nervous.

I am used to a confirmation in emails received that they have been scanned for viruses, so I am taking this on trust.

Thanks for everything you are doing, can’t wait for BOClean also.

Regards and very best wishes, (L)

James,

  1. The WSC recognition isn’t something meaning that you have no AV; it just means that MS has not yet including CAVS in its programming yet. This probably won’t happen until CAVS has a final stable public release (or sometime thereafter).

  2. In the CAVS application window, go to the Settings tab, then Email Scan, the Advanced. Toward the bottom of the Advanced screen, there are two boxes to Certify the email - one for incoming, one for outgoing. You will need to check either/both of those, and click OK. At present, the certification (I believe) is only in a small text attachment, rather than a signature item.

Hope that helps clear up those two issues for you.

LM

Thanks for those, I must confess I had missed the advanced options for the Email Scan.

Too much of a hurry to try it out.

:■■■■

for On Demand and On Access exclusion lists, the ‘Include Subfolders’ checkbox is greyed out until i click the Browse icon and select the directory that way.
Is there no way to include subdirectories by typing the path (especially for UNC paths)?

Thanx,

-Tony

Sorry, Tony, you’ve gotta browse to it; direct typing is just not allowed… :cry:

LM

Me again,

I reinstalled CAVS yesterday as both the on access scanner and HIPS had a fault which prevented them being turned back on when I found them turned off. Error messages STOAC017 and 018. That seemed to have cured the problem.

I left the computer uploading the user profiled safelisting report. 5 hours later it was still uploading.
Looking to see what was going on, I found that about halfway through it would stop and start again at the beginning. An endless loop, so I stopped it.

My other problem is that my SpamPal Email checker no longer works, but I can live with that as Thunderbird sorts out most of the Spam. SpamPal have configuration instructions for most popular AVs, but not yet for CAVS. I have SpamPal 1.73h beta running as a service.

Unfortunately the error messages returned just now and CPU usage went through the roof. I rebooted several times, but no change, so I have regretfully returned to my previous Avast for now.

Hi JamesFrance,
Do you have SpywareGuard installed. Error code STOAC017 may be coming due to conflict of SpywareGuard. After un-installation of SpywareGuard, it wil work fine.

The could be big in size say more than 10MB. This bug is being fixed. Till that time you can remove that file from submission.

We will check with SpamPal.

regards
Kishor

Hi Kishor,

Yes I do have Spyware Guard, so that may well be the answer thankyou.

It may be of interest that after I reinstalled Avast, I did a full scan and it found a trojan infection.
Win32: Small-ERH[Trj]

This was only added to it’s database on 4th April. The only references I can find seem to be recent French ones to do with Wanadoo my ISP. Avast quarantined 18 infected files.

Regards,

Here is a error from CavSubmit when I was submitting a file: Event Type: Error
Event Source: Application Error
Event Category: None
Event ID: 1000
Date: 4/6/2007
Time: 8:20:20 PM
User: N/A
Computer: PATCH
Description:
Faulting application cavsubmit.exe, version 2.0.11.42, faulting module cavsubmit.exe, version 2.0.11.42, fault address 0x00037b14.

For more information, see Help and Support Center at Microsoft Support.
Data:
0000: 41 70 70 6c 69 63 61 74 Applicat
0008: 69 6f 6e 20 46 61 69 6c ion Fail
0010: 75 72 65 20 20 63 61 76 ure cav
0018: 73 75 62 6d 69 74 2e 65 submit.e
0020: 78 65 20 32 2e 30 2e 31 xe 2.0.1
0028: 31 2e 34 32 20 69 6e 20 1.42 in
0030: 63 61 76 73 75 62 6d 69 cavsubmi
0038: 74 2e 65 78 65 20 32 2e t.exe 2.
0040: 30 2e 31 31 2e 34 32 20 0.11.42
0048: 61 74 20 6f 66 66 73 65 at offse
0050: 74 20 30 30 30 33 37 62 t 00037b
0058: 31 34 0d 0a 14…
Can this be fixed please?

Haven’t seen the above error here, you might want to ensure your installation was successful.

On another note it seems as though comodo is still scrambling some messages, in particular myspace messages for some reason.

with the following results


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=




Comodo AntiVirus http://www.comodo.com : Inbound message clean.
Scan Date: Fri, 06 Apr 2007 9:38:25 PM
Virus Definition Update: Fri, 06 Apr 2007
Copyright © 2006 COMODO ®. All rights reserved.

I have included the cav email server log though I am not sure it contains the relevant information

[attachment deleted by admin]

Morning.
I have resisted,so far,the temptation to install CAVS.My impatience has got the better of me.
No problems,all is peace and light.
My computer runs,boots up,uses no more resources and shuts down just as it did before when i was using AVG.
There are just two things i would appreciate some guidance on.
I ran my first scan,which took 70 minutes, a bit long,but not a problem.
It did find a trojan or so it thought.
This so called trojan was in fact software suppled by my ISP to monitor my broadband connection.
I don’t use it,so no problem.
It is however quarantined so if i want it back it is an easy matter.
There is a setting,somewhere for changing how auto updates are download and installed.
I should explain that i have broadband but it is necessary to dial up to connect.
At the moment when i boot up i am automatically connected by CAVS checking for updates.
I much prefer to connect when i want to and then have CAVS check for updates .
Is this possible?
CAVS is really an interesting AntiVirus .I will enjoy seeing its development over the next few months
because it looks like the beginning of a great piece of software and is probably going to be the best AntiVirus application that there is.
Thanks and best Regards.
Philip

G’day Philip,

To change the update settings, open the CAVS GUI and click the SETTINGS button. Click the “Automatic Updates” button and change the settings to “Custom” and set it to an hourly interval of your choosing.

Hope this helps,
Ewen :slight_smile: