Kaspersky 7 and Comodo questions

I have been running Kaspersky 7 (7.0.0.125) and Comodo (3.0.15.277) together for a few months with no problems but i was told to disable Defense+ so the programs would get along. What do I lose by doing this? Is there a better configuration I should be using?

Well for one you have an older version of KAV. Best to upgrade. Secondly you have an older version of Comodo. best to upgrade. I have never heard of disable D+ to have them get along. Frankly you cannot even install KAV if you already have Comodo installed but you can install Comodo if you have KAV installed. If you go to Kasperky’s web site there is a list of incompatible programs. Its a big list. I use Avira Premium but Avast free is also good. In KAV setting there is an area to click for program compatibility.

I have my Defense+ running alongside my KAV 7, but I do find it a bit of a PITA at times. Whenever a new program is being installed or some new action is being performed by an existing app., both of them try to stop it, and I end up with RSI from all the “allow” clicks I have to make. I really wish that CPF Defense + would remember when I have designated an app as trusted, and allow that trust to mean unfettered access for that app.

My config. KasperskyIS (web-AV, Proactive defense, Privacy Control and Firewall are not-installed), Traffic monitoring (only mail related ports: 25, 465, 110, 995 are checked by AV with very tight CFP Firewall permission only remote mail servers IP’s can be reached through kaspersky loopback interface on above ports), Self-defense disabled

CFP all features are enabled, kaspersky folder and services are very well protected by Comodo protection interface techniques.

Never have any issues and incompatibility

Thanks for this - KAV had not even told me that there WAS a newer version. >:(

Thanks - downloading upgrades now. Also I am using Ad-aware 1.06, Spybot S&D 1.4 and SpywareBlaster 4.0 as well. Should I get rid of/turn off any features of these?

When I migrated to CFP from Outpost Firewall, I uninstalled all three of those programs from my system (an older 500MHz P3 desktop) to eliminate some of the redundant functions they performed. Frankly, I no longer use an anti-spyware product as I am behind a hardware firewall/router. That – combined with CFP 3.0.x and Kaspersky AV 7 – has provided a very good fortress of layered security for both my old desktop system and my newer IBM ThinkPad T43.

You could try disabling all three of them to see if your protection is compromised. But I doubt that it will be, especially if you are behind a router.

Yes I am behind a router - thanks.

Ad aware and Spybot can cut it anymore. SuperAntiiSpyware free is very good.

To all Kaspersky users here, check your Active connection when you try to connect to internet with your web browser and see what application actually make connection?

Well, I agree SUPERAntispyware is better then Ad-aware. But best to keep Spybot, Because SUPER missed something Spybot actually detected and deleted for me! (That was a browser hijacker :-).

and with CFP 3 and CMG, a good AV, Your awesome! :slight_smile:

Josh.

I use Counter Spy and SAS on demand only.

“System” and “svchost.exe” (UDP Out) and KAV (avp.exe; TCP Out) are reported in my Active Connections manifest.

only KAV and FIREFOX

see attachment…

[attachment deleted by admin]

If you wanna see your browser in Active Connections you must say bye, bye to Kaspersky traffic filtering, because it reuses requests made by your web browser and any network enabled application which uses following ports: (see screenshot)

[attachment deleted by admin]

Interesting.

Well, I have “HTTP Traffic Scan” disabled (in KAV, Protection > Web Anti-Virus > Connectivity > Scan HTTP Traffic [unchecked]) because it interferes with streaming Internet radio (LaunchCAST Plus). I also have “Monitor Selected Ports Only” as depicted in your graphic. Still, IE6 does not show up in Active Connections. My system is behind a hardware firewall/router.

What gives? Or is it really a serious issue?

For me, it is serious issue, because you can not really control per application connection requests, it is like you have single interface for all traffic, if you try leak test or if you infect your system with some malware which uses for instance port80 to send your personal data you will not get any prompts from firewall because you already granted access for port80 when you allowed KIS/KAV to connect through that port…

I suggest you to uncheck all ports in KAV port settings for traffic monitoring and see after that what will happen in active connection window and with FW prompts for application which tries to connect

I hope above is understandable, my English is lousy

You are absolutely correct.

I made the changes you suggested in my configuration in KAV, and now all applications accessing the Internet are visible in the “Active Connections” window of CFP.

Thank you very much for the tip. Learned something new today.

thanks to everyone for the info! i now have Comdo 3.0.21.329 and KAV 7.0.1.325 installed (also have lastest versions of super anti-spyware, spybot and spywareblaster). i have Comodo and KAV installed with default settings.

i ran CPIL Suite and all 3 tests passed :slight_smile:

HackerGuardian:
Audit time: 0:23
Total devices scanned: 1
Security Holes found (High Risk): 0
Security Warnings found (Medium Risk): 0
Security Notifications found (Low Risk): 0 :slight_smile:

also i can see internet explorer and firefox, etc in active connections - salmonela: do i need to make changes? is it safe to disable port monitoring in KAV / do i need to?

Yes, If you disable port monitoring in KAV/KIS your web-AV module become completely useless,
If you do what I suggested, you should strengthen your file-AV (heuristic analyzer set to max., option-scan all files etc.)

i ran CPIL Suite and all 3 tests passed Smiley

Try simple grc leak-test (not grc port scanner), you will fail it if your KAV/KIS scanning port80