Comodo ADS

[Deleted member 2913]

I use FreeFileSync to mirror my data partition on system to external HD.

FFS use "File Time & Size" to compare data partition & ext HD & lists the files/folders present in source & not in destination & then you can sync those files/folders in the destination.

I want to know if ADS in CIS will affect the comparison of files/folders by FFS in any way?

 

[Ink]

What is Comodo ADS?

 

[Malware1]

What is Comodo ADS?

It's an Alternate Data Stream added to files by Comodo:
https://forums.comodo.com/install-s...ernate-data-stream-cmdtciddata-t108076.0.html

 

[vivid]

ADS in CIS will affect the comparison of files/folders

If the comparison process relies on the modified date property then yes. As the new data stream gets created, the last modified date is updated. That's the side effect.

 

[Deleted member 2913]

I dont know what it relies on?
Guess when I will sync again then I will know.

Anyone with Comodo & FreeFileSync?

 

[hjlbx]

I dont know what it relies on?
Guess when I will sync again then I will know.

Anyone with Comodo & FreeFileSync?

@yesnoo

You can use PhrozenSoft's "Phrozen ADS Revealer" to determine which files have ADS. Knowing these infos will help you to monitor CIS behavior(s) when it processes those files with ADS...

https://www.phrozensoft.com/freeware

This next part is unrelated to your OP here, but instead addresses something you posted on another thread about Unrecognized files and the CIS sandbox...

You can use SysInternal's SigCheck to verify a file's digital certificate. With these infos you can monitor and determine if CIS' File Rating system is mis-behaving on your system. In other words, a digitally signed file from a Trusted Vendor should generate no alerts whereas one that is digitally signed or unsigned from an Unknown vendor should be sandboxed.

https://technet.microsoft.com/en-us/sysinternals/bb897441.aspx

I'm forever messing about with SigCheck to verify if CIS' File Rating system is working correctly... sometimes it doesn't - you will see what I mean if you so choose to use SigCheck.

Best Regards,

HJLBX

 

[Rolo]

I use FFS and Comodo; FFS works the same as prior to installing Comodo--I didn't get mass changes or anything.

 

[Deleted member 2913]

I use FFS and Comodo; FFS works the same as prior to installing Comodo--I didn't get mass changes or anything.

Same here for now.