Comodo Cloud Antivirus

[Kate_L]

The product was tested on Windows 7 (SP1) Pro x64 - Build 7601.

 

[DardiM]

Thanks for this review

About "Cloud Connection Issues", it occurs frequently or rarely ?
(A cloud tool without cloud ? )

 

[Kate_L]

There are days when it happens often and there are days when it happens only once. So, I can't say accurate.

 

[Janl1992l]

"In the end, it's a good product and recommended for beginners (install and forget). " Thats not true. U will have heavy issuses if something get autosandboxed and u dont know what todo. and with comodo, u have so much that get sandboxed and dosnt work right or dont even start right than. a beginner just dont know what todo than. comodo products are not for beginners.

 

[Kate_L]

There are some apps that will get sandboxed. If that happens, just click on the Don't Sandbox it again and it's fixed.

 

[DJ Panda]

"Very bad signature detection"

Yet you gave their protection a 5/5

 

[Kate_L]

"Very bad signature detection"

Yet you gave their protection a 5/5

Because of the Auto-Sandbox. Comodo is not that good in signature detection that's why they use DDP (Default Deny Protection) aka Sandbox

 

[Janl1992l]

There are some apps that will get sandboxed. If that happens, just click on the Don't Sandbox it again and it's fixed.

View attachment 104385

Sure, but a beginner will click this on a malware too, and than, infected. all popups with user choices are not for beginners.

 

[Janl1992l]

"Very bad signature detection"

Yet you gave their protection a 5/5

even when the signatures are bad. the autosandbox still protects u well. so the protection is still outstanding.

 

[Kate_L]

Sure, but a beginner will click this on a malware too, and than, infected. all popups with user choices are not for beginners.

They can do that with any product. Keep in mind that CCAV has "Auto-Malware Analysis (Valkyrie + Viruscope)"

 

[Deleted member 2913]

"In the end, it's a good product and recommended for beginners (install and forget). " Thats not true. U will have heavy issuses if something get autosandboxed and u dont know what todo. and with comodo, u have so much that get sandboxed and dosnt work right or dont even start right than. a beginner just dont know what todo than. comodo products are not for beginners.

Exactly

 

[Deleted member 2913]

They can do that with any product. Keep in mind that CCAV has "Auto-Malware Analysis (Valkyrie + Viruscope)"

Valkyrie & Viruscope both are kinda non-existent currently i.e currently they are simply not effective as a realtime protection.

 

[1qay1qay]

please forgot about signature-based detection .... hot stuff like Crypto / Ransomware is designed to elude detection of ALL stages of every Anti-Virus product. It is tested to guarantee entrance is undetectable! Every sample is unique and polymorphic, so signature detection is completely worthless. A delay in execution evades all sandbox technology. The ONLY action left for A/V is Behavioral Heuristics! That's it, NADA, there nothing else for A/V to do, except for URL blocking.

So i agree, that this Comodo CCAV can relly be the best AV software on market IF they are really implementing DD policy (default deny for all unknown to Valkayire) - so only full sandboxing ( no testing and later releasing out) OR totaly blocking all unknown - and even in this case there will (already is, as @cruelsister shows) be malware with qualiy digital signature .... but to obtain such a digital sig will be more expensive, so for some time this will be last of oure problem .... all gov based malware (for target attack) is already undetectable for any program ....

If they can integrate some simple FW this can be worth looking into ... but for now CFW @cruelsister edition will do

 

[Lucent Warrior]

I will have to test this product again, as the last time i did "which was repeatedly" this product did not have bad signature detection, it had 0 signature protection. Several sample packs in a few days, and not once did the Av detect any of the samples. Only when executed did the product become alive, or i should say, the autosandbox spoke up, and while doing a great job stopping the samples, did not do that great of a job determining a legit application from a malicious one. Even while utilizing the right click context option of telling the product to trust the application, i had seen some sandboxed. As far as calling it the "best you can get" for protecting systems, im pretty sure i would not venture down that road, or the road leading to advising this product for Novices, that require true set and forget security. The first time one of those novices see a legit application sandboxed, no matter how easy it seems to me or you to fix, it will not be for those that still have no idea how to scan their system with a product or run a manual update.

As for the Cons in your list, with the exception of the bad/0 signatures, some of those issues could have been from the testing environment, such as Vmware/Virtualbox. I have only seen a couple that depending on certain variables/environments their cloud connections suffered connection issues, and ultimately lead to product freezes ect. If the company is not seeing these issues on live systems, they will not correct them.

Personal opinion, comodo should have just made the standalone sandbox as they had stated they were going to do before this product was released to view, as the AV component is worthless in my eyes.

 

[Davidov]

Comodo does not have good signatures but viruscope and Valkyrie is replacing. Look at the reaction to the detection of valkyrie + viruscope https://malwaretips.com/threads/12-06-2016-17.60534/ https://malwaretips.com/threads/13-06-2016-15.60559/#post-515421 .

CCAV+windows firewall control good idea.After a few days lag disappears as BitDefender just must retrieve files on your PC.

 

[Deleted member 2913]

2 of the protection mechanism they mention for CCAV are Viruscope & Valkyrie.

Dont know about Viruscope effectiveness as never saw it reacting against malware in any tests.

And Valkyrie, I hope you guys know in the current CCAV samples are uploaded to Valkyrie but verdict is not returned i.e currently CCAV only uploads samples to Valkyrie & thats it. So Valkyrie in current CCAV is just an upload tool.

 

[hjlbx]

It all depends upon how COMODO goes about fixing things. Their track record for fixing things is terrible in terms of the time it takes. If COMODO treats CCAV like CIS, then it will turn out to be a bitter disappointment for a lot of users.

CCAV might just be another one of COMODO's "flash-in-the-pan" products that gets released, is maintained for a year or two, and then abandoned...

 

[DardiM]

But what about their Cloud ? (not to mention the Cloud Connection Issues)
A lot of tools that I've tested (even free tools) seems to have a better cloud detection than CCAV (Should they rename it ? )

And what about samples with malware + safe files ? A lot of FP ?
This thread made me want to test CCAV

 

[hjlbx]

But what about their Cloud ? (not to mention the Cloud Connection Issues)
A lot of tools that I've tested (even free tools) seems to have a better cloud detection than CCAV (Should they rename it ? )

And what about samples with malware + safe files ? A lot of FP ?
This thread made me want to test CCAV

COMODO's cloud is notoriously screwed-up... meaning that a significant number of files that are a legitimate part of XP, 7, 8\8.1 and 10 are NOT in the safe file database. Plus, a lot of OEM software - especially drivers - are NOT in the safe file database.

COMODO doesn't update the safe file database after each OS release or after each Windows update. It never has done this.

It makes no sense... because COMODO products will block some Microsoft Windows processes and\or OEM drivers. That means trouble - sometimes critical trouble.

COMODO's cloud is only meant to supplement COMODO's AV scan engine database. At least that is the way it was designed for CIS -- and I do not think that concept has changed.

Relying upon COMODO's cloud as a full, stand-alone AV detection system, is using it in a way that COMODO never intended from the start. The cloud's detection rate will only be marginally (a few %) better than the COMODO scan engine database. So somewhere in the mid-80 % or slightly better.

The real reason why COMODO includes any malicious file detection is from the standpoint of usability. Which means that the user doesn't have to contend with known malicious files being sandboxed every time they are executed. In other words, to reduce the number of alerts and needlessly sandboxing known malicious files. The scan engine is not there to protect your system from COMODO's (Melih's) point of view - it is there for convenience. The sandbox is what protects your system.

COMODO relies upon their sandboxing -- and that will never change.

As far as COMODO insiders are concerned, complaints about the COMODO AV detection fall on deaf ears -- because it isn't a part of COMODO's protection model.

 

[DardiM]

@hjlbx , Thanks for your explanation