Comodo Internet Security - General Impression

[Deleted member 2913]

Comodo Web Protection is weak.

Few free options here like Norton DNS, Norton Identity Safe (password manager + malware & phishing), Bitdefender TrafficLight, etc...

Should I go with NDNS or NIS?
NDNS provides porn blocking too. You have to change the DNS on router & system.
NIS provides password manager. Adds addon into the browser.

I do online shopping, banking, etc... not heavily but in a medium way but never used password manager.
I am thinking, should I start using password manager or not?

 

[hjlbx]

Comodo Web Protection is weak.

Few free options here like Norton DNS, Norton Identity Safe (password manager + malware & phishing), Bitdefender TrafficLight, etc...

Should I go with NDNS or NIS?
NDNS provides porn blocking too. You have to change the DNS on router & system.
NIS provides password manager. Adds addon into the browser.

I do online shopping, banking, etc... not heavily but in a medium way but never used password manager.
I am thinking, should I start using password manager or not?

I only use Norton DNS - not password manager. I configure Windows Networking to use Norton ConnectSafe DNS via Control Panel.

If you test malwares Norton Connect Safe will block a lot of malware sources.

 

[Deleted member 21043]

@Malware1 (did you ever see this thread and how you were mentioned?)

 

[Malware1]

@Malware1 (did you ever see this thread and how you were mentioned?)

No, I don't know what you're talking about.

Edit:

Malware1 deserves special thanks for his incessant file submissions to Comodo. (I don't think the man sleeps...)

Thanks hjlbx! Nice to hear that.

But how do you know that? I submit all samples in the private board, unless you meant whitelisting requests.

There is a thing abaut Comodo that i dont like. This is a cryptolocker sample that i sent to Comodo on Saturday.

https://www.virustotal.com/es/file/...d7e4079bdbf41e6205cc97ef/analysis/1431330703/

Please submit samples when FlorinG, Ionel, Karthik R, Navya are online.
Meidan often forgets to download files and their Chinese "analysts" do totally nothing.
If you want, I can write you their schedule.

 

[Deleted member 21043]

No, I don't know what you're talking about.

I was talking about the note with the samples which @hjlbx made... You just replied to it when you saw this thread when I tagged you.

 

[hjlbx]

But how do you know that? I submit all samples in the private board, unless you meant whitelisting requests.

I see you submitting files for white-list. Just as important as malware submissions because of way CIS file rating system works; you save lots of users hassle if legitimate file is sandboxed - and causes system instability.

I only guessed at your malware submissions - but from all your other efforts - I surmised you were doing same at Comodo one way or another.

Thank You,

HJLBX

 

[hjlbx]

Heur.Suspicious is rigorous compared to others.


Given support by some users is excellent. I would not generalize, unless we're talking about official support.

Heur.Suspicious only once out of perhaps 5000 files obtained from well-regarded malware collection sites... like Contagio. Signature detection % fell within the 84 - 86 % range. Perhaps not getting any heuristics alerts it is just plain bad luck for me and you might be absolutely right about the quality of Comodo heuristics. However, I remain skeptical, but really I do hope I am wrong...

Support on forum is hit or miss. Lots of requests for help receive no reply. Of the active members who do respond... yes, help can be excellent. What I meant is that Comodo is not a general, official support forum. So you hit nail right on head whereas I did not fully explain. Thanks for pointing this over-generalization out...

 

[hjlbx]

Thanks to everyone for their kind compliments.

... Once posted, I actually put on my Kevlar and stealthed myself away in the root cellar in preparation for an assault !

Best Regards,

HJLBX

 

[lordman]

Please submit samples when FlorinG, Ionel, Karthik R, Navya are online.
Meidan often forgets to download files and their Chinese "analysts" do totally nothing.
If you want, I can write you their schedule.

Comodo process them If i send files to Comodo using CIS upload samples section?

 

[hjlbx]

Submit files to Comodo for white-listing and add vendor to Trusted Vendor List (TVL) here:

http://forums.comodo.com/news-annou...ns-here-to-be-whitelisted-2015-t108997.0.html

 

[hjlbx]

Comodo process them If i send files to Comodo using CIS upload samples section?

Yes, but submitting file through CIS it can take very long time to get reply back if file is not already in database.

Some files no verdict... two years later. Better to upload to Virus Total for the time being.

I have complained. I know @yigido has complained. Users have to put pressure on Comodo by complaining... otherwise this sort of thing will get fixed 5 years later.

Are they trying to do better? Yes, but Melih will always say such things take time... and they do take time. However, it shouldn't take 5 years...

 

[Deleted member 2913]

I only use Norton DNS - not password manager. I configure Windows Networking to use Norton ConnectSafe DNS via Control Panel.

If you test malwares Norton Connect Safe will block a lot of malware sources.

I added Norton DNS with Porn Block.

DNS Benchmark shows 199.85.126.20 as 4th fastest for me i.e 4th from the top.
And 199.85.127.20 as 4th from the bottom.

But NDNS is working fine here.
Browsing is fast.
Download is fast.
Checked with speed test quite a few times with IE, Chrome & FF & everytime speed test showed correct speed of my net.

DNS Benchmark showed NDNS alternate slow for me i.e 4th from the bottom.
Dont know when alternate DNS will be used, how fast it will work here?

Currently NDNS primary is used as per my router.

1 minor thing I didn't liked is that when I search anything in browser, sometimes I get a bar on the top "Do you mean to go "site name"?
If I disable NDNS, dont get the above.

And I checked couple porn sites to see if block is working or not.
It works properly but sometimes it takes too long to block i.e site keep loading i.e nothing is shown in the page but the browser spinning circle keeps spinning & after a long time app over 1 min the block page is shown.

Regular browsing is fine.

 

[Malware1]

Comodo process them If i send files to Comodo using CIS upload samples section?

No, it didn't seem to work properly when I tried it few days ago.
The file is uploaded, but the automated system never adds a detection.

 

[hjlbx]

No, it didn't seem to work properly when I tried it few days ago.
The file is uploaded, but the automated system never adds a detection.

Thank You @Malware1. I thought was working... did not verify.

 

[lordman]

Anybody knows whats the difference betweetn CIS malware web filter and SecureDNS?. I dont know why use SecureDNS malware protection and CIS Web filter. Two things to do the same.

 

[hjlbx]

I do not think the CIS web-filter and SecureDNS contain the same data... although I could be wrong.

I find Norton Connect Safe DNS much better than SecureDNS - however, Connect Safe DNS will block access to some malware download sites... like Virussign and others. So if you test malwares it will interfere.

CIS web-filter is OK but not great. I import various blocklists or subscribe to PeerBlock IBlockList.

For typical use Norton is good enough... PeerBlock would be best for super adventurous web surfer.

 

[lordman]

I do not think the CIS web-filter and SecureDNS contain the same data... although I could be wrong.

I find Norton Connect Safe DNS much better than SecureDNS - however, Connect Safe DNS will block access to some malware download sites... like Virussign and others. So if you test malwares it will interfere.

CIS web-filter is OK but not great. I import various blocklists or subscribe to PeerBlock IBlockList.

For typical use Norton is good enough... PeerBlock would be best for super adventurous web surfer.

I have been testing connectsafe and i see it block no-malware urls. I see block parts of webs without showing malware alert too, that webs dont show connectsafe alert but show as it would have bad parts with errors.

Conectsafe blocks google earth conexions during 1 or 2 days some times ago.

I think securedns is more stable to work with it without need to change dns some times.

 

[Ink]

If Web Protection and Anti-Phishing is non-existent, did you give Comodo SecureDNS a run?

Can the block page be bypassed, with a few user clicks?
Can it be configured like Norton ConnectSafe (PC)?

Google SafeBrowsing is effective for most browsers, do you recommend other Anti-Phishing tools?

 

[lordman]

If Web Protection and Anti-Phishing is non-existent, did you give Comodo SecureDNS a run?

I think yes, its runs more efficiently that connecsafe although connectsafe has a bit more malware protection.

Can the block page be bypassed, with a few user clicks?

if you use ips 156.154.* you can bypass with one click. I havent can bypass using ips 8.*.

Can it be configured like Norton ConnectSafe (PC)?

SecureDNS ips 8.* has a optional filter beta version by categories. If you register and activate account you can enter on a web panel, the problem is that, last time i see it, i can only configure my ip one time, the filtered service stop working when my ip changes.

Google SafeBrowsing is effective for most browsers, do you recommend other Anti-Phishing tools?

If you are searching an antiphising service to complement Google Safebrowsing i think the best option is OpenDNS. Securedns and Connectsafe have poor phising protection.

OpenDNS has filter service by categories, better service than Connectsafe but without antimalware protection.

 

[jasonX]

Great work hjlbx! You the man! I like your post do keep it up as it is very informative.