Difference between Cloud scan & lookup in Comodo

[sinu]

full system scan done in which i selected the cloud scan option and the comodo could not detect a malware sample which is caught by doing lookup in file rating as a malware .
is both cloud scan and lookup are different?
why is this difference? and why lookup is not implemented in full scan and context menu scan which can improve comodo's detection rate.

 

[hjlbx]

As far as I can tell Comodo databases are not always synchronized:

Antivirus signatures (on your machine) - Cloud - File Lookup do not always agree.

This is on-going issue; users have complained, but Comodo is slow in implementing improvements.

Frustrating...

 

[Rolo]

After testing the cloud lookup and scan, I can't recommend it. Enabling it bypasses the strengths of Comodo's firewall/auto-sandbox ability with a mediocre-at-best AV. At that point, you might as well just use a more effective scan-based AV solution.

Edit: I can't recommend it for a hardened configuration; otherwise, see my post below

 

[Malware1]

Cloud scan - do you mean file upload? it uploads unknown files
Lookup - only checks files known in Comodo's DB.

 

[hjlbx]

After testing the cloud lookup and scan, I can't recommend it. Enabling it bypasses the strengths of Comodo's firewall/auto-sandbox ability with a mediocre-at-best AV. At that point, you might as well just use a more effective scan-based AV solution.

Comodo Cloud is nothing but a file rating database - from what I understand. It serves to allow, disallow or sandbox files. It does supplement Comodo's AV in the case where a file has been determined to be malicious by Comodo, but Comodo has not created an AV signature for it yet.

Disabling Comodo Cloud will also mean that some Trusted files newly introduced to your system will be treated as Unrecognized - and sandboxed. To me that is needless, but essentially harmless to the system - the only negative, if one can really call it that, are the alerts generated.

 

[Rolo]

Right. Not having it enabled is a pain. We pretty much have to decide between hardened and micromanage every detail or accept some measure of vulnerability, albeit a pretty small one. We "can't have it both ways", 100% secure and hassle-free.

I've decided to use Comodo as a great upgrade to Windows Firewall and HIPS. I have cloud scan enabled for initial screening--if Comodo thinks it's malicious, it's a safe bet that it is--and for alert mitigation, NOT for the AV function. I opted for Qihoo 360 for file scanning, behaviour blocking.