CastleCops® - Comodo arbitrarily deletes file without authorization

Need help? Click here to register for free! Absolutely zero advertisements on this site!

**$9736.22 of $21422.68**

Help CastleCops serve the community on new servers, Donate Here to reach our goal.

	Donation/Premium

	Donations. Become Premium Today!

	Security Central

	· Home · PIRT/Fried Phish · MIRT · SIRT · Deutsch · Wiki · Newsletter · O16/ActiveX · CLSID List · Contest2007 · Downloads · Feedback (send) · Forums · HijackThis · Hijacktrend · LSPs · My Downloads · O18 · O20 · O21 · O22 · O23 · O9 · Premium · Private Messages · Proxomitron · Reviews · Search · StartupList · Stories Archive · Submit News · WsIRT · Your Account · Acceptable Use Policy

Survey

Commentaries: Comodo arbitrarily deletes file without authorization

Anti-Virus

Mistoffeles writes "I tried this new anti-virus program out, it looked really promising; that is, until it started deleteing files arbitrarily from my system without notification, without asking for authorization, without so much as a how do you do. It marked perfectly innocent files as viruses, files whose installers met their md5 checksums, and blew them away without even asking what I wanted to do with them.

This is unacceptable in any product, and gets the big thumbs down with a side of pew-tine.

The company makes a number of security products. Not only have I completely removed them all, I am also reformatting the computer they were installed on and rebuilding it from the ground up, just to be sure this scam is gone forever.

Note: - This article, not the opinion of CastleCops, is deemed to be untrue by CastleCops staff. --11:34AM EST, Mar 10, 2007
- A reply by the news submitter has been given here. My suggestion is for this to be thoroughly tested by researchers to see if this is replicated. In the meantime, to the poster, please provide details about the Comodo you were using, MD5 hash, plus version. -- 6:23PM EST, Mar 12, 2007 "

Posted on Saturday, 10 March 2007 @ 02:19:00 UTC by Paul (2776 reads)
[ Trackback ]

"Commentaries: Comodo arbitrarily deletes file without authorization" | Login/Create an Account | 10 comments | Search

The comments are owned by the poster. We aren't responsible for their content.

No Comments Allowed for Anonymous, please register

Re: Comodo arbitrarily deletes file without authorization (Score: 1)
by Cudni on Saturday, 10 March 2007 @ 10:18:51 UTC
(User Info | Send a Message) http://www.dslreports.com/forum/security,1

What product was that, downloaded from where?
Did you report it in their forum?
https://forums.comodo.com/index.php/board,68.0.html

I tried looking to find similar experiences over there but there were none

As for their other security products how many did you install at the same time? Certainly there are positive reports of their firewall

Re: Comodo arbitrarily deletes file without authorization (Score: 1)
by PCBruiser on Saturday, 10 March 2007 @ 17:22:54 UTC
(User Info | Send a Message)

It is for all practical purposes statistically impossible for two different file to have the same MD5 hash. For that to happen, the two files would have to be absolutely identical. File hashes are more unique than fingerprints. So, the comment that Commodo was deleting valid files because they had the same MD5 hashes is so patently impossible and false that it is laughable. The poster loses all credibility by making that claim. If it is indeed true, then prove it - post a perfectly valid file that has exactly the same MD5 hash as a known malware file for us to validate.

Then to suggest that there were multiple occurrences of that problem on their system, well that is the mathematical equivalent of claiming that you can flip a properly balanced coin a million times and always come up heads. And, then claiming to be able to repeat that same trick every time you do it.

]

Re: Comodo arbitrarily deletes file without authorization (Score: 1)
by Mistoffeles on Monday, 12 March 2007 @ 18:39:43 UTC
(User Info | Send a Message)

I downloaded all of their free products, and installed what was installable.

The antivirus product deleted two programs that I use regularly, without putting up any kind of confirmation dialog whatsoever, just entries in the list it compiled during the scan, which were deleted as it deleted the files.

Subsequently, I downloaded fresh copies of the programs from the websites of the authors, and reinstalled them, and Comodo again marked and deleted the executable files.

I quite frankly don't give a rat's behind what you have to say about what is possible and what isn't; the fact is that this product deleted the software, right in front of my eyes, and not one thing you have to say is going to change that.

]

Re: Comodo arbitrarily deletes file without authorization (Score: 1)
by Cudni on Monday, 12 March 2007 @ 22:54:32 UTC
(User Info | Send a Message) http://www.dslreports.com/forum/security,1

Again you are very generic in your posting. What AV product deleted what programs on your computer. Could we have the names of each please so that somebody else can try to replicate and if it can so that it can be fixed, if at all needed.

Cudni

]

Re: Comodo arbitrarily deletes file without authorization (Score: 1)
by shifter on Saturday, 10 March 2007 @ 22:04:58 UTC
(User Info | Send a Message)

I was a moderator at Comodo for some time, while there were issues with CPU usage and other boot issues, this problem cannot be. I don't moderate there any more for other reasons but can't hold ill against the products for these differences. The CAV will not delete files in this manner, the misunderstanding of how to properly use a software and confusion along with anger fuels these misconceptions and impossibilities. I have used the Firewall for almost a year now and other products and haven't had many issues at all. My son runs CAV, no problems. If this was true, EVERYONE would have this problem, not just one, if it were a problem of such manner. Besides, it's always possible this person had all sorts of infections and downloads from who knows where and CAV may have in fact attacked back, I would think this unlikely but most plausable explanation.

Paul

]

Re: Comodo arbitrarily deletes file without authorization (Score: 1)
by PAN_IRISH on Sunday, 11 March 2007 @ 01:37:14 UTC
(User Info | Send a Message)

with a name like

Mistoffeles

the ancient name for the devil,
what do you expect from the poster?

Re: Comodo arbitrarily deletes file without authorization (Score: 1)
by Cudni on Sunday, 11 March 2007 @ 11:08:15 UTC
(User Info | Send a Message) http://www.dslreports.com/forum/security,1

to spell it right?
http://en.wikipedia.org/wiki/Mr._Mistoffelees

]

Re: Comodo arbitrarily deletes file without authorization (Score: 1)
by PAN_IRISH on Sunday, 11 March 2007 @ 20:01:02 UTC
(User Info | Send a Message)

i know,
they make a change to personalize it.

still, it's the same name.

]

Re: Comodo arbitrarily deletes file without authorization (Score: 1)
by shifter on Monday, 12 March 2007 @ 06:06:44 UTC
(User Info | Send a Message)

Good point. Could be my mother in law's real father :)

Aside from the name, as I said, I was a moderator there for a time and used the software and still do, it's simply, basically impossible what they claim and a bunch of hooey.

Paul

]

Re: Comodo arbitrarily deletes file without authorization (Score: 1)
by Mistoffeles on Monday, 12 March 2007 @ 18:15:50 UTC
(User Info | Send a Message)

Mistoffeles is the name of a cat in the musical Cats.

]

	Login

	Nickname Password Security Code: Type Security Code: Usage signifies AUP acceptance · New User? · Click here to create a registered account.

	Related Links

	· del.icio.us! · digg it! · reddit! · TrackBack (0) · PHP HomePage · HotScripts · W3 Consortium · More about Anti-Virus · News by Paul Most read story about Anti-Virus: �ErrorSafe� Suite Fools and Pesters Users

	Article Rating

	Average Score: 1 Votes: 1 Please take a second and vote for this article:

	Options

	Printer Friendly Page


	2002-2008 � Computer Cops LLC dba CastleCops®. All rights reserved. Acceptable Use Policy. Use signifies your agreement. 153ppm 0.369s (0.028s) Making cybercriminals unhappy since 2002*