Comodo Internet Security

• Introduction To Comodo Internet Security
  • Special Features
  • System Requirements
  • Installation
    • CIS Premium – Installation
    • CIS Pro - Installation And Activation
    • CIS Complete - Installation And Activation
    • Activating CIS Pro/Complete Services After Installation
      • Activating Your License
      • Activating Your Guarantee Coverage
      • Renewal Or Upgrading Your License
  • Starting Comodo Internet Security
  • The Main Interface
    • The Home Screen
    • The Tasks Interface
    • The Widget
    • The System Tray Icon
  • Understanding Security Alerts
• General Tasks – Introduction
  • Scan And Clean Your Computer
    • Run A Quick Scan
    • Run A Full Computer Scan
    • Run A Rating Scan
    • Run A Custom Scan
      • Scan A Folder
      • Scan A File
      • Create, Schedule And Run A Custom Scan
  • Instantly Scan Files And Folders
  • Processing Infected Files
  • Manage Virus Database And Program Updates
  • Manage Quarantined Items
  • View CIS Logs
    • Antivirus Logs
      • Filtering Antivirus Logs
    • Firewall Logs
      • Filtering Firewall Logs
    • Defense+ Logs
      • Filtering Defense+ Logs
    • Alerts Logs
      • Filtering Alerts Displayed Logs
    • Tasks
      • Filtering Tasks Launched Logs
    • Configuration Changes
      • Filtering Configuration Changes Logs
  • Manage CIS Tasks
  • View Active Internet Connections
  • View Active Process List
• Firewall Tasks – Introduction
  • Allow Or Block Internet Access To Applications Selectively
  • Stealth Your Computer Ports
  • Manage Network Connections
  • Stop All Network Activities
  • Advanced Firewall Settings
• Sandbox Tasks – Introduction
  • The Virtual Kiosk
    • Starting The Virtual Kiosk
    • The Main Interface
    • Running Browsers Inside The Virtual Kiosk
    • Opening Files And Running Applications Inside The Virtual Kiosk
    • Configuring The Virtual Kiosk
    • Closing The Virtual Kiosk
  • Run An Application In The Sandbox
  • Reset The Sandbox
• Advanced Tasks – Introduction
  • Create A Rescue Disk
    • Downloading And Burning Comodo Rescue Disk
  • Remove Deeply Hidden Malware
  • Submit Files
  • Identify And Kill Unsafe Running Processes
• Advanced Settings
  • General Settings
    • Customize User Interface
    • Configure Program And Virus Database Updates
    • Log Settings
    • Manage CIS Configurations
      • Comodo Preset Configurations
      • Importing/Exporting And Managing Personal Configurations
  • Security Settings
    • Antivirus Settings
      • Real-time Scanner Settings
      • Scan Profiles
      • Exclusions
    • Defense+ Settings
      • HIPS Behaviour Settings
      • Active HIPS Rules
      • HIPS Rule Sets
      • Protected Objects
        • Protected Files
        • Blocked Files
        • Protected Registry Keys
        • Protected COM Interfaces
      • Behavior Blocker
        • The Sandbox - An Overview
          • Unknown Files - The Auto - Sandboxing And Scanning Processes
      • Configure The Sandbox
    • Firewall Settings
      • Firewall Behavior Settings
      • Application Rules
      • Global Rules
      • Firewall Rule Sets
      • Network Zones
        • Network Zones
        • Blocked Zones
      • Port Sets
    • Manage File Rating
      • File Rating Settings
      • Trusted Files
      • Unrecognized Files
      • Submitted Files
      • Trusted Vendors List
• Comodo GeekBuddy
  • Overview Of Services
  • Activation Of Service
  • Launching The Client And Using The Service
  • Accepting Remote Desktop Requests
  • Chat History
  • Using Issue Tracker
  • Uninstalling Comodo GeekBuddy
• TrustConnect Overview
• Comodo Dragon
• Comodo BackUp
• Appendix 1 CIS How To... Tutorials
  • Enabling / Disabling Security Components Easily
  • Setting Up The Firewall For Maximum Security And Usability
  • Blocking Internet Access While Allowing Local Area Network (LAN) Access
  • Setting Up The HIPS For Maximum Security And Usability
  • Setting Up The Behavior Blocker For Maximum Security And Usability
  • Password Protect Your CIS Settings
  • Reset Forgotten Password (Advanced)
  • Running An Instant Antivirus Scan On Selected Items
  • Creating An Antivirus Scanning Schedule
  • Running Untrusted Programs Inside Sandbox
  • Running Browsers Inside Sandbox
  • Running Untrusted Programs Inside Virtual Kiosk
  • Running Browsers Inside The Virtual Kiosk
  • Restoring Incorrectly Quarantined Item(s)
  • Submitting Quarantined Items To Comodo For Analysis
  • Enabling File Sharing Applications Like BitTorrent And Emule
  • Blocking Any Downloads Of A Specific File Type
  • Disabling Behavior Blocker And Auto-Sandboxing On A Per-application Basis
  • Switching Between Complete CIS Suite And Individual Components (just AV Or FW)
  • Switch Off Automatic Antivirus And Software Updates
  • Suppressing CIS Alerts Temporarily While Playing Games
  • Renewing Your License
• Appendix 2 - Comodo Secure DNS Service
  • Router - Manually Enabling Or Disabling Comodo Secure DNS Service
  • Windows XP - Manually Enabling Or Disabling Comodo Secure DNS Service
  • Windows 7 / Vista - Manually Enabling Or Disabling Comodo Secure DNS Service
• Appendix 3 - Glossary Of Terms
• About Comodo Security Solutions

Unrecognized Files

 

Once installed, the HIPS watches all file system activity on your computer. Every new executable file introduced to the computer, is first scanned against the Comodo certified safe files database. If they are not safe, they are added to the 'Unrecognized Files' for users to review and possibly submit to Comodo. Apart from new executables, any executables that are modified are also moved to the 'Unrecognized Files' area.

'Unrecognized Files' is specifically important while HIPS is in 'Clean PC Mode'. In Clean PC Mode, the files in 'Unrecognized Files' are NOT considered clean. For more information, please check 'Clean PC Mode' on the HIPS settings page.

The 'Unrecognized Files' panel displays the list of files added as Unrecognized Files and allows you to assess the pending files to determine whether or not they are to be trusted. If they are trustworthy, they can be moved to 'Trusted Files' using the 'Move to' button. Similarly, files that are suspicious can be moved to the 'Blocked Files' area.

You can also add files upon which you are suspicious into 'Unrecognized Files' list to check whether the master Comodo safe list contains more information on them or to submit the files to Comodo for analysis. Experts at Comodo will analyze the files and add them to global white-list or black-list accordingly.

• The Unrecognized Files panel can be accessed by clicking Security Settings > File Rating > Unrecognized Files tab from the Advanced Tasks interface

You can use the search option to find a specific item in the list.

To use the search option, click the search icon at the far right in the column header.

• Click the chevron on the left side of the column header and select the search criteria from the drop-down.

• Enter partly or fully the name of the item as per the selected criteria in the search field.

• Click the right or left arrow at the far right of the column header to begin the search.

• Click the icon in the search field to close the search option.

Clicking the handle at the bottom center of the panel opens the following options:

• Add - Allows you to add files to 'Unrecognized Files' list manually

• Move - Allows you to move files from 'Unrecognized Files' list to Trusted Files or Blocked Files list

• Remove - Allows you to remove files from 'Unrecognized Files' list

• Lookup - Starts the online lookup of selected file with the master Comodo safelist if any details are available

• Submit - Begins the file submission process.

• Delete file - Deletes the highlighted file from your computer

• Purge - Runs a system check to verify that all the files listed are actually installed on the host machine at the path specified. If not, the file is removed, or 'purged', from the list.

To manually add files to 'Unrecognized Files' list

• Click the handle from the bottom center and choose 'Add'
  

You can add files to the Unrecognized Files list by three ways:

• Files - Allows you to navigate to the file or executable of the program you wish to add.

• Folders - Allows you to navigate to the folder you wish to add. All the files in the folder will be added to the 'Unrecognized Files' list.

• Running Processes - Allows you to select a currently running process. On selecting a process, the parent application, which invoked the process will be added to 'Unrecognized Files' list.

• Click OK for your changes to take effect.

To move an included entry to Trusted Files or Blocked Files

• Select the entry to be transferred out of the 'Unrecognized Files' list into either Trusted Files or Blocked Files. You can select several entries to be moved at once by marking the check-boxes beside the entries.

• Click the handle from the bottom center and choose 'Move'
  

• Choose 'Trusted Files' or 'Blocked Files' from the drop-down.

• Click OK for your changes to take effect.

 To remove an included entry from the Unrecognized Files list

• Select the entry to be removed from the 'Unrecognized Files' list. You can select several entries to be removed at once by marking the check-boxes beside the entries.

• Click the handle from the bottom center and choose 'Remove'. The file is only removed from the list and not deleted from your system.

• Click OK for your changes to take effect.

To perform an online lookup for unrecognized files

• Select the file to be checked from the 'Unrecognized Files' list. You can select several entries at once by marking the check-boxes beside the entries.

• Click the handle from the bottom center and choose 'Lookup...'.

Comodo servers will be contacted immediately to conduct a search of Comodo's master safe list database to check if any information is available about the files in question and the results will be displayed.

 

• If a file is found to be malicious, it will be indicated as 'Bad' with a red icon. You can move it to Blocked Files.

• If the file is found to be safe, it will be indicated as 'Trusted' with a green icon. You can move it to Trusted Files.

• If no information is available, it will be indicated as 'Unknown' with a yellow icon. You can submit the file to Comodo for analysis.

 

To manually submit the files to Comodo

• Select the entry to be submitted from the 'Unrecognized Files' list. You can select several entries to be sent at once by marking the check-boxes beside the entries.

• Click the handle from the bottom center and choose 'Submit'. The file(s) will be immediately sent to Comodo.

You can view the list of files you submitted so far, from the Submitted Files panel.