Xcitium Enterprise

• Introduction To Comodo Client Security
  • Special Features
  • System Requirements
  • Install Comodo Client Security
  • Start Comodo Client Security
  • The Main Interface
    • The Home Screen
    • The Tasks Interface
    • The Widget
    • The System Tray Icon
  • Understand Security Alerts
  • Password Protection
• General Tasks - Introduction
  • Scan And Clean Your Computer
    • Run A Quick Scan
    • Run A Full Computer Scan
    • Run A Rating Scan
    • Run A Custom Scan
      • Scan A Folder
      • Scan A File
      • Create, Schedule And Run A Custom Scan
    • Automatically Scan Unrecognized And Quarantined Files
  • Instantly Scan Files And Folders
  • Process Infected Files
  • Manage Virus Database Updates
  • Manage Blocked Autoruns
  • Manage Quarantined Items
• Firewall Tasks - Introduction
  • Configure Internet Access Rights For Applications
  • Stealth Your Computer Ports
  • Manage Network Connections
  • Stop All Network Activities
  • View Active Internet Connections
• Containment Tasks - Introduction
  • Run An Application In The Container
  • Reset The Container
  • Identify And Kill Unsafe Running Processes
  • Open Shared Space
  • The Virtual Desktop
    • Start The Virtual Desktop
    • The Main Interface
    • Run Browsers Inside The Virtual Desktop
    • Open Files And Run Applications Inside The Virtual Desktop
    • Pause And Resume The Virtual Desktop
    • Close The Virtual Desktop
  • Containment Statistics Analyzer
• DLP Tasks - Introduction
• Advanced Tasks - Introduction
  • Create A Rescue Disk
    • Download And Burn Comodo Rescue Disk
  • Remove Deeply Hidden Malware
  • Manage CCS Tasks
  • View CCS Logs
    • Antivirus Logs
    • VirusScope Logs
    • Firewall Logs
    • HIPS Logs
    • Containment Logs
    • Website Filtering Logs
    • Device Control Logs
    • Autorun Event Logs
    • Alert Logs
    • CCS Tasks Logs
    • File List Changes Logs
    • Vendor List Changes Logs
    • Configuration Changes Logs
    • Virtual Desktop Event Logs
    • Data Loss Prevention Event Logs
    • Search And Filter Logs
  • Submit Files For Analysis To Comodo
  • View Active Process List
• CCS Advanced Settings
  • General Settings
    • Customize User Interface
    • Configure Virus Database Updates
    • Log Settings
    • Manage CCS Configurations
      • Comodo Preset Configurations
      • Personal Configurations
    • Manage Performance
  • Antivirus Configuration
    • Real-time Scanner Settings
    • Scan Profiles
  • Firewall Configuration
    • General Firewall Settings
    • Application Rules
    • Global Rules
    • Firewall Rule Sets
    • Network Zones
      • Network Zones
      • Blocked Zones
    • Port Sets
  • HIPS Configuration
    • HIPS Settings
    • Active HIPS Rules
    • HIPS Rule Sets
    • HIPS Groups
      • Registry Groups
      • COM Groups
  • Protected Objects
    • Protected Objects - HIPS
      • Protected Files
      • Blocked Files
      • Protected Registry Keys
      • Protected COM Interfaces
    • Protected Objects - Containment
      • Protected Files And Folders
      • Protected Keys
  • Data Loss Prevention
  • Containment Settings
    • Containment Settings
    • Auto-Containment Rules
    • Virtual Desktop Settings
    • Containment - An Overview
    • Unknown Files - The Scanning Processes
  • File Rating Configuration
    • File Rating Settings
    • File Groups
    • File List
    • Submitted Files
    • Vendor List
  • Advanced Protection
    • VirusScope Settings
    • Scan Exclusions
    • Device Control Settings
    • Script Analysis Settings
    • Miscellaneous Settings
  • Web Filter Settings
    • Website Filtering Rules
    • Website Categories
• Appendix 1 - CCS How To... Tutorials
  • Enable / Disable AV, Firewall, Auto-Containment And VirusScope Easily
  • Set Up The Firewall For Maximum Security And Usability
  • Block Internet Access While Allowing Local Area Network (LAN) Access
  • Block / Allow Specific Websites To Specific Users
  • Set Up HIPS For Maximum Security And Usability
  • Create Rules To Auto-Contain Applications
  • Run An Instant Antivirus Scan On Selected Items
  • Create An Antivirus Scan Schedule
  • Run Untrusted Programs Inside The Container
  • Run Browsers Inside The Container
  • Restore Incorrectly Quarantined Items
  • Submit Quarantined Items To Comodo Valkyrie For Analysis
  • Enable File Sharing Applications Like BitTorrent And Emule
  • Block Any Downloads Of A Specific File Type
  • Disable Auto-Containment On A Per-application Basis
  • Switch Off Automatic Antivirus Updates
  • Suppress CCS Alerts Temporarily
  • Control External Device Accessibility
• Appendix 2 - Comodo Secure DNS Service
  • Router - Manually Enable Or Disable Comodo Secure DNS
  • Windows - Enable Comodo Secure DNS
• About Xcitium

Automatically Scan Unrecognized and Quarantined Files

• Click 'Settings' > 'File Rating' > 'File Rating Settings'

• CCS can periodically re-scan unknown and quarantined files to check whether a new trust rating is available for them.

• This area lets you specify a schedule and settings for these scans.
  

File Rating

• CCS checks files whenever they are opened and rates them as 'trusted', 'malicious' or 'unrecognized'

• The rating is obtained by checking the file's reputation on our master whitelist and blacklist

• If no rating is available then CCS checks the trust rating of the software vendor

• CCS will apply the vendor's reputation to the file if one exists. CCS first checks the vendor's local reputation in the 'Vendor List'. If no local rating is available then it checks the file lookup service.

There are two ways a file can get an 'unrecognized' rating:

1. Because there is no rating for the file on Comodo's black or whitelists, and no user has assigned a malicious/trusted rating to the file.

OR

2. Because an admin, user or Comodo specifically assigned an 'unrecognized' rating to the file.

To view the rating:

• Go to 'Settings' > 'File Rating' > 'File List' > select an unrecognized file > Click 'File Details'

• Click the 'File Rating' tab
  

The following examples show files with and without ratings:

CCS will handle unrecognized files differently depending on whether the rating was proactively applied or not:

• Files awarded an unrecognized rating by admin, user or Comodo are not uploaded to Valkyrie.

• All other unrecognized files are uploaded to Valkyrie when executed or discovered by a rating scan. You can also submit them manually.

Regardless of the above, all unrecognized files are run in the container by default. If required, you can change auto-containment rules in 'Settings' > 'Containment' > 'Auto-Containment'. See 'Auto-Containment Rules' for more information.

Quarantined Files

• The antivirus scanner moves threats to quarantine to prevent them from infecting your system.

• All files in quarantine are encrypted, so they cannot run or cause harm.

• You can also manually move suspicious items to quarantine. See Manage Quarantined Items for more details.

Configure scan settings for unrecognized and quarantined files

• Click 'Settings' on the CCS home screen

• Click 'File Rating' > 'File Rating Settings'

• Automatically scan unrecognized files at equal intervals - CCS will check Comodo's master database to see if a new trust rating is available for unrecognized files. (Default = Enabled and set for every 4 hours)

• Automatically re-evaluate quarantined files at equal intervals - CCS will check Comodo’s master database to see if a new trust rating is available for quarantined files. (Default = Enabled and set for once everyday)

• Click 'Edit scan options' to open the unrecognized / quarantined scan profile:
  

 

Unrecognized Files Scan

 

Quarantined Files Scan

• Scan Name - The label of the scan. This is pre-configured and cannot be edited.

• Items - The files that are scanned by the profile. ‘Unrecognized’ and ‘Quarantined’ files are the defaults. You cannot edit or add files to this profile.

• Scan Options - (unrecognized files scan only) Configure scan technologies, how to handle threats, and more. See Configure scan options for the profile in the previous section for help with this.

• Schedule - Specify the frequency of the scans. See Configure a scan schedule in the previous section if you need help with this. (Default = Every 4 hours for unrecognized files scan and once in a day for quarantined files scan).

• Click 'OK' to save your changes.

• Click 'OK' in the 'Advanced Settings' screen for your settings to take effect.