another example why "if it aint broke, don't fix it".

comodo had (has?) a great FIREWALL.   but they couldn't leave well-enough alone...  they insisted on expanding/"bloating" it into a security suite... that's causing problems/conflicts and "turning off" users...

I was/am very content with version 2.4.x, which I still use to this day (in addition to my router's NAT firewall).   yes, i understand it may no longer be considered "perfect", in terms of the latest leak-tests, but I'm sure it can't be any worse than using the Windows XP firewall.   [And like I said, things have to first get past the router before any software firewall has to deal with it]

Hi ky331.

You are correct, but since I do not have a router, I got to have a good firewall. Even though Comodo comes as a security suite, you can choose to install just the firewall or the firewall with proactive defence  (HIPS). I chose proactive D+ and I was amazed how little it takes from my system. Really light. Also it has a "Clean PC Mode" that learns what you have in the PC to cut down on alerts while you "teach" it then you can swicth it to "safe, cutom, or paranoid mode" and a "installation mode" to make much more easily any new app install.

Sorry if it sounds as if I am promoting it, but besides the bug in 3.8, while I was using 3.5, it ran smoothly in my PC.

Hope it helps.

sorry.   i was not trying to offer any advice about your situation, but rather, simply lamenting a general trend we've seen among (free) software security products:

avg, which used to offer a nice anti-virus product, messed up royally when it "upgraded" from version 7.5 to version 8, which also included anti-spyware and anti-rootkit protection.   consequently, the stand-alone avg anti-spyware (formerly Ewido) and avg anti-rootkit, were discontinued.

comodo's BOClean, a resident anti-malware program, is being discontinued as a stand-alone product, in favor of it being integrated into Comodo's Internet Security Suite.

personally, i appreciated these compact, separate products, which allowed me to test them individually... and then, "pick-and-choose" the best combination which worked well for me.   it appears that those days are rapidly disappearing.

on the matter of firewalls, for anyone interested in researching the matter (going beyond the basic/included Windows firewall), the main comparative, in terms of leak-testing, can be found here:

http://www.matousec.com/projects/firewall-challenge/results.php

CIS rates quite highly there.

by all means, if you're happy with comodo 3.5 (or 3.8, when fixed), feel free to stick with it... just like i (for better or worse) am sticking with 2.4 [despite what now appears as an abysmal ranking by Matousec]. 

Hey ky331, no apology needed. Any good advice is always welcome, and besides you are correct. I remember when I was running Windows 95 and AVG was like 7 Megs and SpyBot was like 4  Megs.

Yes, I was awared of that test, thank you anyway.

Just a few additional thoughts on CIS and incompatibilities:

I have been using CIS 3.8 (firewall/D+ only) with no incompatibilies noted with any of my other defenses, and no reversion to 3.5. Then again, I don't use Spysweeper or Ad-Aware. I have been very happy with CIS firewall so far, and certainly don't consider it bloated, at least in terms of memory usage. The size of the installer, of course, has grown from about 8MB to 34MB over the years I've used it, but this doesn't really affect performance.

I agree with just about all comments made in this thread, and will be sad if CIS firewall integrates BOC, but my understanding is that it actually will be integrated with the Comodo AV (CAV) module which currently can be disabled.
http://forums.comodo.com/comodo_boclean_antimalware/boclean_to_be_discontinued-t34653.0.html;msg250889#msg250889

I should mention for the benefit of other readers that my practice when running on-demand scans from any of my AV/AS programs is to disable all  other resident programs first (except for the firewall/D+), and of course to close all running apps for the duration including any browser open. This not only quickens the scan, but prevents "duelling defenses". For example, if I run SAS free, I disable BOC, Windows Defender and NOD32 AV resident protection.

As long as updates to CIS continue to allow me to install only the FW, I will likely keep it. In this sense CIS differs from other suites where you have to install the whole nine yards. I will miss BOC though.

My other reservation about CIS is that it attempts (and recommends) one install its SafeSurf Toolbar which is based on the Ask toolbar, and which is checked by default during installation. This is adware at best, does not enhance security, and is detected by many other scanners. It was piggy-backed only to earn money for Comodo. This is a tactic that is increasingly common (used also by  Zonelabs FW products, Webroot Spysweeper, Symantec/Norton, Stopzilla) and really erodes one's faith in a product/vendor. One wonders if its inclusion by unsuspecting users has not accounted for some of the incompatibilities noted.

I have happily been using Online Armor on both machines for several months now with no problems. Very few alerts, and those seem to be during updates to other security products. Hopefully, they won't decide to go down this primrose path of trying to be all things  to all people...and trying to urge me to install some handy dandy tool bar.

Hi guys.

Just reporting back. It seems that people in Comodo are stuck fast since they updated CIS from v. 3.5.57173.439 to v. 3.8.64739.471, Feb 19 and then to v. 3.8.65951.477, Feb. 26. There are about 6 different posts with around 150 replies and more than 2500 viewers. Complaining about the same thing, Can not run Comodo firewall protection with D+ (HIPS) in their systems. CFP D+ interferes with other security programs. Most affected are systems running Ad Aware, Spy Sweeper, SuperAntimalware, NOD32, Avast, AVG, Live One Care. Also depends on the OS if it is XP or Vista 32 bit or 64 bit.

Note: There are people reporting everything running smoothly others not so lucky, or deactivating D+ works, but what is a firewall without HIPS?

Symptoms:

Slow OS or lack of response, including third programs like browsers, video and sound apps.

Endless Scans.

Lost of network connectivity.

And even BSOD.

When this behaviour was reported immediately after the first release of v.3.8 back in Feb. 20, Comodo´s liaisons and developers reported that they have found a bug and was going to be fixed for the new released (Feb. 26.), but now they are quiet.

The sad thing is that the veterans of the forum and liaisons are hinting that it is better to get rid of whatever AV or antimalware one has and stick with CIS because is better. I hope I am wrong.

"what is a firewall without HIPS?"

Keep in mind that Comodo did not introduce HIPS into its firewall until version 3.x --- earlier versions were "HIP-less".

Let's also keep in mind that the original firewall concept  was basically to "hide" your computer's existence from the outside world, so as to prevent intrusion into your system.   That's basically what the windows XP firewall attempts to do, no more, no less.

Along came "third-party firewalls", which in addition to hiding one's computer and blocking unsolicited INcoming traffic, usually also monitor OUTgoing traffic.   They advise you when some program is trying to "reach out" to the internet, and typically allow you to decide ("teach it") whether you want to allow that particular program to do so, or to deny it.

Anti-virus and anti-malware products are limited in what they can detect:  In particular, programs/scanners that are "signature-based" are prone to miss new malware products which are not yet included in their signature databases.  They can also fail to detect malware programs (e.g., rootkits) that are cleverly disguised to avoid detection.   That's where HIPS comes into play:  HIPS (Host -based Intrusion Prevention System)  identifies intruders by their behavior, rather than by any characteristic fingerprint.  HIPS protection attempts to intercept/stop any suspicious behavior, and then asks the user whether he or she wants to allow it.

By this definition, WinPatrol and TeaTimer would be  examples of rudimentary HIPS programs.   Among other things, they alert you to any program that adds itself to your auto-startup sequence.   (Some programs, like your firewall, resident anti-virus and anti-malware, should  auto-boot whenever your system starts.   But just about any other program that does so should be considered for potentially suspicious behavior.)    Nowadays, trying to draw a fine-line between what is HIPS and what is anti-malware is very difficult to do... but here's a link to what one site refers to as separate/independent HIPS programs [Note:  I am listing this site as an example of the independent HIPS concept.   However, I do NOT use the programs mentioned there, and as such, i am  **NOT**  "endorsing" them]:     http://www.techsupportalert.com/best-free-hips.htm

So yes, it's possible to find/run a good firewall (which functions ONLY as a firewall), a separate HIPS program, a separate anti-virus program, and a separate anti-malware program (one resident, but at least 2 on-demand scanners).

As mentioned before, things were much nicer/simpler before when companies developed separate, dedicated programs, rather than tossing all their eggs into one basket (and winding up with scrambled eggs :emotion-5: )

Hopefully, Comodo will address the many problems it has now inflicted upon its users.    But unless they do so swiftly, and completely, I would not be surprised to learn of many "defections" to their competitors.

Hi ky331.

Thank you for the feedback.

I used to have SpyBot with Tea Timer, but it was too much for my father and sister (regular user of this PC) who kept calling me to know what to do. I switched to Win Patrol (paid), at least it gives an explanation of the file that detects.

I have used in my PCs AVG (until I found out about Avast +/- 6 years ago), Avast home Ed., Spy Bot, Spyware Blaster, Win Patrol and Zone Alarm. Also I have go through an assortment of antimalware; Gold "something", Spyware Doctor, Ad Aware, Spy Sweeper, and SuperAntispyware, and lately I have used MalwareBytes´.

With the acquisition of this PC I let McAfee Security Center ran his license ( I´ve never try a security center before); However, I added Spy Sweeper and Win Patrol, and it was OK. I just got one minor Trojan a while back for fooling around with my niece´s MP3. It took me one afternoon to get rid of it.

Since McAfee ran out, I went back to Avast, and I wanted to try a new firewall because there have been so much controversy about Zone Alarm. I have been using CFP D+ 3.5 for at least a month and I was getting used to it when this new update happened. So I would do like you, I will stay with 3.5 until Comodo fix this or if not I might try Online Armor.  

With all due respect, Hernan, 6 posts about incompatibility problems between CIS 3.8 and other apps is hardly unusual following introduction of a new version, particularly given the large customer base of Comodo. I follow the Comodo forums, and do not sense a widespread problem.

However I use only the Firewall/D+, and don't have their AV module installed. It wouldn't surprise me if CAV is partly responsible for some of the problems reported.

All I can say is that the latest version of 3.8x has caused no incompatability with any of my other (numerous) defenses. Since you provided no links to posts at Comodo, I can't address the many issues you raise, other than to advise folks considering installing CIS to avoid installing their AV. Also to note that CIS is a demanding FW with a steep learning curve; as such I would not recommend it for novices.