ThreatFire Level 5

[Aventador]

I wouldn't feel safe using a product which has not had a new version release in almost 2 years. Do you drink expired milk?

[KelvinW4]

I think you are still pretty safe behind threatfire and sandboxie. Sandboxie has only rarely been exploited and is going through constant improvement and fixes and threatfire and detect some executions and network connections. It is almost like a HIPS at level 5.

[Gnosis]

I think I am pretty safe too. I know my config is controversial, but I feel safer with TF and Sandboxie than I have with any traditional realtime AV, or other realtime security.

Aventador has some constructive criticisms regarding my security set up. I wish someone would do a thorough test of Threatfire (SET TO LEVEL 5) against some popular nasties so we can clear this up.

[Aventador]

ZOU your missing the point. Threatfire is NOT a standalone antivirus solution. Never has and never was. It is a behavior blocker used to compliment your real time antivirus. The data base gets updated for on demand scanning only. No real time protection. Look over at Wilders, one of the top security forums and see if you find a member using it. You wont cause they know its not currently being developed. For a more FREE secure solution install CIS.

[Gnosis]

Quote:Threatfire is NOT a standalone antivirus solution. Never has and never was. It is a behavior blocker used to compliment your real time antivirus

I agree 100%. That is why I use Sandboxie in tandem.


If I had any desire to change I would install Avira, with Comodo's firewall, but I like what I have right now.

[Aventador]

Ok but what means of knowing if s file is clean or not do you have? None. What if you remove a fie from the sandbox which is infected? Your SOL. Sandboxie is not bullet proof unless it's properly configured. There are guides which can help you. Let me find some. Mainly on Wilders.

[KelvinW4]

He can always upload the file to virustotal or scan it with hitman pro, malwarebytes, and other on domand scanners. If it breaks out the threatfire has a good chance it will catch it running on lv 5

[Gnosis]

Quote:He can always upload the file to virustotal or scan it with hitman pro, malwarebytes, and other on domand scanners. If it breaks out the threatfire has a good chance it will catch it running on lv 5

Exactly. HitMan Pro is what I run most of the time (nearly every day). You are truly "on top in minutes".

[KelvinW4]

Yes that is what some people use in wilders forums. Just plain sandboxie and OD scanners. Threatfire is just really a plus/

[Gnosis]

I watched a couple of TF reviews on YouTube that were done less than a year ago. Both tests had it at level 3. It still did pretty good on one review. It did much better on the second review I watched.

I would really like to see a review of TF set to level 5. I only saw one review of it at level 4 and the guy running the test complained and knocked it back down to level 3 because he did not white list killswitch and a couple of other apps.

If someone does test it, set it to level 5 and white list anything other program that will be running along side TF for intelligence gathering purposes; such as, Process Hacker, or Killswitch. I think you will be surprised at what it prevents. At least 20 malicious links should give us a good idea.

I know that if winsevenholic would have set TF to Level 5 instead of leaving it at default level 3, it would have caught everything, or at least all but one: