App Review Comodo Cloud Antivirus v1.8.407941.426 - Autosandbox - MBR-ransomware re-test

[Evjl's Rain]

@Yash Khan hi, I saw your message on comodo forum
could you please test CIS with similar settings (proactive, firewall=off, AV=off, HIPS=off) to see if the CPU usage is not 0% or not?

I may do my own test also. I doubt CIS won't have this issue

 

[shmu26]

I have mentioned in CCAV thread "why some files show up in both sandbox rules & trusted files list"?
Lets wait for the info...

okay, but why is CCAV monitoring dlls? Is that expected behavior?

 

[Evjl's Rain]

CIS is silent like Sleeping beauty


So this is the only problem with CCAV

 

[Deleted member 2913]

@Evjl's Rain,

My todays net limit 1gb is over i.e 56mb remaining, after 56mb finishes, speed will be reduced to 128kbps, it will take very long to download CFW.

I find CFW lighter compared to CCAV so I think CFW CPU usage would be 0%.

Hope CFW users will help us here & give info. If not then tomorrow I will test CFW & update here.

By the way, you mean CIS or CFW? I guess any, right?

 

[Deleted member 2913]

okay, but why is CCAV monitoring dlls? Is that expected behavior?

Why shouldn't?

 

[Deleted member 2913]

CIS is silent like Sleeping beauty
View attachment 134608

So this is the only problem with CCAV

I haven't tried CIS 10 But CFW I find lighter compared to CCAV so as mentioned in my previous post, it would be 0%.

 

[Evjl's Rain]

@Evjl's Rain,

My todays net limit 1gb is over i.e 56mb remaining, after 56mb finishes, speed will be reduced to 128kbps, it will take very long to download CFW.

I find CFW lighter compared to CCAV so I think CFW CPU usage would be 0%.

Hope CFW users will help us here & give info. If not then tomorrow I will test CFW & update here.

By the way, you mean CIS or CFW? I guess any, right?

I mean comodo internet security. It's fairer to compare the one which has AV engine to CCAV
so in my quick test with CIS (comodo antivirus doesn't have the sandbox and firewall while CIS has everything): proactive, a few tweaks in User interface, disable HIPS, virusscope, delete Downloads folder from "Do not virtualize access to...", disable the widget. CIS 99% stays at 0%, all processes, rarely 0.1%

This is my host machine with avast and voodooshield temporarily turned off

@shmu26 hi, I noticed a very useful info in CIS. You can select not to install the firewall component during the installation . It can be helpful if you wanna make a combo KIS+CIS without firewall

 

[Deleted member 2913]

the thing that has me puzzled is dll files. I see both in my trusted file list and in my autosandbox rules that there are entries for dlls.
For at least one of them, I got a prompt.
What's up with that?

Devs reply "Can you please check if they are related to application that got sandboxed and then you decided to run outside Sandbox?"

 

[shmu26]

Devs reply "Can you please check if they are related to application that got sandboxed and then you decided to run outside Sandbox?"

one of them is, for sure.
the majority are from today's chrome update. I think the update was initially autsandboxed, and then I allowed it.

 

[Deleted member 2913]

one of them is, for sure.
the majority are from today's chrome update. I think the update was initially autsandboxed, and then I allowed it.

So they were autosandboxed & you allowed to run outside sandbox, right?

Are all dll files or other files too?

 

[shmu26]

So they were autosandboxed & you allowed to run outside sandbox, right?

Are all dll files or other files too?

right
there are exe files and also dll files

 

[Evjl's Rain]

right
there are exe files and also dll files

hi, I don't know if you miss my previous message or not. I think this info is useful for you

hi, I noticed a very useful info in CIS. You can select not to install the firewall component during the installation . It can be helpful if you wanna make a combo KIS+CIS without firewall

 

[shmu26]

hi, I don't know if you miss my previous message or not. I think this info is useful for you

If you do like that, you will also lose the autosandbox, no?

 

[Evjl's Rain]

If you do like that, you will also lose the autosandbox, no?

no, everything is still intact
I have some screenshots which prove that only firewall is missing while autosandbox is still there


I unchecked firewall while installing CIS. Now the name is COMODO antivirus 10

 

[Deleted member 2913]

I dont know what CIS 10 installer options are?

With any previous CIS installer you can install -
CIS - Suite
CFW - No AV
CAV - No FW

Sandbox will be there with all install options.

I think CIS 10 installer options would be the same as previous installers.

The above install options only applies to CIS installer.

 

[shmu26]

no, everything is still intact
I have some screenshots which prove that only firewall is missing while autosandbox is still there
View attachment 134611 View attachment 134612 View attachment 134613

I unchecked firewall while installing CIS. Now the name is COMODO antivirus 10

@Evjl's Rain, you are brilliant! I will have to try that.

 

[Evjl's Rain]

I dont know what CIS 10 installer options are?

With any previous CIS installer you can install -
CIS - Suite
CFW - No AV
CAV - No FW

Sandbox will be there with all install options.

I think CIS 10 installer options would be the same as previous installers.

The above install options only applies to CIS installer.

here are the options


I read comodo website. I saw CAV doesn't have firewall and sandbox. Just AV engine. Their screenshots showed the same thing

 

[Deleted member 2913]

here are the options
View attachment 134614

I read comodo website. I saw CAV doesn't have firewall and sandbox. Just AV engine. Their screenshots showed the same thing

Yes, its the same as any previous CIS installer options.

 

[Deleted member 2913]

right
there are exe files and also dll files

Devs reply
"Possible reason is that you ran setup, which was sandboxed and then you decided to run outside sandbox, that resulted in sandbox rule creation with action "Run outside sandbox" and trusted rules are created for the same."

 

[shmu26]

hi, I don't know if you miss my previous message or not. I think this info is useful for you

well, I did the CIS installation without firewall. But I got more than I bargained for.
It installs not just autosandbox, but also HIPS. That's not so good, because Kaspersky also has a pretty extensive HIPS.
Even if I disable the COMODO HIPS, but the drivers are still there, and I think they will conflict with KIS, no?