App Review Comodo Internet Security 8 2 review

[Terry Ganzi]

 

[Deleted member 2913]

I think flashp.exe was running in sandbox.
ResetSandbox would have deleted it.

You tried ResetSandbox after running it from VTRoot folder.
And running it from VT folder, it was not sandboxed.
I think thats why ResetSandbox didn't deleted it.

Files running from VT folder were not sandboxed.
Dont know if its by design or a bug?
I think its a dangerous bug.

 

[Deleted member 2913]

So no one watched the test?

I would like to know if I am right or not on flashp.exe.

 

[Davidov]

This bug has been fixed in the latest version.Nice day.

 

[Deleted member 2913]

This bug has been fixed in the latest version.Nice day.

VT folder one i.e running malware from VT folder are sandboxed now in the latest version?

I have asked this in Comodo forum too.

May be Cruelsister will shed some light.

 

[Davidov]

I read it in the last update (log what's new) When updating Comodo.Repair VTroot running outside the sandbox.

 

[Deleted member 2913]

I read it in the last update (log what's new) When updating Comodo.Repair VTroot running outside the sandbox.

Release post in Comodo forum doesn't mention this?

 

[Davidov]

• 
  I think that's it Friend
  
  
  • 
    What’s new
    
  • New file group "File Archivers"
    • − Accessible in ASE -> File Rating -> File Groups
  • Updated Auto-Sandbox rule to sandbox
    • − "Run Virtual" files extracted from archives downloaded from Internet
    Fixed
    
  • Several critical bugs fixes. Here are a selected few:
    • − New Dragon 36.1.1.21 crashes if CIS installed
    • − Accidental crash of cmdAgent service
    • − Trusted executable file can be replaced with Unknown executable file
    • − VT_ROOT is not deleted during Sandbox Reset after launch some malware

 

[Deleted member 2913]

There is no fix mentioning "malware run from VT folder were not sandboxed".

And if I remember correctly in this test video, malware files were run from VT Temp folder & were not sandboxed so dont know its a bug too?