App Review Can the HitMan squish a Worm?

[Andy Ful]

Andy- Although I understand your point I will never do such a test for a variety of reasons:
...
2). You will also note that I only run malware from my desktop. The reason for this is that it is the "lowest common denominator" is used; as a Web threat must still react locally on your system, and running stuff from the Desktop will also include things like a malware threat from a USB as well as an saved email attachment. So concentrating on something like Web Threats alone would be like testing something that will only work on Wednesdays. I never will do a "Wednesday Rules" video. never, ever.

3). Finally I feel that the computer should be used for High and Noble things (for a Woman to seek out and absorb recent topics in the Arts and Sciences; for the Male to watch Porn and play Video games). Wouldn't it be easier and more efficient to use something like CF or Umbra's love, AppGuard, and not worry about arcane Windows settings that most cannot understand, no less implement?

But I thank you for your comment- it speaks highly of your computer knowledge. But I just don't think the Game would be worth the Candle for the majority of computer users.
...
M

Thanks for respond.
If you change your mind (in the future), I should clear some misunderstandings.
The setup based on SRP I mentioned in my post, covers all threats in the point 2, in your post. Forced SmartScreen does not mean that you are obliged to use the samples from the Internet (if you use Run As SmartScreen). Using Forced SmartScreen has also the advantage, that you may install (MSI) programs without turning off default deny SRP. Additionally, all new installations are covered by SmartScreen.
Please, do not be cruel to me, but I do not think that CF or AppGuard are easier than the setup based on SRP, configured by Hard_Configurator or any other software with GUI.
Of course AppGuard is most efficient, but it is not free, and it is not directed to home users.
CF is a great program, but if you change the autosandbox settings to block untrusted, turn off HIPS, and change Comodo File Lookup to Forced SmartScreen, then you obtain something functionally very similar to the setup based on SRP.
I think that CF is more efficient in targeted attacks, and it is more grown up as a security application. It has great firewall, too. I use CF with your settings on one of my computers.
Using third party security software in Windows 10 has some flaws. Many security programs had problems after Windows Updates, so you never will be certain that CF will work as usual, and will not crush your system.
Anyway, that is my point of view. Thanks for your videos and (always) kind, informative posts.

 

[Duotone]

@cruelsister
Nice video...out of curiosity would the "ILOVEYOU" worm still be effective if it was tweaked a little for this current age?!

True, worm are still prevalent here (Philippines). Never had any experience with ransomware except from MT's malware packs.

LOL true...