- Apr 13, 2013
- 3,143
How Comodo Sandbox at different levels will handle the Gruel worm. I'm using the C variant, which is my personal favorite!
Comodo Sandbox vs a Gruel Worm
- Thread starter cruelsister
- Start date
It is advised to take all reviews with a grain of salt. In extreme cases some reviews use dramatization for entertainment purposes.
Nice review cruelsister! I am running the default profile "not proactive" but with autosandbox settings, run virtually "from any to any" and set restricition level to "untrusted" with HIPS disabled and custom firewall. It just works as shown and stated in the video, had only one legit application unrecognized stopped from being able to run, which with a simple trip to file rating/file list/file rating by user, and ticking unrecognized only, found the file, moved it to trusted on was on with my day. So for anyone that believes setting autosandbox to untrusted equals it will bash all your legit applications, you should give it a try, quite simple to train, and very effective security.
- Sep 26, 2014
- 2,973
I really love Comodo even i don't use it now,it's a great security software
Nice review @cruelsister
Nice review @cruelsister
Salutations/Greetings!
Can Comodo Firewall stop the New TeslaCrypt Ransomware? Or CyrptoPrevent?
New TeslaCrypt Ransomware Version Released, Infections on the Rise
Detection rate is very low!
Antivirus scan for d8d14223267f5378f65bed1d5a0aa914a001c4d0aaebb7ff3b92a11e2ec3c7d5 at 2015-12-09 13:15:57 UTC - VirusTotal
Kind regards,
Can Comodo Firewall stop the New TeslaCrypt Ransomware? Or CyrptoPrevent?
New TeslaCrypt Ransomware Version Released, Infections on the Rise
Detection rate is very low!
Antivirus scan for d8d14223267f5378f65bed1d5a0aa914a001c4d0aaebb7ff3b92a11e2ec3c7d5 at 2015-12-09 13:15:57 UTC - VirusTotal
Kind regards,
- Apr 13, 2013
- 3,143
Moose- Both the Comodo Sandbox and CryptoPrevent protect against this Tesla strain. It encrypts by a tried and true method, and unlike mine only works via this single pathway.
The interesting thing about these new types is that in addition to the file encryption it also throws off a startup entry will in addition to encrypting anything new will also prevent such things as Task Manager and MSCONFIG from operating. Personally I don't see what the point is in doing this, as the purpose of the malware is already accomplished.
I guess this is just one way of determining if the Blackhat is a newbie; Pro's wouldn't bother with such nonsense. It's bad enough that they are thieves- there isn't any reason to also be obnoxious.
The interesting thing about these new types is that in addition to the file encryption it also throws off a startup entry will in addition to encrypting anything new will also prevent such things as Task Manager and MSCONFIG from operating. Personally I don't see what the point is in doing this, as the purpose of the malware is already accomplished.
I guess this is just one way of determining if the Blackhat is a newbie; Pro's wouldn't bother with such nonsense. It's bad enough that they are thieves- there isn't any reason to also be obnoxious.
Last edited:
- Sep 22, 2014
- 1,767
Similar threads
