Endejan's configuration

Dejan

New Member
Thread author
Mar 3, 2011
559
Other tools: VirusTotal Uploader, HiJackThis and DDS (I don't really use the last two, but I need them for training)
 

Jack

Administrator
Verified
Staff Member
Well-known
Jan 24, 2011
9,378
Solid configuration...
If you want to experiment a little you can add to your security config BufferZone Pro ,very good program...
And to your on-demand scanners : Hitman Pro
 

Dejan

New Member
Thread author
Mar 3, 2011
559
Jack said:
Solid configuration...
If you want to experiment a little you can add to your security config BufferZone Pro ,very good program...
And to your on-demand scanners : Hitman Pro

I might try out BufferZone, sounds interesting. As for Hitman Pro, I'm not sure, since I tried it out before and I wasn't feeling it. Thanks for the suggestion :D
 

bogdan

Level 1
Jan 7, 2011
1,362
Well, you can use HitmanPro - the free version - as an on-demand scanner...probably the last one when you scan your pc. It will scan and show you infected files for as long as you wish, but if you want to remove any of them you'll enter a trial period of 30 days.

As for bufferzone... It might be too much and I don't know if it conflicts or not with the current setup. If you don't trust Comodo's sandbox (the one with virtualization (Defense+ -> Run a program in the sandbox) you could try sandboxie to isolate programs that are not digitally signed and see how they behave.
 

Dejan

New Member
Thread author
Mar 3, 2011
559
bogdan said:
Well, you can use HitmanPro - the free version - as an on-demand scanner...probably the last one when you scan your pc. It will scan and show you infected files for as long as you wish, but if you want to remove any of them you'll enter a trial period of 30 days.

As for bufferzone... It might be too much and I don't know if it conflicts or not with the current setup. If you don't trust Comodo's sandbox (the one with virtualization (Defense+ -> Run a program in the sandbox) you could try sandboxie to isolate programs that are not digitally signed and see how they behave.

I do like Comodo's sandbox, it's automatic and works nicely, I still want to try BufferZone, so maybe I'll disable the sandbox to prevent conflicts. I use Sandboxie usually for testing malware samples, since it's very minimalistic and fast, I don't really prefer it for regular use.
 

Jack

Administrator
Verified
Staff Member
Well-known
Jan 24, 2011
9,378
Comodo Sandbox isn't really a sandbox(virtual environment)....it just runs the application with limited rights,so I don't think you'll have any problems with BufferZone.
 

bunyip783

Level 1
Mar 1, 2011
132
Jack's correct, the Comodo sandbox is much different to Sandboxie, for example. I also don't think Bufferzone would be needed, and would bloat your computer with unnecessary software. Your set up is quite nice. If anything, just change the settings of a few programs to be more aggressive if you're still concerned with the safety of your machine.
 

Dejan

New Member
Thread author
Mar 3, 2011
559
bunyip783 said:
Jack's correct, the Comodo sandbox is much different to Sandboxie, for example. I also don't think Bufferzone would be needed, and would bloat your computer with unnecessary software. Your set up is quite nice. If anything, just change the settings of a few programs to be more aggressive if you're still concerned with the safety of your machine.

I'll install BufferZone anyway, just because I might need it later.
I don't think it will add bloat to my computer, we'll see.

Update: Installed, looks good. I didn't notice any bloat, other then Firefox being kind of unstable at first, it should improve later.
 

HeffeD

Level 1
Feb 28, 2011
1,690
Jack said:
Comodo Sandbox isn't really a sandbox(virtual environment)....it just runs the application with limited rights,so I don't think you'll have any problems with BufferZone.

Well, it depends on which sandbox you're talking about. I wish Comodo made more of an effort to explain the differences between the auto and manual sandboxes.

The automatic sandbox does indeed operate by restricting an applications rights on your system. (Similar to the way Chrome sandboxes processes)

However, the manual sandbox is virtualised. Much like Sandboxie, applications run in the manual sandbox are stored in an isolated folder. (Vritualroot) Unlike Sandboxie though, the manual sandbox doesn't have any easy way at the moment to delete the sandbox contents, or move items out of the sandbox.
 

Watasha

New Member
Feb 8, 2011
226
HeffeD said:
Jack said:
Comodo Sandbox isn't really a sandbox(virtual environment)....it just runs the application with limited rights,so I don't think you'll have any problems with BufferZone.

Well, it depends on which sandbox you're talking about. I wish Comodo made more of an effort to explain the differences between the auto and manual sandboxes.

Comodo would do well to make more of an effort to explain quite a few things. :rolleyes:
 

Dejan

New Member
Thread author
Mar 3, 2011
559
RE: Endejan's configuration [changed]

Right, here it is, tell me what you think of it, because it might be a bit overdone :p

General computer knowledge: Advanced
Level of security risk: Low
Operating system: Windows 7 Professional
OS architecture: 32 bit
Non-admin account: No
Real-time protection: Avast! Free 6, Comodo Firewall (latest version)
On-demand scanners: Malwarebytes' Anti-Malware, Norton Power Eraser, Hitman Pro
Browser(s): Firefox 4 and Chrome with Adblock Plus, WOT and LastPass
Secure DNS: ClearCloud
Other tools: CCleaner, Speccy and Avira UnErase
 

bogdan

Level 1
Jan 7, 2011
1,362
RE: Endejan's configuration (updated)

it might be a bit overdone
I don't think so. For the first week, you might get some pop-ups from COMODO if software you use is not on their whitelist. What profile/settings you use in COMODO Firewall? Check this thread about avast sandbox vs. COMODO auto-sandbox.
 

Tweak

New Member
Jan 8, 2011
274
RE: Endejan's configuration (updated)

EMET for system hardening could be added but overall since you stated you are an Advanced user I would say you are well enough, as with any config much of it is up to personal preference though as there are many very good options depending on who is using the applications.
 

jamescv7

Level 85
Verified
Honorary Member
Mar 15, 2011
13,070
RE: Endejan's configuration (updated)

Good config, Norton Power Eraser can be reserved in case of highly infection there.
 

Dejan

New Member
Thread author
Mar 3, 2011
559
Updated, I think this is pretty strong, what about you guys?

General computer knowledge: Advanced
Level of security risk: Low
Operating system: Windows 7 Professional
OS architecture: 32 bit
Non-admin account: No
Real-time protection: Malwarebytes' Pro, DefenseWall Firewall
On-demand scanners: Norton Power Eraser
Diagnostic tools: HiJackThis and OTL
Browser(s): Firefox 4 and Chrome with Adblock Plus, WOT and LastPass
DNS: OpenDNS (not yet set up, I'll do it later)
Other tools: CCleaner, Speccy
 

jamescv7

Level 85
Verified
Honorary Member
Mar 15, 2011
13,070
Malwarebtyes PRO was prove to have a nice realtime detection. NPE is also good its better to reserved it in case of heavy infections occurred.
 

Jack

Administrator
Verified
Staff Member
Well-known
Jan 24, 2011
9,378
Solid real-time protection (congratulations for the DW license :p ).Are you using the 14days trail for MBAM or did you bougth a license?.....
However like James said NPE should be used only when dealing with a heavy infection.....try Hitman Pro as an on-demand scanner.I'm also using Emsisoft Emergency Kit if you want to give it a try.
Also please note that Open DNS is not really a SecureDNS ...while it may block some malicious domains it's primary focus is on blocking certaine content. (eg: Drugs,Porn, etc..)
 

Dejan

New Member
Thread author
Mar 3, 2011
559
Jack said:
Solid real-time protection (congratulations for the DW license :p ).Are you using the 14days trail for MBAM or did you bougth a license?.....
However like James said NPE should be used only when dealing with a heavy infection.....try Hitman Pro as an on-demand scanner.I'm also using Emsisoft Emergency Kit if you want to give it a try.
Also please note that Open DNS is not really a SecureDNS ...while it may block some malicious domains it's primary focus is on blocking certaine content. (eg: Drugs,Porn, etc..)

Yeah, I am using the 14-days trail. I know that NPE has aggressive heuristics and I don't use it very much or at all (until I do find a serious infection like you said). Hitman Pro, I might try it but it's still a 30-day trail tool, so I won't be keeping it, I might try the Emsisoft tool, thanks for suggestion! Finally, I just copied and pasted the template from my last reply and forgot to change the "Secure DNS" :p But I'll change it just for you! :p
 

Jack

Administrator
Verified
Staff Member
Well-known
Jan 24, 2011
9,378
endejan said:
Hitman Pro, I might try it but it's still a 30-day trail tool, so I won't be keeping it,
Hitman Pro offers you a Free Scan for a second opinion. If nothing is found during the scan, then you will never need a license. When a virus is found and you want to remove it with HMP, then you will receive a free 30-day license to remove the threat :D
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top