Reply to thread

Message

<blockquote data-quote="Morphius" data-source="post: 711898" data-attributes="member: 749">Guys...haven&#039;t you noticed the file was blocked from the execution? So it didn&#039;t even run in the sandbox. So, what you see is not a normal &quot;app running in the sandbox&quot; behavior, hence legitimate applications running in the sandbox won&#039;t crash/won&#039;t start that often (as in the video).@cruelsister1 why is that? What is your sandbox config?Maybe it was classified as malicious in the cloud, and <a href="https://help.comodo.com/topic-72-1-766-9170-Auto-Containment-Rules.html" target="_blank">according to the first rule of automatic containment it was blocked?</a>BTW Comodo&#039;s Viruscope is getting better and better, I wouldn&#039;t say it has a detection of 2-3%.Comodo does that too. It coexists with the sandbox. The funny part is, when a traditional AV will fail to recognize malware you will end up with encrypted files or your data stolen.</blockquote>

[QUOTE="Morphius, post: 711898, member: 749"] Guys...haven't you noticed the file was blocked from the execution? So it didn't even run in the sandbox. So, what you see is not a normal "app running in the sandbox" behavior, hence legitimate applications running in the sandbox won't crash/won't start that often (as in the video). @cruelsister1 why is that? What is your sandbox config? Maybe it was classified as malicious in the cloud, and [URL='https://help.comodo.com/topic-72-1-766-9170-Auto-Containment-Rules.html']according to the first rule of automatic containment it was blocked?[/URL] BTW Comodo's Viruscope is getting better and better, I wouldn't say it has a detection of 2-3%. Comodo does that too. It coexists with the sandbox. The funny part is, when a traditional AV will fail to recognize malware you will end up with encrypted files or your data stolen. [/QUOTE]

Verification