What is the Best AV with Sandbox Capability?

[dJim]

@cruelsister despite being efficient, comodo's sandbox is too limited for me, perfect for beginners, not much for tweakers, it lacks customizations.

but what customization u want for a tool to proteck it does what should do and the option are enougth to prevent

 

[Local Host]

that comment it´s like what half world is ataking kaspersky.. bcs they think that country is " dangerous " thats mean all products come from there are malicious..

The difference is there's been hard evidence against Q360, while none against Kaspersky.

But I really don't care, it's not me who's going to use Q360, that why I said nothing (the warning was already given anyway).

 

[Moonhorse]

But if av misses something and it gets throught to voodooshield/cf and is signed with some trusted vendor like ccleaner had symantec in their malware case? Doesnt that mean voodooshield scans those with 63 av engines and comodo with their own only?

On topic: got to see comodos auto sandbox today and its pretty awesome, always used cruels settings but now im running proactive mode to get those popups

 

[Deleted member 178]

but what customization u want for a tool to proteck it does what should do and the option are enougth to prevent

Maybe enough for you, not for me. I used Comodo for years, not for its sandbox but for its HIPS.

With sandboxie or ReHIPS, i can run 20 different sandboxes at a time, each with their own settings, access rights and privileges.
Comodo cannot do that, comodo's sandbox is a complementary feature, not the main one which was, is and always will be its HIPS.

 

[cruelsister]

U- I think everyone here will agree that you are in a different class when it comes to computer security and not a novice like me. But for the normal user, CF at my settings will keep a person safe without the typical Coin-Flip questions ("Do You Want To Allow This?") that the user may be presented with. Also, the current version of Comodo- at elevated Containment settings- is almost indistinguishable from an advanced AV (it will stop the malicious cascade and also delete the vector!).

comodo's sandbox is a complementary feature, not the main one which was, is and always will be its HIPS

Oh God- Umbra- you know I love you but here I think to are totally incorrect. With the sandbox active all the HIPS MAY do is to react to what is running in VTRoot. There was a time when the HIPS would add something to Containment, but that time has long since past (and never got my emerald bracelet from M for pointing this out.).

Meghan

 

[Deleted member 178]

U- I think everyone here will agree that you are in a different class when it comes to computer security and not a novice like me. But for the normal user, CF at my settings will keep a person safe without the typical Coin-Flip questions ("Do You Want To Allow This?") that the user may be presented with.

i agree

Oh God- Umbra- you know I love you but here I think to are totally incorrect. With the sandbox active all the HIPS MAY do is to react to what is running in VTRoot. There was a time when the HIPS would add something to Containment

Because for me Comodo 's HIPS on Paranoid Mode is the only right mode, anything below that is like you said, useless; the sandbox would do equivalent or better job.

 

[cruelsister]

Paranoid Mode is indeed the Cat's Meow in terms of protection. However this Mode assumes that the User will know how to correctly answer the multitude of Alerts that will present when opening up even the most innocuous of applications.

Cruelsister Rule #8- A Security Modality that alerts to Everything actually Alerts to Nothing.

 

[Deleted member 178]

Cruelsister Rule #8- A Security Modality that alerts to Everything actually Alerts to Nothing.

Umbra rule #1 - There is no such things as default settings.

 

[Ink]

Avast's manual Sandbox in Internet Security doesn't work - avoid it.

 

[Eddie Morra]

Dont be biased.

Qihoo engineers though... they are on another level of smart, and I mean that in only a good way. The owners of Qihoo who are involved with the engineering are the extreme of the extreme.

Anyone who has seen the contribution Qihoo has provided to the community in terms of vulnerability research and exploitation to help software like Google Chrome and general sandboxing/VM software mature in security would know this and wouldn't need to give it a second thought.

I don't agree with Chinese laws and do not like how they operate in regards to things like censorship, so I'll never be able to stomach using Chinese software. However, that doesn't mean everyone else should be paranoid about it. If you like China and agree with how things are working, then Qihoo is totally sufficient and has a huge lot to offer you in regards to securing your environment.

 

[jackuars]

The difference is there's been hard evidence against Q360, while none against Kaspersky.

But I really don't care, it's not me who's going to use Q360, that why I said nothing (the warning was already given anyway).

If I was paranoid, I'd rather not trust companies/software's from the US (Microsoft, Google) than those from China.

Gladly, am not

Getting back on-topic, Qihoo had a decent sandbox during the time I used it in the past. Comodo would be a better choice.

 

[DeepWeb]

If you do biweekly backups and enable File History, your entire computer is the sandbox and you don't have to worry what your AV can or can't do as long as it doesn't corrupt your backups.

 

[Eddie Morra]

If you do biweekly backups and enable File History, your entire computer is the sandbox and you don't have to worry what your AV can or can't do as long as it doesn't corrupt your backups.

I'd recommend storing the backups externally so they cannot be touched by anything if your environment becomes compromised.

 

[LDogg]

In terms of AV only: Qihoo 360.
In terms of Sandbox capabilities: CFW Container or Sandboxie.

~LDogg

 

[509322]

My question is if I wanted to test a software, and avoid the possibility of installing other softwares bundled with the software's installer, or even malware, what AV would you recommend with a Sandbox that works well?

I am aware of Sandboxie, and ShadowDefender but rather than use separate softwares, I would like to use an AV that has a Sandbox built-in that works well. Of course there is CFW with cruelsister's settings but other than this software, what else would you recommend?

Why is bundled software even an issue ? What is the rationale here ? Doing high risk stuff ?

Even if you run unknown stuff in a sandbox, what do you expect it to do for you ? Unless it is patently obvious that what ran in a virtual environment is unwanted, you're going to think it is safe, run it on your system, end up infected, and then blame it on the soft(s).

Not to mention there are softs that can detect virtual environments and will remain dormant until executed on the real system.

 

[Cortex]

Idiot Question of The Day:

Not really to do with Sandboxing, more to do with Comodo. OK, I've used Comodo firewall in the past but never any of the AV bits. I've given Comodo AV a try on a laptop (my wife's actually) and it is snappier than with Kaspersky that was on. My questions are: Do I need the 'Internet Security Essentials' & 'Internet Security Premium' at the same time, as they are separate programs?- I've also installed the firewall. Will this combination give decent protection on it's own? As compared to Kaspersky etc? I'm giving it a try as I help a few people I work with to keep their PC's going & I wonder if the above will give decent protection to these people?? Thanks ... Paul

 

[Deleted Member 3a5v73x]

Is this thread serious? You really ask for problems by using Comodo products, sooner or later you will encounter some annoyance wich you will not be willing to understand nor sort it out. Comodo is for experienced computer users, it's decieving by how easy it may look and just copy cs settings. Practise safe computing habits and make backups, rather than chasing clouds.

 

[Eddie Morra]

Comodo is for experienced computer users

In my opinion, everything which is developed in-house at COMODO and isn't developed by external parties is ridiculed with bugs. If there's one thing I know... the NSA must absolutely adore COMODO.

If COMODO works great for someone then nice, but I rarely see it happen.

 

[Deleted Member 3a5v73x]

the NSA must absolutely adore COMODO.

As well as many in MT. After a while their eyes open whats up with Comodo, even if it's been discussed thousand times before and warnings said what may go wrong. Each one have to go through hard learning and their own experience with it. I just love reading how people switch to CF and then drop it like a hot potato. Sandboxing doesn't solve possible malware infection problem, you will eventually allow something outside of it, because that's what you do when you install new soft and if one doesn't make sure it's legit and fine with other tools, you're done.

 

[Cortex]

Is this thread serious? You really ask for problems by using Comodo products, sooner or later you will encounter some annoyance wich you will not be willing to understand nor sort it out. Comodo is for experienced computer users, it's decieving by how easy it may look and just copy cs settings. Practise safe computing habits and make backups, rather than chasing clouds.

Can I ask is this a reply to me?