App Review Windows 8 Dev with Comodo Firewall 5.8 RC

[Ink]

Note: Tested in VirtualBox, though it is not recommended for some reason, so results are not 100% accurate for Comodo software.

Windows 8 Dev Preview 32-bit
Windows Defender: Enabled and Updated
Windows SmartScreen: Enabled
Internet Explorer 10 with SmartScreen Filter: Disabled



Run time: 8 minutes, 25 seconds @ 640x480

Thanks for taking your time to watch the video.

---

3rd November 2011

Sorry - video is no longer available. I was cleaning up my SkyDrive and I accidentally deleted the video.

Edit: Found a copy on my hard drive, uploaded to YouTube.com/MalwareTips

---

Screenshots from 29th September 2011


These are some of the features I found interesting in Windows 8 Dev. and Comodo Firewall 5.8 RC.

1. I disabled the SmartScreen Filter in IE10

2. Even though disabled, known virus' are deleted in IE10

3. Even though Defense+ Alert recommended to Block, I was able to Allow

4. Failure to remove, I didn't check up on this, but Windows Defender could have removed this before Comodo could touch the file (?)

5. Could this be Windows SmartScreen blocking the malicious file to run, and has been resolved by Windows Defender (?)

 

[win7holic]

that's cool storm.
thanks for video.
+rep

 

[Hungry Man]

I am surprised it worked at all. Sandboxie did not. Doesn't CIS use kernel-hooks?

 

[jamescv7]

Seems interesting that cloud scanner and defense + both pop up however cloud scanner couldn't removed the threat.

 

[win7holic]

probably windows defender on windows 8 will be more better ?
corret if i'm wrong.

 

[Ink]

Windows Defender in Windows 8 is essentially Microsoft Security Essentials, so it is a vast improvement.

 

[Deleted member 178]

Defense+ always gives you the choice to alow or block the file detected as malicious.

I am surprised it worked at all. Sandboxie did not. Doesn't CIS use kernel-hooks?

i think it use some.

 

[Ink]

Defense+ always gives you the choice to alow or block the file detected as malicious.

So if it is a known malicious file, why does D+ display "You MUST block this request". I clicked Allow, because it was an available option (and not because I didn't read the pop-up).

Doesn't this defeat the purpose of the cloud scanner in Comodo Firewall?

 

[Deleted member 178]

it is an advice, so if you know that the flagged file is safe for you, of course you should have the choice.