AV-Comparatives 2011 dynamic tests

Yes and sometimes due to lower version of engines incorporated.

 

Deepguard is HIPS and Sandbox. Comodo has both. I read online that AV-C only tested the AV of a program, not Sandboxes etc. Maybe BB (behavior blocker). But sandbox no.. ??

 

Did you try the newest version? It's sandbox just pops up, to inform you that it has been sandbox... Defense+ is just for if the Sandbox would fail. So you still have protection if the sandbox is dead

 

Pop-ups for questions

 

If you set-up a HIPS correct you shouldn't even get pop-ups as the program already have the rules for what is must do.

 

Maybe a BB (behavior Blocker) that Bitdefender have and others doesn't

 

The program is just installed and run at default settings. Automatic HIPSes/Sandboxes will be left enabled, but manually used sandboxes won't be used.

 

its certainly not a sandbox.

 

Detection is not necessarily the same than protection
G DATA have more detection, but such vendor need faster reaction when searching for malicious web pages

 

where did you find that?
So auto-sandbox in avast is disabled?

 

From my experience avast! has a 99% accuracy on suspicious stuff. Only thing where Sandbox is still having some problems are games on Steam (mostly flash based). I haven't seen it sandbox anything clean apart from Steam stuff. When i was testing with malware, pretty much every single thing that was malicious was also sandboxed. Impressive. But if they don't consider that as protection, then i don't know what it is...

 

DeepGuard is a behavioral blocker that uses a collection of technologies to protect computers against zero hour attacks. DeepGuard does use sandboxing to analyze malware.

Source: http://www.f-secure.com/en_US/support/knowledgebase/article-details.html?id=2034

 

Last time avast was trying to sandbox DefenseWall, a known program
so the chances of getting FP is even higher with sandboxes or HIPS

 

No it's not a HIPS or a Sandbox where did you read that?

From F-secure.com.....

 

But even though it's sandboxed, it's no biggie in most of the cases. In the worst case scenario you have to add it to exclusion and reboot because something failed to initialize in the sandboxed program.

 

if you are a developer then you will know false positives on each application you create are so annoying, and you will have to disable sandboxing or uninstall the AV
AV TESTERS should take note on this for improving of the Dynamic testing methodology

 

AutoSandbox flagged the Portable Apps launcher for me. No big thing.

 

I agree. I've always thought people greatly over-exaggerated this. After a week or two in training/learning mode it's set a rule for just about everything you'll ever use on your computer. I run Comodo FW+HIPS with the HIPS in "Safe Mode" and I never see popups anymore. The only people that will get popups with any amount of frequency after the first couple weeks are people using "Paranoid Mode", and they get them by choice.

Years ago I remember when Comodo didn't always remember the rules even though you check the box to, and that got irritating. But that was fixed long ago.

 

thanks for the link

avast has 2.6% user dependent and 1.9 compromised

what's the meaning about 2.6% user dependent

thanks

 

Probably a prompt from the automatic sandbox asking for permission to sandbox a potentially unsafe application.

 

Or behaviour shield for blocking suspicious activity.

 

Bitdefender has lots of different modules not only the engine

 

Look at Formula 1. Sauber use a BMW engine so does Williams but the one car performs better than the othersame engine but different designs around it

 

default action is auto-decision

 

yes right
i really can't understand