AVAST will have free virtualization in its new 6.0 antivirus

Sorry but is based in whitelisting not in digital signatures, and inside whitelisting, digital signatures checked as safe by Comodo are added to the whitelist, also many software without digital signature is also in the whitelist.

What has to do CIMA with the sandbox? they work independently

Anyway, better come back to the topic, Avast v6

 

Comodo sandbox - Apart from whitelisting, it uses D+ Heuristics to determine whether a file is suspicious or not. If so, it sandboxes the offended file and same can be seen in Active Process List (Sandbox Only) as Suspicious under Verdict tab.

More Info - Comodo Sandbox help

Thanks,
Harsha

 

Still they work independently

A file in the whitelist does not go to the sandbox and is not send to CIMA
A file that is not in the whitelist goes to the sandbox, it's watched by D+, by the AV, by the FW, and it's send to CIMA and the Cloud AV.
That's all CIMA or D+ does not determine if a file goes to the sandbox or not.

Could you quote me where is written what you say, please? because I can't find it.

 

Avast has always been reliable.

 

true

Here is the quote from the link i mentioned in my previous post -

The thing which i said about Verdict tab is based on my testing malicious samples from MDL...Anywayz i've PMed one of the moderators at comodo forums to confirm the same about my previous post. I'll update it if needed.

Thanks,
Harsha

 

Yes my experience with Avast Free AV is quite positive. I don't see any conflicts with Comodo firewall and most important is the whole setup is very light.

Thanks,
Harsha

 

this:

Does not mean that a file it's send to the sandbox because of this behabiour.
It's send to the sandbox because it's unknown.
Do you have any trusted file that it's send to the sandbox because of the heuristics of D+?
Do you have any unknown file that it's not send to the sandbox?

D+ it's an HIPS as far as I know does not have an scanner to detect if a file can be dangerours before being executed to send it to the sandbox or not.

 

Ok. I now PMed egemen. Lets wait for his confirmation. I'll update the post once i hear from egemen. Please don't mind.

Nope

Nope

from Comodo's Help

Thanks,
Harsha

 

can someone explain what that means please- what does autosandbox mean and what does it actually do?

thanks
robin

 

http://lmgtfy.com/?q=auto sandboxing

 

thanks but no thanks, i could google myself too
i want someone in here to explain it better since most use it here. I understand what it is but i want to understand how to apply and use it and when to use it.
like an example please
robin

 

all the information that we have on it up to now has been posted in this thread, at least specifically about Avasts implementation of auto sandboxing.

 

I guess he wants to know what parameters does Avast! sandbox takes to consider if sandboxing or not an app?

 

no "She" wants to know how to use it in Avast and what the purpose of it is for

robin

 

From the link in the first post:

"AutoSandbox identifies and prompts users to run suspicious applications in a safe virtual environment.
Users have three options: execute the file within the virtual AutoSandbox, run it outside the sandbox,
or cancel running the application entirely. ―It‘s a win-win for users, if the item is dangerous it just shuts
down the virtual computer and the user‘s real machine remains safe. And, if the item is safe, there is
no hassle from a false positive,‖ adds Mr. Vlcek"


I can not explain it better or more eloquently than that.

 

Haha.. another "ask-the-user-what-to-do-because-the-pros-dont-have-clue". This is of little value to the average customer.

 

I hear ya. I hope they are able to do this better than some other programs have. Hopefully with their supposed 175 million user base, they will be better at whitelisting than some others.

I think one difference is, they will not assume something is malicious (and block it) just because they do not recognize it("default deny").

 

well ur never gunna find anything that knows all, good thing is tho it wont be for all programs, just the one that avast cant make a firm decision on itself and instead of avast doing nothing when it doesnt know, it will give u a second option for what to do, which id say is a good thing

 

From what I saw from the screenshot it indeeds gives the user the option, but it strongly recommends to run in sandbox, so the average customer would probably click that. Automatically run in sandbox without prompting the user could cause problems for the average user too, as some installers of less popular programs might be sandboxed, and can't be installed then.

 

So, seems that sandbox will require some basic knowledge at least, get ready consumers!

 

idk about knowledge, it might create some annoyance/panic to the user, but avast is already going to be telling them they think its suspicious and they dont know for sure what it is so it wuld be safest to simply click OK. popups for this i imagine would not be frequent either considering its basically like a last resort.

 

Does anyone know if Avast! 6's sandboxing should be disabled if you are using something like Defensewall or GeSWall? It seems like it would be redundant or cause conflicts.

 

it probly wont be necessary if ur running defensewall, but idk about a conflict because defensewall doesnt actually sandbox anything as far as i know, but ull never know for sure unless u attempt to run them together.

 

for average user, for us high risk users we need antivir though. Avast missed alot when i had it on.