Any Suggestions???

[Ivan12345]

I don’t know ??? but Comodo Firewall does the trick :love:

[Seany007]

@Chiron post:45

Can you please direct me to an example where there was an exploit which was able to bypass Defense+ and infect the system?

I would have thought Defense+ would have at least blocked/sandboxed any malicious payload.

CIS 5.9 bypassed by Java_rhino exploit:

- YouTube

Yes we can argue about this one but you can find 100 more just search for them.

[Chiron494]

@Seany007 post:47

CIS 5.9 bypassed by Java_rhino exploit:

- YouTube

Yes we can argue about this one but you can find 100 more just search for them.

Can someone please find one which bypasses V6 beta with the sandbox set to limited?

[spainach_12]

Kaspersky Pure 2.0+CIS (Firewall only)

If it were me, I'd turn off Kaspersky Pure. I just don't trust antiviruses anymore. One bad sig or bug destroys many. I don't trust other people the safety of my most valued data.

MBAM(free) Kaspersky TDSS Killer NPE

Hitman Pro over TDSS killer and Emsisoft Emergency Kit for monthly. HijackThis! is also a good addition.

BitDefender USB Immunizer

Its function you can do yourself, but what the heck. Much faster I suppose. USB Guardian might be worth taking a look at.

Comodo ID and CD

Browsers, well, they're a personal preference. Palemoon and SRWare Iron are good alternatives. I suggest a download manager. By using a download manager, it gives you the benefit of (1) preventing drive-by downloads, and (2) managing your downloads and keeping check of all downloads made. It's one way of keeping track on things brought in your system. You can think of the speed boost as an added benefit.

Comodo DNS

Security is debatable. Therefore, speed would be my basis. OpenDNS and Google DNS (although I doubt people trust Google) is much faster.

CCS

Comodo Cloud Scanner? Unnecessary, I think.

WinPatrol

You can configure D+ to do this. It's rather redundant. If you want, you can go for Threatfire/SpyShelter/The All-Seeing Eye

WOT

Unreliable I think. DNS service should do you good. If it were me, WOT and services of the like is similar to judging someone based on gossip. I prefer experiencing first-hand.

nprotect game guard

Again, personal preference. Wondershare TimeFreeze might be worth taking a look at. (Version 2 was released for free. They sent out licenses.)

SpywareBlaster

D+. But if you'd like back-up still, Spybot's a good alternative.

Comodo Unite+CIS(full) at work.

Not sure how Unite plays a role here, but this is good enough.

If it were up to me, the build in my system (don’t look at my sig. That’s my younger brother’s computer system) is rather simple.
Threatfire (I’ll be replacing it when I find a suitable replacement), Comodo Firewall D+ disabled, Emsisoft Emergency Kit, Emsisoft Anti-Malware Free, Process Lasso, Process Hacker, Process Monitor, IDM, Wondershare Time Freeze 2.0, KeyScrambler, NTFS File permissions, OpenDNS, Sandboxie+BSA, a registry cleaner, then finally, dualboot with Linux equipped with VMWare.

While it seems overkill, it’s actually easier to manage than most with less impact on resources. TF’s light enough on it’s own, and heavy only on the first month (provided consistent and frequent use as well as proper configuration). DNS and Firewall’s self-explanatory I suppose. The Emergency Kit is more for generating logs than anything else. Emsisoft Anti-Malware Free’s on-demand and has a good detection rate. IDM’s for managing all downloads and Time Freeze is for testing apps (I don’t like rebooting just to switch OS).Makes it easier to see and it reports to me almost all downloads to be made and were made. Process Lasso handles rogue memory usage rather well. The rest are really the key to the system security.

Research all possible malicious behavior and keep a list. This is done inside VMWare running in linux. The VM has sandboxie installed. Coupled with BSA, I analyzed samples of malware and recorded they’re behavior, listed them and then plugged them in Threatfire. Then launched again outside the sandbox (because there are some malware that reacts differently in sandboxes) and then with Process Monitor (realtime monitoring), regshot (faster registry comparison) and MS System State Analyzer (file comparison mostly), I check all changes made. Process Hacker’s for those too stubborn to kill conventionally. A few restarts to double-check the changes. Log then plug them in TF. TF doesn’t cover everything so NTFS File permissions come in handy. By making proper configurations, I can limit damages of possible infections. If there is an infection detected, cleaning is rather easy. Scan and quarantine. If it won’t let itself be found conventionally, rename, reboot, delete. If that won’t cover it, boot into linux and start fixing there, but with common sense, hardly ever happens. Just once when the malware infected my exes (Sality). An encyclopedia of MS helped me work through it.

A little stressful on the first week, but it gets better until I eventually forgot about it. Now I’m only using linux (for over a year and a half now) so I’m not really worrying much about windows viruses.

Here are some useful links:

bh-dc-07-Kendall_McMillan-WP.pdf

http://www.techsupportalert.com/content/how-keep-track-changes-your-pc-free-microsoft-tool.htm

http://www.microsoft.com/security/portal/Threat/Encyclopedia/Browse.aspx

http://www.threatexpert.com/

https://forums.comodo.com/empty-t78784.0.html

https://forums.comodo.com/general-security-questions-and-comments/list-of-windows-services-and-what-ports-they-require-to-run-t11776.0.html

https://forums.comodo.com/general-security-questions-and-comments/how-to-tell-if-a-website-is-dangerous-t80596.0.html

http://www.alternativeto.net

[Ivan12345]

I was actually just thinking about beta testing CIS and Other stuff where do you get your malware samples at??

[andrei1997]

@Ivan12345 post:11

I hate all Norton Products lol but I look at it >:-D I will also look into EMET…I have Used Emsisoft HijackFree and BlitzBlank…but what makes them so awesome ??? I am think about using truecrypt but I didnt give it much thought…I use Kaspersky Encrption every once and a blue moon…and no I don’t do any online banking but my dad does ??? what do you have in mind ???

Norton is good. Not the same norton as years back. I like comodo a lt more than norton though.

[Seany007]

@Chiron post:48

Can someone please find one which bypasses V6 beta with the sandbox set to limited?

I don’t do tests myself. But I can ask my mate who specializing in it. I will let you know.

[Seany007]

Few points:

Spainach_12:

“If it were me, I’d turn off Kaspersky Pure. I just don’t trust antiviruses anymore. One bad sig or bug destroys many. I don’t trust other people the safety of my most valued data.”

He won’t do that LOL! It will be a long time before I just let Def+ running without any AV. False positives I get it they can be as dangerous as malware itself at times. But just use AV’s which have no or rare FP like MSE, ESET. Well I don’t even trust Microsoft and the system I use LOL! Still I use it.

“Security is debatable. Therefore, speed would be my basis. OpenDNS and Google DNS (although I doubt people trust Google) is much faster.”

I have to disagree. OpenDNS is the best for antiphising protection while NortonDNS is the best for malware protection see tests on it. Yes Google is a dodgy one.

[Ivan12345]

@andrei1997 post:51

Norton is good. Not the same norton as years back. I like comodo a lt more than norton though.

I hate norton! >:-D

[Ivan12345]

@Seany007 post:53

Few points:

Spainach_12:

He won’t do that LOL! It will be a long time before I just let Def+ running without any AV. False positives I get it they can be as dangerous as malware itself at times. But just use AV’s which have no or rare FP like MSE, ESET. Well I don’t even trust Microsoft and the system I use LOL! Still I use it.

“Security is debatable. Therefore, speed would be my basis. OpenDNS and Google DNS (although I doubt people trust Google) is much faster.”

And I actually stopped using Comodo DNS and just using default now…
Ill be up dating my list very soon

If you want a AV that has few fps…then use ESET(4 Fps) Kaspersky(5 fps) Trend Micro (7 Fps)
http://www.av-comparatives.org/comparativesreviews/false-alarm-tests

[Ivan12345]

Hitman Pro over TDSS killer and Emsisoft Emergency Kit for monthly. HijackThis! is also a good addition.

I am not will to pay for Hitman Pro....What makes HijackThis! so special?

[Ivan12345]

Feel Free to go and Vote in my other polls (Firewall???,Antivirus???, and Iphone over Android) thanks so much

[Solarlynx]

@Ivan12345 post:57

Feel Free to go and Vote in my other polls (Firewall???,Antivirus???, and Iphone over Android) thanks so much

It would be a good idea if you make a link to the thread.

[Ivan12345]

OK here are links to the other polls
https://forums.comodo.com/general-discussion-off-topic-anything-and-everything/iphone-or-android-t87932.0.htmlIphone or Android?

https://forums.comodo.com/other-security-products/antivirus-t87926.0.htmlAntivirus?

https://forums.comodo.com/other-security-products/firewalls-t87925.0.htmlFirewalls?

Thanks for voting! (CNY)

[Ivan12345]

Anything else you guys can think off? and I use nprotect for my games but is there better software out there??? Just leave me your thought please

[spainach_12]

@Ivan12345 post:56

I am not will to pay for Hitman Pro…What makes HijackThis! so special?

You don’t have to pay for it. Paying for it gives you removal, but that can be done manually. As for HiJackThis, in addition to the logs it can generate, it also provides tools for manually removing malware.

@Seany007 post:53

“Security is debatable. Therefore, speed would be my basis. OpenDNS and Google DNS (although I doubt people trust Google) is much faster.”

I have to disagree. OpenDNS is the best for antiphising protection while NortonDNS is the best for malware protection see tests on it. Yes Google is a dodgy one.

Well, I was explaining why I discourage multiple engine antiviruses, but anyway, it still answers the question concerning tests…

@spainach_12 post:94

https://forums.comodo.com/empty-t80797.0.html

Like naren and I have said, any number of engines will not secure the 2% difference. Allow me to elaborate on naren’s explication.

Technically, the 2% is a huge set of malware since each has a family of more than a dozen variants. Common sense would tell us that the use of two engines should increase your chances of getting an update for the 2%. But this is improbable both mathematically and realistically speaking. Detection of the 2% is actually based on the frequency of the release of signatures rather than the quality of the engine itself (see paper by GFI provided by Seany007). And these tests fail to consider that and the following:

1. Probability relies on finite measurable space. Therefore, real-time cannot be measured being infinite. Probability can tell you that the chances of picking a whole number between -7 to 7 is 8/14. But it cannot give any statistic for picking a real number except 1/∞ between the same range. If interpreted, the probability is indeterminate and imagined.

2. The tests were conducted at a given period of time. But the results were posted at the end of the tests. Given that the theory relies on the frequency of updates, the results are rendered invalid upon release unless none of the products tested released a signature update during the tests (unlikely since antiviruses release hourly updates).

3. If applying “Every little bit helps” principle, we must take a look at the complement of the event. Figuratively put in a weighing scale, the disadvantageous events outweigh the advantages (see above link).

On a side note, so what are these tests useful for?

1. Market share. These tests can provide data to establish a trend plotted on a diagram. From that scale, the user may extrapolate and choose a “reliable” company. (Of course, this, too, is imagined.)

2. Gauging removal efficiency. Depending on the context, this may involve the system parts or the malware traces themselves. In either case, the set is finite and measurable; therefore, efficiency can be estimated.

[Ivan12345]

Your good at overkill :o :THNK

And can someone please answer these questions

Anything else you guys can think off? and I use nprotect for my games but is there better software out there??? Just leave me your thought please

[Ivan12345]

!ot! And what about CDE does that just not work anymore or is it not supported or phase out I mean what ip with that ??? !ot!

[spainach_12]

@Ivan12345 post:62

Your good at overkill :o :THNK

And can someone please answer these questions

Anything else you guys can think off? and I use nprotect for my games but is there better software out there??? Just leave me your thought please

I don’t see why you need nprotect when it’s basically just an internet security suite that comes with a “game optimizer”.

[Ivan12345]

I only use the game part I don’t have the suite on…I do a little gaming is there any software that can help that???