question about sandbox and virtual desktop

Comodo Internet Security - CIS Defense+ / Sandbox Help - CIS
#1

I have a question about the sandbox and virtual desktop

  1. Why is it that unless I put the sandbox in Partially limited mode, I cannot submit a file or installer to be looked at by Comodo? I feel as if we should be allowed to submit files no matter what level we have the sandbox in because that way, we can keep our security and Comodo can still look at the file that we submit.

  2. What is the difference if I decide to run a program in the sandbox as compared to the virtual desktop? Do the programs that run in the virtual desktop only offer the same protection as if you were running them in the normal sandbox or does virtual desktop add more security?

#2

Hi Rman87.

  1. The fact that COMODO has a problem with sending files, this will be fixed in the next beta. As to the question, maybe you can not send the file, because the process is running.
    Submitting files to the white list: Submit Applications Here To Be Whitelisted - 2014
    Submitting files to the black list: Submit Malware Here To Be Blacklisted - 2014 (NO LIVE MALWARE!)
    Or send me a PM with malware or a trusted file, then it will be quicker checked.

  2. Virtual desktop is safer, just a virtual system.

Regards,
zbc

#3

Thank you for answering my question. I have another one about the virtual desktop that I remembered.

If Virtual desktop is safer and supposedly doesn’t run off of the trust level of the sandbox, then why do we need both of them? I know that a lot of people may not go into the virtual desktop; however, it doesn’t seem to make a lot of sense.

#4

To add to zbc’s explanation. When running a program sandboxed from Explorer or from the widget it will be run virtualised and that is as safe as running in Virtual Desktop.

Programs that get run by the automatic sandbox/ Behaviour Blocker will be run with Partially Limited limitations. Unless of course you changed the settings of the Behaviour Blocker to another limitation.

#5

Exactly Eric
Use virtual desktop for dangerous files.