AVAST and COMODO conflict

[Lisandro]

avast autosandbox could fight with Comodod Defense+ in my opinion.
When two security programs fight for a file, the less protected the user will be...

[Hermite15]

avast autosandbox could fight with Comodod Defense+ in my opinion.
When two security programs fight for a file, the less protected the user will be...

.... Avast auto-sandbox can conflict with Comodo auto-sandbox, this yes, but not with the rest of Def+.

 two things to disable absolutely when running Avast and Comodo:

1 the AV (no need to mention...)
2 CIS or Avast auto-sandbox

[Lisandro]

Why not Defense+? HIPS and autosandboxing won't be fighting for the file control?

[SpeedyPC]

Why not Defense+? HIPS and autosandboxing won't be fighting for the file control?

Just uninstall Comodo AV and turn off Comodo Sandbox and also the Comodo Cloud.

Comodo sandbox conflict with Avast Autosandbox.

Look at my sig I have no more problem so far

[Hermite15]

Why not Defense+? HIPS and autosandboxing won't be fighting for the file control?

  HIPS will just keep working with sandboxed files, what's the problem

[Shiw Liang]

As soon as you are using only one of them, then it might not be possible...

[iroc9555]

abcd......

Yes, get rid of Comodo AV. You can not run two AVs. Also, there are several posts in Comodo Forums from members running XP Spk3 who claim that CIS 5.3 had crashed their system, but not real answer from Comodo devs if they are investigating these cases. Others are doing OK like Speedy. My case, I am back to Cfw 3.14. I can not make CIS 5 to run well in my sys in Proactive Security. It runs OK in Firewall Security, but that set does not give you all the HIPS protection.

Exclude Comodo in Avast Behavioral Shield and File system shield. Also make it a trusted program for Avast Sandbox.

Avastsvc.exe should be set as " Installer/Updater " and avast.setup (this is hard to find) should be in your trusted files.

Good luck.

[Asyn]

Why not Defense+? HIPS and autosandboxing won't be fighting for the file control?

No.
Why should they..?

[Lisandro]

HIPS will just keep working with sandboxed files, what's the problem

Sandboxed files invoking HIPS outside of the sandbox?
Are the changes really being done? I mean, the sandboxed applications really try to change real files outside of the sandbox and trigger the HIPS?
How does it work?

[Hermite15]

HIPS will just keep working with sandboxed files, what's the problem

Sandboxed files invoking HIPS outside of the sandbox?
Are the changes really being done? I mean, the sandboxed applications really try to change real files outside of the sandbox and trigger the HIPS?
How does it work?

I must be dreaming ... sandbox files won't invoke anything, and the HIPS will monitor sandboxed files is that clearer ... and if Avast implemented something that prevents HIPS monitoring of sandboxed content -  and I can't tell because I never tested that - that it won't monitor anything. And if it does, it will monitor what happens inside the sandbox.

 Now if the sandbox leaks, then there's no doubt that the HIPS will hit. Look I haven't tested that but I'm pretty sure that CIS def+ sends an alert when Avast auto-sandbox does (an alert about the auto-sandbox alert, not its content). It's a process, period.

[iroc9555]

logos is correct.


"...but I'm pretty sure that CIS def+ sends an alert when Avast auto-sandbox does (an alert about the auto-sandbox alert, not its content). It's a process, period."


When I implemented Avast AutoSandbox tool test, I got 1/2 a dozen alerts from Comodo saying that Avastsvc.exe wanted to change some files and registry keys, as matter of fact the alerts came out before Avast itself telling me that the tool must be run in the sandbox ( I have it set to ask ).

[Lisandro]

Now if the sandbox leaks, then there's no doubt that the HIPS will hit.

Sure. But only in case of leak I suppose then...

[Hermite15]

logos is correct.


"...but I'm pretty sure that CIS def+ sends an alert when Avast auto-sandbox does (an alert about the auto-sandbox alert, not its content). It's a process, period."


When I implemented Avast AutoSandbox tool test, I got 1/2 a dozen alerts from Comodo saying that Avastsvc.exe wanted to change some files and registry keys, as matter of fact the alerts came out before Avast itself telling me that the tool must be run in the sandbox ( I have it set to ask ).

thanks, this proves there's no conflict, and CIS HIPS of course hits first

[Asyn]

thanks, this proves there's no conflict, and CIS HIPS of course hits first

http://forum.avast.com/index.php?topic=76650.msg634765#msg634765

[Hermite15]

yeah Asyn, I know how powerfull Def+ is