Comodo 2025 Containment Variations

Note: Of the malware used in this video, 3 were a few months old, 2 were in the Wild for ~36 hours, and the other 3 were custom coded (true Zero-Day) to make points.
The video has 3 sections: the first is with Containment at my preferred Restricted level, the second is with Containment at Default, and the final section is CF in Silent Mode (for those who hate popups and don’t want to make any decisions).

[@ampeg187]

Thank even since i come across your channel i started using your settings and i have no problem with them

[@cruelsister1]

The MOST important thing about Comodo is that less in more for protection. The simple solution exhibited here will provide superb malware protection as well as limiting any incompatibilities (bugs).

[@bacharles1]

Another excellent informative video -- and you got me to look up "Silk Road" for the first time since high school many years ago.

[@muhammadsyafiq9345]

Nice video as always. By the way, I was thinking about securing my dad's PC. For now, I'm using Windows defender with settings set to high using Configure defender and I also deactivated the Windows script host. Do I still need to install CF with your settings as well? The system is running windows 11.
Thanks in advance.

[@cruelsister1]

I would. Remember that Defender, no matter how tweaked still will be unable to detect true zero-day malware. Although the chances are low to run into such, for adequate protection CF is a must.

[@fun_ruiner]

Can you try to make your videos at least 1080p? You can get away with lower bitrates, especially because the videos are mostly static with very little movement. If you have access to a GPU that has an NV1 encoder, it will also help a lot. But 480p is just brutal in 2024

[@cruelsister1]

I know- you are correct. I've tried in the past to change things up, but for whatever reason it just never looked good to my eyes on the system I us to create them.
I really do apologize for this and hope that you can understand why they are the way they are...

[@vitaotek]

so... do you think restricted level in proactive mode + silent mode is the best way to go?

[@cruelsister1]

For those that are a bit computer savvy, my setup is the best as one would be aware of valid (but not yet vetted by Comodo- like browser betas) applications being contained. One can then easily change the File rating to trusted from the GUI.
However for a computer novice that just wants to do the usual things on the computer and wants complete protection without ANY popups at all, then Silent mode is ideal.

[@vitaotek]

@@cruelsister1 thats what i was thinking too. thanks for the response. :)

[@Fred-oliveiriks]

It's funny how windows firewall doesn't get disabled when installing comodo, at least on my 2 machines. Even funnier, when completely disabling windows firewall + defender, the "antimalware service executable" still runs and takes at least 130Mb of ram. Had to go through bells and whistles until I finally got rid of it and free to use the security solution I want.

[@cruelsister1]

Windows Firewall is probably the most useless part of windows Security. It does not alert to Outbound connections (which is essential for malware protection).
There are some that will counter this by noting that Rules can be set up to block such Outbound requests. The flaw in this argument is twofold- such a strategy is reactive (knowing how a malware file acts, then making the Rule); this is essentially nothing but Security Whack-A-Mole as Rules have to be created for new stuff that probably already infected the system..
Secondly WF can be easily either turned off completely and/or have any existing Rules deleted by a simple code snippet woven into a malware file.

[@UmitSeyhan75]

Considering on-deman avs will only work, well, on-demand, how big of a baggage it can be to the system?

[@Electro-tw9um]

I wonder if she meant on-access?

[@cruelsister1]

@@Electro-tw9um Considering that CF has on-access AV protection with VirusScope. Adding the AV module for user-initiated scans (on-demand) serves no real purpose as it would be redundant. Also why would any need virus definitions to be downloaded unto a system when Cloud detection already exists?

[@UmitSeyhan75]

@@cruelsister1 Not every system is connected to the internet all the time.