it's a VM with windows 7. I only use SD for my windows 10 host machine
you think Petya is able to bypass SD and encrypt host machine? of cours i mean that MBR-BIOS
I don't know but it's super rare as someone explained. petya, I don't think it can
Not at it's current state.
comodo firewall or CIS are the answer for that
if you are using GPT drive, don't worry about petya
But that should make 0 difference because they ported the CIS sandbox module into CCAV a while back. So they might have messed permissions for anything run isolated because in practice the 2 modules are identical. Too lazy to find the changelog but you probably remember.comodo firewall or CIS are the answer for that
they are better all the way including performance
actually they are different according to comodo's FAQ
I listen but i just don't trust them. If i ever use their software again it's only for the firewall and nothing else.again
1 more reason not to listen to what they say
wait, or perhaps CF would be bypassed by petya also? The last time I tested, I forgot to disable file rating completely. Maybe that's the reason why CF blocked it. I may do another test then
Maybe, i don't know. Who knows what they did.
the faq doesn't actually say that CCAV has the same sandbox settings as CFW "proactive" config. Maybe it has the same settings as firewall config, which is weak on the COM side. @cruelsister says that firewall config in comodo 10 is lacking in proper COM protection.
It should not matter. They should protect the mbr, who the hell doesn't when we have so many ransomware that do that.
CFW in firewall config actually relies at its default settings on HIPS, while autosandbox is disabled by default.
I don't care on what it relies or how it does it. They just created a program apparently for sandbox only and the sandbox has the same capabilities as CIS from what they are advertising. So they should #####ing go to work and figure a way to at least stop the most common exploited methods.
