Advice Request Comodo Firewall component being ignored

Please provide comments and solutions that are helpful to the author of this topic.
@Shadowra How did you get the malware pack on the VM in the Comodo test? And is it workable for you or @cruelsister to test the specific malware that encrypted data with Comodo defaults?
 
rhythm said:
@Shadowra How did you get the malware pack on the VM in the Comodo test? And is it workable for you or @cruelsister to test the specific malware that encrypted data with Comodo defaults?
Click to expand...

The packs, I don't give my 1st source for security reasons. And the 2nd source is personal to me :) either I go to a site hosting them, or when I don't have what I want, I connect to a server I created that gets me 0-day samples :)

Concerning the malware that encrypted, you have to know that I made the test 1 month ago but I delayed to upload it for work reasons and lack of time... At the time of writing, Comodo must have made a detection because I always send the undetected malware to the editors after the test ;)
 
  • Like
  • +Reputation
Reactions: cryogent, ForgottenSeer 65838, simmerskool and 1 other person
  • Like
Reactions: simmerskool, [correlate] and ForgottenSeer 100397
rhythm said:
@Shadowra How did you get the malware pack on the VM in the Comodo test? And is it workable for you or @cruelsister to test the specific malware that encrypted data with Comodo defaults?
Click to expand...
The ransomware seen in the video was a HydraCrypt (think Chaos). As I'm not doing a video myself this week I'll use some time to find the specific file in the pack (if possible). As to the system BSOD there are indeed ways to screw with a sandbox to crash them (like recent data stealers spawning a daughter that will expand to ~800MB crashing SBIE).

As this has spun me off into a tangent, iI'll see if I can replicate by a few tricks and if so post back.
 
  • Like
  • Thanks
  • Applause
Reactions: cryogent, ForgottenSeer 65838, kylprq and 4 others
cruelsister said:
The ransomware seen in the video was a HydraCrypt (think Chaos). As I'm not doing a video myself this week I'll use some time to find the specific file in the pack (if possible). As to the system BSOD there are indeed ways to screw with a sandbox to crash them (like recent data stealers spawning a daughter that will expand to ~800MB crashing SBIE).

As this has spun me off into a tangent, iI'll see if I can replicate by a few tricks and if so post back.
Click to expand...
By the way, doesn't Comodo, by default, exclude the "Downloads" folder? The contained malware can modify or infect the files in the downloads folder.
 
Last edited by a moderator:

You may also like...