Comodo Internet Security 2025 does not contain RANSOMWARE (bypass, infection and lost of files)

[XylentAntivirus]

The only almost unbeatable thing is my technique at prevention. Containing everything for analysis. Comodo didn't contain everything but almost everything.

 

[vitao]

they solved it on xcitium. recorded a new video with one particular setting. as soon as i get the time to edit it, ill publish the new video with subtitles, etc.

but just fyi xcitium now is able to protect us against the ransomware. cis continues to be destroied by it...

tried to post it on xcitium topic ive created but it seems their forum is offline...

 

[vitao]

Xcitium with new configuration can now prevent the ransomware to be executed!

FINALLY!!!

Watch it here:



This video has subtitles in English, Brazilian Portuguese and Spanish. If you need more subtitles, just let me know.

 

[Andy Ful]

Yes. There are two settings :

• Monitor DLL files being loaded by running processes (Enabled).
• Auto-block unknown DLL file(s) from being loaded by processes (Enabled).

When the benign EXE file (vulnerable to DLL hijacking) is executed, Xcitium monitors loaded DLL and blocks if it is Unknown.
Comodo (CIS) still does not monitor loaded DLLs, so it cannot block DLL hijacking attacks.

 

[[correlate]]

The only almost unbeatable thing is my technique at prevention. Containing everything for analysis. Comodo didn't contain everything but almost everything.

What is your solution
or the solutions you rely on for protection.
And thank you.

 

[vitao]

Yes. There are two settings :

• Monitor DLL files being loaded by running processes (Enabled).
• Auto-block unknown DLL file(s) from being loaded by processes (Enabled).

View attachment 287714

When the benign EXE file (vulnerable to DLL hijacking) is executed, Xcitium monitors loaded DLL and blocks if it is Unknown.
Comodo (CIS) still does not monitor loaded DLLs, so it cannot block DLL hijacking attacks.

yes. as explained in the video. now lets hope they dont take another 3~4 years to bring this fix into cis...

 

[Andy Ful]

yes. as explained in the video. now lets hope they dont take another 3~4 years to bring this fix into cis...

Those settings can increase security but at the cost of many false positives. Even if one whitelists all signed DLLs (like in Windows Smart App Control), the number of false positives can be too great for most non-enterprise users. We also must remember that with that fix the unknown DLLs are blocked and not auto-contained.

 

[rashmi]

@Sandbox Breaker - DFIR, If I'm right, you use Xcitium. Can you confirm if the settings below are old or new?

Monitor DLL files being loaded by running processes
Auto-block unknown DLL file(s) from being loaded by processes