Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1107687" data-attributes="member: 32260">It is probably too late to change the title of this thread.&nbsp; <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite132" alt=":unsure:" title="Unsure&nbsp; &nbsp; :unsure:" loading="lazy" data-shortname=":unsure:" />In the video, Comodo correctly recognizes the benign/legal file as trusted but does not recognize ransomware as trusted (contrary to the title). Comodo will allow loading the ransomware DLL if it is not on the File Reputation List or has an Unrecognized reputation (after an on-demand scan). It blocks loading the DLL if it is recognized as malicious.If the same ransomware DLL was executed via restricted LOLBin (like rundll32.exe), Comodo would properly confirm/check/apply the DLL&#039;s reputation and could contain it.The correct title might look like:Comodo Internet Security 2025 does not contain RANSOMWARE (bypass, infection and lost of files)Post updated.</blockquote>

[QUOTE="Andy Ful, post: 1107687, member: 32260"] It is probably too late to change the title of this thread. :unsure: In the video, Comodo correctly recognizes the benign/legal file as trusted but [COLOR=rgb(184, 49, 47)][B]does not [/B][/COLOR]recognize ransomware as trusted (contrary to the title). Comodo will allow loading the ransomware DLL if it is not on the File Reputation List or has an Unrecognized reputation (after an on-demand scan). It blocks loading the DLL if it is recognized as malicious. If the same ransomware DLL was executed via restricted LOLBin (like rundll32.exe), Comodo would properly confirm/check/apply the DLL's reputation and could contain it. The correct title might look like: Comodo Internet Security 2025 does not contain RANSOMWARE (bypass, infection and lost of files) Post updated. [/QUOTE]

Verification