Reply to thread

Message

<blockquote data-quote="vitao" data-source="post: 1116723" data-attributes="member: 109212">i dont see the point as the ransomware will cript everything inside profile folders, like desktop, downloads, docs, etc. if the dll file is updated to gain access to anything on the hd (even a secondary or third partition), the result will be the same. the problem is not the ransomware not being detected by cis. the problem is that even if it defects it, its just a matter of updating the dll to cript somethin and change some ids there so cis will stop blocking it again. the problem is that cis can not identify thrads inside dlls invoked by signed exes. well, atleast its what im getting to understand. if im wrong, please, help me understand better.ps.: the dll is not recognized by cis, nor by valkyrie, not anything else related to comodo products. why? i dont know (i have some guesses and they are not beauty)[USER=32260]@Andy Ful[/USER]&nbsp; too... you are being summoned! <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite115" alt=":p" title="Stick out tongue&nbsp; &nbsp; :p" loading="lazy" data-shortname=":p" /></blockquote>

[QUOTE="vitao, post: 1116723, member: 109212"] i dont see the point as the ransomware will cript everything inside profile folders, like desktop, downloads, docs, etc. if the dll file is updated to gain access to anything on the hd (even a secondary or third partition), the result will be the same. the problem is not the ransomware not being detected by cis. the problem is that even if it defects it, its just a matter of updating the dll to cript somethin and change some ids there so cis will stop blocking it again. the problem is that cis can not identify thrads inside dlls invoked by signed exes. well, atleast its what im getting to understand. if im wrong, please, help me understand better. ps.: the dll is not recognized by cis, nor by valkyrie, not anything else related to comodo products. why? i dont know (i have some guesses and they are not beauty) [USER=32260]@Andy Ful[/USER] too... you are being summoned! :p [/QUOTE]

Verification