Comodo Internet Security Bypassed by Trojan Ransom.Xorist

[NSG001]

Comodo Internet Security Bypassed by Trojan Ransom.Xorist
Comments HERE

 

[Deleted member 178]

Nothing is perfect in this world, i would like to see what happened if *_CRYPT was added.

 

[NSG001]

Let's see what Egemen has to say

 

[Deleted member 178]

In the second video, some tweaks allow CIS to block it. So CIS is definitely not for beginners.

 

[Ink]

What type of Sandbox is this again?

 

[Deleted member 178]

It is Comodo Auto-sandbox that works on policy rules.

 

[Ink]

Doesn't Comodo have a manual sandbox that you can browse within? or is that expected for v6?

 

[Deleted member 178]

The actual CIS has both of them, the "manual" one that virtualize the application like sandboxie, and the Automatic one, working on policy rules. For CIS v6 , they plan the full virtualization of the Auto-Sandbox.

http://malwaretips.com/Thread-CIS-v6-very-theorical-future-features

 

[NSG001]

Nothing is perfect in this world, i would like to see what happened if *_CRYPT was added.

This is his 'safe' config for CIS:

 

[Guest28]

I really hope c.o.m.o.d.o dosent use the 6.0 beta to cover this up and simply say.
It will be fixed in version 6.0

 

[jamescv7]

CIS default settings cannot measured to be a maximum protection and its backbone where configured to a maximum protection.

Especially the sandbox feature that effectiveness where set on default.

 

[Overkill]

Is this issue on the comodo forums?

 

[Deleted member 178]

Is this issue on the comodo forums?

Since long time, all CIS advanced users, knows about it, and we use a workaround until it will be fixed (surely for v6)

 

[malbky]

NO AV is impregnable. I thought Comodo had a HIPS which was tough to bypass but someone did it. There is not much need to sweat it out. For a free product Comodo does beat out some paid competitors.
Hope a fix comes soon.

 

[Deleted member 178]

If a security solution was found perfect, it will have the monopole, and will kill all other vendors.
Who will choose the non-perfect product?

 

[NSG001]

Fix for now ...
Commentary HERE

 

[Deleted member 178]

It is what i like with Comodo and D+, you can always tweak it by yourself to make it stronger, instead of waiting the updates of the developers.

 

[Overkill]

I hope it gets fixed in V6

 

[NSG001]

I hope it gets fixed in V6

As shown in the latest video you can prevent this now until of course the next variant comes along

 

[Deleted member 178]

It works against 5-6 variants already.