Comodo Internet Security Bypassed by Trojan Ransom.Xorist

[Chiron]

The advice given in How to Install Comodo Firewall will protect you from the most recent variants. I also give advice for how to protect from future variants as well, however doing so would likely lead to more popups.

It's your choice as to which configuration avenue you choose.

Thanks.

 

[Hungry Man]

Not a big deal. Comodo is more than just a sandbox. There's an AV/heuristics for a reason.

 

[Deleted member 178]

Not a big deal. Comodo is more than just a sandbox. There's an AV/heuristics for a reason.

i agree, but in the worst case :

You have installed Comodo FW and the computer is offline, you trust the sandbox then you are done.
i recently posted, on the hub, a link given to me to a malware that totally bypass the sandbox.

 

[McLovin]

It happens to all AV's so if they fix it everything will be okay?

 

[malwarekiller]

@Chiron

Is this bypassing the sandbox thats tweaked to blocked?? i have it on blocked and file and all virtualization is enabled here

 

[Chiron]

@Chiron

Is this bypassing the sandbox thats tweaked to blocked?? i have it on blocked and file and all virtualization is enabled here

I didn't see it tested against blocked, just Untrusted. However, it was able to bypass the configuration advice I had previously given and I had to tweak it to protect against the new variants.

I'm pretty sure if you put the sandbox to blocked it will stop all malware. However, in my opinion blocked is too annoying and so I stick with untrusted and make tweaks to stay just as safe as you are.