Hot Take Comodo Kill Switch, is it malware?

[Abdel-Rezak]

Is Comodo Kill Switch actually malware? Because according to Virus Total it is, it's flagged as trojan malware by 9 security vendors and one security sandbox!

VirusTotal

VirusTotal

www.virustotal.com

 

[ErzCrz]

Is Comodo Kill Switch actually malware? Because according to Virus Total it is, it's flagged as trojan malware by 9 security vendors and one security sandbox! I

Old News.
It's been detected for some time as a PUP but it's not. I believe it's something to do with how Comodo used to try and upsell you 3rd party apps. Comodo bought killswitch many years ago and was available as a separate stand alone download but for whatever reason, these vendors still detect it as a PUP even though it's a very useful tool and I've never seen any evidence of it being malware or a PUP.

Spoiler: Emsisoft Emergency Kit - Local Scan - Killswitch PUP

 

[Anthony Qian]

I have previously used Comodo KillSwitch and did not realize that it attempts to sell additional products. Bitdefender classifies it as a PUP with a specific detection name, indicating that Bitdefender intentionally detects it and it is not a false positive.The reason for this classification may be that the ARK tool has the capability to "Kill All Untrusted Processes" with just one click. This function becomes dangerous when exploited by malware.

 

[ErzCrz]

I have previously used Comodo KillSwitch and did not realize that it attempts to sell additional products. Bitdefender classifies it as a PUP with a specific detection name, indicating that Bitdefender intentionally detects it and it is not a false positive.The reason for this classification may be that the ARK tool has the capability to "Kill All Untrusted Processes" with just one click. This function becomes dangerous when exploited by malware.

I was referencing to the Comodo installer in Comodo Stable versions prior to .8012. I don't know enough about it myself, using it to only monitor for sandboxed processes. Interesting about Bitdefender. Undecided what configuration I'll run for the coming year.

 

[ForgottenSeer 100397]

If you downloaded it from the Comodo forum or website, you should be fine. The detection could be because of the advanced tools. From what I remember, the standalone KillSwitch never included bundled products.