Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 837718" data-attributes="member: 32260">BAT and CMD files are also blocked in UserSpace by H_C settings in any predefined profile.There are three scenarios possible:<ol>
<li data-xf-list-type="ol">Non-default autorun setting. 
It should be: 
HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer 
Value: NoDriveTypeAutoRun = 0x00000091</li>
<li data-xf-list-type="ol">Another kind of Windows shortcut or malicious file with an extension that is not on Designated File Types list. H_C blocks by default LNK and SETTINGCONTENT-MS shortcuts, which were used in the wild. Other types of shortcuts and many other file extensions are blocked in Paranoid setting, for example, APPREF-MS or LIBRARY-MS.</li>
<li data-xf-list-type="ol">H_C protection was accidentally switched OFF (happened to me a few times).</li>
<li data-xf-list-type="ol">Overlapping protection - both Comodo and SRP are able to block something, but Comodo does this first.</li>
</ol></blockquote>

[QUOTE="Andy Ful, post: 837718, member: 32260"] BAT and CMD files are also blocked in UserSpace by H_C settings in any predefined profile. There are three scenarios possible: [LIST=1] [*]Non-default autorun setting. It should be: HKCU\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer Value: NoDriveTypeAutoRun = 0x00000091 [*]Another kind of Windows shortcut or malicious file with an extension that is not on Designated File Types list. H_C blocks by default LNK and SETTINGCONTENT-MS shortcuts, which were used in the wild. Other types of shortcuts and many other file extensions are blocked in Paranoid setting, for example, APPREF-MS or LIBRARY-MS. [*]H_C protection was accidentally switched OFF (happened to me a few times). [*]Overlapping protection - both Comodo and SRP are able to block something, but Comodo does this first. [/LIST] [/QUOTE]

Verification