Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 996610" data-attributes="member: 32260">My strictly personal opinion about the best anti-ransomware protection &quot;for all users&quot; is for the advantage of Comodo Antivirus with a low or medium level of auto-containment (tested by [USER=7463]@cruelsister[/USER]).The ransomware is not blocked in the sandbox, so the user can see the destructive actions and the final ransomware request. Furthermore, the ransomware cannot upload files (due to the firewall restrictions) in the double extorsion attacks. Such protection is not so strong as Comodo Firewall with CS settings, but in many cases, it will prevent the users from disabling the protection in the socio-technical attacks. Unfortunately, the protection based on auto-containment has got a few cons that make it unpopular.The Comodo Firewall with CS settings (and similar solutions) can be probably better in the &quot;home administrator&quot; scenario, where the family members use Comodo Firewall, but only the advanced user can change the settings when this is necessary.Another good solution for all users can be Kaspersky, but if I correctly recall, in the default settings it cannot fully prevent stealing the files in the double extorsion attacks. But, I can be wrong.The anti-ransomware protection of Defender free can be very efficient in widespread attacks, but it is not so comprehensive as that of Comodo or Kaspersky. It is based on the assumption that by making the ransomware &quot;very-short-living&quot;, the number of victims can be significantly reduced. The protection can be better when using ConfigureDefender HIGH settings, but still not as good as Comodo with auto-containment. With MAX settings almost all ransomware will be blocked, but like in the case of Comodo Firewall with CS settings, such a solution is better suited to the &quot;home administrator&quot; scenario (and still slightly worse than CF with CS settings).</blockquote>

[QUOTE="Andy Ful, post: 996610, member: 32260"] My strictly personal opinion about the best anti-ransomware protection "for all users" is for the advantage of Comodo Antivirus with a low or medium level of auto-containment (tested by [USER=7463]@cruelsister[/USER]). The ransomware is not blocked in the sandbox, so the user can see the destructive actions and the final ransomware request. Furthermore, the ransomware cannot upload files (due to the firewall restrictions) in the double extorsion attacks. Such protection is not so strong as Comodo Firewall with CS settings, but in many cases, it will prevent the users from disabling the protection in the socio-technical attacks. Unfortunately, the protection based on auto-containment has got a few cons that make it unpopular. The Comodo Firewall with CS settings (and similar solutions) can be probably better in the "home administrator" scenario, where the family members use Comodo Firewall, but only the advanced user can change the settings when this is necessary. Another good solution for all users can be Kaspersky, but if I correctly recall, in the default settings it cannot fully prevent stealing the files in the double extorsion attacks. But, I can be wrong. The anti-ransomware protection of Defender free can be very efficient in widespread attacks, but it is not so comprehensive as that of Comodo or Kaspersky. It is based on the assumption that by making the ransomware "very-short-living", the number of victims can be significantly reduced. The protection can be better when using ConfigureDefender HIGH settings, but still not as good as Comodo with auto-containment. With MAX settings almost all ransomware will be blocked, but like in the case of Comodo Firewall with CS settings, such a solution is better suited to the "home administrator" scenario (and still slightly worse than CF with CS settings). [/QUOTE]

Verification