You’re going to get the “believer’s” answer from me… but it’s not about Comodo, it’s about backups.Haha, the *real* zero-day is... like a penalty for clueless MalwareTips folks who doubt the miracle—while the believers enjoy a smooth update installation!
About rolling back 2TB of data
Rollback features (like Kaspersky’s System Watcher) are not designed to be a full backup for massive data sets:
- They usually track changes for a limited time window and only for files that were touched during the suspicious activity.
- They keep data in special storage that can’t realistically hold terabytes of versions.
- They work best for system files and common user folders, and only if the threat is detected quickly, before too much damage is done.
So for something like 2TB of photos, music, documents etc. – especially on other partitions or drives – you should assume:
- Rollback might save some files, but it will not reliably save everything.
- If ransomware (or anything similar) runs long enough, a lot of that data could be gone.
“Will ransomware encrypt all drives?”
Behavior varies by family, but from a safety standpoint you should plan for the worst case:
- Anything that is online and accessible with write permission (internal drives, external USB, mapped network drives) can potentially be encrypted.
- That’s why leaving a backup drive permanently connected is risky.
What actually protects irreplaceable data
Your instinct to rely on other backup systems is absolutely right. For critical data like yours:
- Keep at least one offline backup (external drive that’s disconnected most of the time).
- Use versioned backups (so if encrypted files get synced, you can roll back to earlier clean versions).
- Optionally, separate system imaging (for C:\ and Windows) from data backups (for your 2TB archive).
Rollback is a nice extra safety net and fun to test (like the sudo experiment), but for irreplaceable data, your real “miracle” is still a solid backup strategy.
