Should Comodo users stop using Comodo?

[Andy Ful]

Please provide a file hash (even if detected by VirusScope) that would confirm any of these statements (if you are busy, just one will do).

I will not. As you might have noticed in some of my posts, the chances of bypassing Comodo in the wild without knowing the installed antivirus are, in my opinion, very small. I presented the possible bypasses to narrow the possibilities, if someone would like to create a POC or find malware in the wild.
You can ask the Comodo staff what they think.

System Binary Proxy Execution: Electron Applications, Sub-technique T1218.015 - Enterprise | MITRE ATT&CK®

attack.mitre.org

You can also try to explain how such malware would be contained/blocked for sure by known Comodo features.

 

[Andy Ful]

Many Enterprise features are not implemented in consumer freeware CIS.

This post requires some details to fulfill the rules of our thread.

 

[Nikola Milanovic]

I have a script here that is very small, 21kb, yet it injects a full blown RAT server written on .NET, distributed with the net environment. Can you please outline the technical process, how this script works, how it injects?

Hello @Trident could you drop me the script so i can Look at it?
Please drop me the script in DM

Best Regards
Nikola

 

[Pico]

This post requires some details to fulfill the rules of our thread.

Compare UI interfaces / settings and consult help-guides of both which can be found on Comodo/Xcitium sites.

 

[Trident]

Hello @Trident could you drop me the script so i can Look at it?
Please drop me the script in DM

Best Regards
Nikola

It is a custom script and I am afraid to send it left and right. Can you just theoretically tell me the technical details. Very small script, injects a big executable in calc.exe, there is no visible calculator window. I can see some strange inbound/outbound connections.

 

[cruelsister]

I will not.

Please note that the difference between a Professional and a Troll is often a single File hash (ie indisputable proof)..

 

[Trident]

Please note that the difference between a Professional and a Troll is often a single File hash (ie indisputable proof)..

He spent quite a lot of time defending you when I attacked you, and defending Comodo, attempting to get to the truth (if it’s really bad or not). You sure you wanna call him a troll?
He merely explored a theoretical possibility, we didn’t claim that it worked and happened.

 

[Andy Ful]

Compare UI interfaces / settings and consult help-guides of both which can be found on Comodo/Xcitium sites.

You should do this because you insist on it. Please look at rule 2 in the OP.

 

[Pico]

You should do this because you insist on it. Please look at rule 2 in the OP.

People can lookup the differences themselves, no need to post every single difference between the two products here.

 

[Andy Ful]

@cruelsister and @Pico,

Please fulfill the rules mentioned in the OP. Thanks.

 

[silversurfer]

Looks like the next topic regarding Comodo becomes in wrong direction, some people cannot handle the topic (as expected like in the past).

Everyone, please try to be less emotional if you don't like some points stated by others, the best reaction is always: agree to disagree...

 

[TuxTalk]

 

[Kongo]

Imagine getting emotional over a security solution. Damn, then I'd rather be a troll than a professional that gets mad over people criticising their favorite product.
Don't let such comments get to you @Andy Ful

 

[Trident]

Imagine getting emotional over a security solution. Damn, then I'd rather be a troll than a professional that gets mad over people criticising their favorite product.
Don't let such comments get to you @Andy Ful

When you read the Original post, I shine with 2 comments/opinions there. One is about the emotional attachments, the other one is about Valkyrie not being integrated. I think they are both confirmed, there is just one part (nothing is fixed) that needs more evidence.

Also, it is not some sort of professionalism contest here. No one is under any obligation to be a professional.

 

[Pico]

Part of Comodo Game?
Thread open, thread locked, thread open,...

 

[Trident]

Part of Comodo Game?
Thread open, thread locked, thread open,...

It’s a hassle to moderate the Comodo threads… it’s a lot of emotion and over-excitement. Other threads are deprived of attention.

 

[Kongo]

It’s a hassle to moderate the Comodo threads… it’s a lot of emotion and over-excitement. Other threads are deprived of attention.

Don't think I didn't see your profile status update.

 

[Pico]

It’s a hassle to moderate the Comodo threads… it’s a lot of emotion and over-excitement. Other threads are deprived of attention.

Oh, sort of Black Hole soaking all moderation energy.

 

[Trident]

Oh, sort of Black Hole soaking all moderation energy.

It is… it’s only 2 moderators for the whole forum, more or less similar parts of the world. The Comodo threads grow exponentially by the minute.

 

[Andy Ful]

If I correctly understand, the @cruelsister point of view is as follows:
No one showed the hash of malware that surely bypassed Comodo in the wild, so our thread does not make sense in practice. Comodo users are safe. People who say that there can be some weaknesses in Comodo are sensation-seeking or intentionally try to discourage Comodo users.

So, let's hear what other Comodo users think about it.