Reply to thread

Message

<blockquote data-quote="rashmi" data-source="post: 1078537" data-attributes="member: 107361">I&#039;m no expert, but I wonder if the attack is like those that users posted in the past where the developers replied something like &quot;Comodo allowed the user started...). I don&#039;t remember the developer&#039;s words or response, but it was like the [USER=81799]@ErzCrz[/USER] response in post #9: &quot; if a unknown file executed a cmd or svchost or any other program that could execute the code to disable the virtualization that both the unknown file an any process or file launched by that unknown file would be Contained. Sure, a user can run that cmd line they create on their own&quot;Someone posted about this on the Comodo forums. Let&#039;s see what the developers say.Again, I&#039;m no expert, so this may sound stupid. I wonder if script analysis would have blocked the attack like PowerShell if, like PowerShell, &quot;Embedded Code Detection&quot; was enabled for CMD under Script Analysis - Runtime Detection.[ATTACH=full]282094[/ATTACH]</blockquote>

[QUOTE="rashmi, post: 1078537, member: 107361"] I'm no expert, but I wonder if the attack is like those that users posted in the past where the developers replied something like "Comodo allowed the user started...). I don't remember the developer's words or response, but it was like the [USER=81799]@ErzCrz[/USER] response in post #9: " if a unknown file executed a cmd or svchost or any other program that could execute the code to disable the virtualization that both the unknown file an any process or file launched by that unknown file would be Contained. Sure, a user can run that cmd line they create on their own" Someone posted about this on the Comodo forums. Let's see what the developers say. Again, I'm no expert, so this may sound stupid. I wonder if script analysis would have blocked the attack like PowerShell if, like PowerShell, "Embedded Code Detection" was enabled for CMD under Script Analysis - Runtime Detection. [ATTACH type="full"]282094[/ATTACH] [/QUOTE]

Verification