Sorry it took so long to post the CBOC results but it took until Friday for the virus to pop up its head again. I originally had cleaned everything up on the machine except the System Restore files. I told the guys to just run programs normally and not to do anything out of the norm to get the virus working again.
CBOC just sat there all by itself not detecting anything for 4 days. I was beginning to wonder if I was going to have to do a system restore to get the virus to start up again or maybe CBOC just wasn't detecting anything. Anyway I pretty will had given up on anything happening so I just went about my business and just let it set there. On Friday afternoon the virus came alive and tried to start a file in system32(a wireless .exe file) and CBOC nailed it. I let it delete the file as I wasn't concerned about anything working on the machine or not. The virus then tried to start another .exe file and CBOC caught that also. I stopped the test after the second file as that was proof enough for me. CBOC deleted the first file without any trouble and I did not check to see if by deleting the files that something got broke. All I was after was to see if CBOC would stop them or not. I also do not know how many other files were created by the virus before or after CBOC caught the first 2.
I would say CBOC passed the test very well. I have to assume that the virus was setting itself up to send emails out over the weekend. Maybe it had a built in timer or something I don't know.
I called in the company IT people to take a look and CBOC is going to be installed on all of the pc's they have. They got to see CBOC stop the second file and that was enough to convince them to put it on all of their pc's.
Well, my half-baked test is complete and CAVS and CBOC both did a fine job of holding their own. I won't be able to test CFP3 as they need the pc back(small network with limited resources). One other thing, I tried to abuse the Comodo products as much as I could. I did this on purpose to try and break the programs unfairly. I did not test any other vendor's products and that's not to say they wouldn't have done just as well. All I know is the virus got in on that pc thru another vendor's antivirus program that was current and up-to-date in it's virus definitions.
Good job Comodo.
jasper
Author