What do you think about this video?

[Guest]

[SG65]

I just found this on YouTube

   http://www.youtube.com/watch?v=JwhJkcyit24

[Syl]

yep, like I said in the youtube comment:
"That was interesting, hope they'll fix it."

This thread should be in CIS (or maybe bug report) though, since it's related to CIS and it needs attention.

[burebista]

I dunno what to say. It was run in VirtualBox and AV alerts were ignored.

[Syl]

AV alerts weren't ignored, he clicked on "Clean". Like he said, the user may stop trying installing it after the first alert. But CIS didn't react the second time.

[umesh]

This vendor '2Squared Software' is under review.
I will get back to you with conclusions.

Thanks
-umesh

[kagun]

Virtual environment is VirtualBOX... I was under impression that Comodo would not work properly under that system due to some Vector thing?

[umesh]

This vendor  '2Squared Software'  has been removed from Trusted Vendor List from cloud.
We have found this vendor following questionable marketing practices and is not suitable to be included in Trusted Vendor List.

Thanks
-umesh

[kagun]

So, that vendor will be auto deleted during next update from trusted vendor list?

[umesh]

So, that vendor will be auto deleted during next update from trusted vendor list?

Yes, when you re-start system next, CIS will remove it from local TVL, if exists.

Thanks
-umesh

[kagun]

Thanks for the info, respect! 

[Syl]

The problem is how it can add itself automatically to the list...

[languy99]

no it does not add itself automatically, what happened is that the company was white listed from a while ago in the cloud. When something is white listed in the cloud and it sees that you have a piece of software that has the same digital signature on your computer, CIS automatically adds the digital signature to you TVL. The rogue did not do it.

Also, the TVL and cloud white list is under review right now but it will take time to do it.

[Guillermo391]

no it does not add itself automatically, what happened is that the company was white listed from a while ago in the cloud. When something is white listed in the cloud and it sees that you have a piece of software that has the same digital signature on your computer, CIS automatically adds the digital signature to you TVL. The rogue did not do it.

Also, the TVL and cloud white list is under review right now but it will take time to do it.

IT SHOULD, most recent videos that present CIS vulnerabilities, are because the tester found a virus that was digitally signed and was in the trusted list,

Thats why we need the option to select which vendors to trust. Right now the people adding trusted vendors to CIS are not doing correctly their job.

[Androo Circe]

update from a youtube viewer as regards this video


[at]hoshinkaaaa Yeah its true (WOOO!!) I retested and the antivirus now catches them both, whilst trying to run the file without the antivirus you get this alert from defense plus. 'setupxv.exe is a known malicious file. You MUST block this request'

You cant get any better, well done Comodo Team

IT SHOULD, most recent videos that present CIS vulnerabilities, are because the tester found a virus that was digitally signed and was in the trusted list,

Thats why we need the option to select which vendors to trust. Right now the people adding trusted vendors to CIS are not doing correctly their job.

[Syl]

nice, that was quick 

[Tags:]