bypass v5.10.228257.2253 (dll malware, QQ pass)

Comodo Internet Security - CIS News / Announcements / Feedback - CIS
#21

I add it to the list, “always sandbox”

#22

go to the firewall tab, firewall behavior settings and turn off “Do not show popup alerts” does it still have access while in the sandbox?

#23
  1. The configuration was “CIS”

2.The firewall was in “safe mode”

3.So, there were no firewall alerts

#24

that is not what I asked you to check.

#25

test the malware with DW:

1.DW trusts this file

“photo.exe”

2.DW untrusts another file

“MSDTCTM.dll”

3.The user double clicks on the photo.exe

4.result: DW untrusts the photo.exe

772×515 50.9 KB