Exciting News: Comodo Internet Security 2024 Beta Now Open for Testing!

[Redstraw]

Detection fails and protection also fails for CIS.

Bypass CIS build 8088 by creating high-risk items in startup entry

Sample: VirusTotal CIS version and configuration: Version: 12.3.0.8088 Configuraion: COMODO Proactive security Antivirus: Enable HIPS: Enable Containment: Enable Firewall: Enable File Rating: Enable Advanced Protection: Enable Testing and result: Running the sample. Two .js files were created in the folder appdata\roaming. A .js item was added in startup C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup A wscript item was added in the registry …curre…