Protection against ransomware.

[safemode]

Yes, CIS protects against Ransomware, and any other kind of Malware, through Auto-Containment & HIPS modules.

@Melih post:6

That’s when we figured what the Malware needs to cause damage in the main was

1-Write privilege to hard disk
2-write privilege to the Registry
3-write privilege to the COM interface

Write privilege means: the right/ability to write to hard disk…why would you want a brand new untrusted app to start writing to your hard disk??? It could simply overwrite your own good files…yep…Ransomware…
So when a new executable file comes in if its never seen before by Comodo…we say “hey kiddo…here is a really good plastic knife”
Lets say a Ransomware makes it to your computer because the user clicks anything shiny on the web…
this ransomware is now running in RAM…and says…I want to “READ” hard disk…
Comodo says:…hmm…“READ” privilege…its ok…go ahead and read it…
then
Ransomware says:…I want to “encrypt” this file that I just read…
Comodo says: hmm…just messing around inside RAM…no damage done…go ahead…
Ransomware says: Now I have an encrypted file…I want to delete your original file and overwrite it with just encrypted…
Comodo says:…say what?? you want to have a “WRITE PRIVILEGE” to hard disk…Don’t think so…here is a “Virtual Write Privilige to a Fake Hard disk” …
Ransomware says: oh thank you, let me write there…
All the while Ransomware is writing to a “fake hard disk” where user’s original files are untouched and safe on the hard disk.

You can change CIS to ‘Proactive Security’ mode, this will enhance overall protection of all CIS components. You can also check and use the Cruelsister settings for Comodo Firewall (also valid for CIS) which will further enhance the level of protection provided.