trojanscript

https://valkyrie.comodo.com/get_info?sha1=da39a3ee5e6b4b0d3255bfef95601890afd80709

Application try capture settings the comodo internet security, monitore users and use datas ilegal;
trojanscript can infect cis.exe, if folder C:\Program Files\comodo not protect in objects protected;
Connexion TDLR not blocked in comodo DNS IP
F:\Memoria Anual 2016 - Caja Trujillo\Memoria CMACT 2016.exe (trojanscript stolen data the users request remote)
C:\Program Files\COMODO\COMODO Internet Security\CisTray.exe (capture by click in explorer.exe, but comodo internet security is protected)
C:\Program Files\COMODO\Comodo ITSM\plugindlls\processmonitor.dll (not is process monitor microsoft and yes z8games Brazil) - Solution: protected C:\Program Files\COMODO* - ‪C:\ProgramData\Comodo*

C:\Program Files\Common Files\microsoft shared\OFFICE16\IACOM2.DLL (keylogger capture data)
C:\Program Files\TeamViewer\TeamViewer.exe (acess remote FPS slowdown) in game
C:\Windows\Temp\2405815599\osrcu.exe (comodo internet security should protect foldes system microsoft)
C:\Windows\Installer\MSI465F.tmp (create files loggers)
C:\Program Files\COMODO\COMODO Internet Security\cis.exe (try inject code, but comodo internet security is excellent);

NOTE: PROTECT C:\Program Files\COMODO\COMODO Internet Security\* (files:///C:)
Acess remote in system windows should disable for default.
Thank you COMODO, SHANE, MELIN… Excellence in security online :stuck_out_tongue: :viva:

Sorry joke bellow:


:wink:

Hi liosant,

Thank you for your submission.
We’ll check them and if found to be malware detection will be added.

Best regards
Abinaya R