Reply to thread

Message

<blockquote data-quote="MacDefender" data-source="post: 938031" data-attributes="member: 83059">Yeah ESET&#039;s advanced techniques (more static heuristics, possibly sandbox emulation on-device) do tend to be heavy. Both involve more analysis before the program is even allowed to run, which I think most users perceive as a slowdown. A behavior blocker traps and evaluates API calls which happen less often and most apps when they are doing CPU-intensive things are not calling out to Windows APIs constantly.That&#039;s too bad. Once again, &quot;SM25.vbs&quot; seems to have identically duplicated itself and then put that script into AutoRuns.... I can&#039;t imagine a behavior blocker would miss that. From the Huorong test:I think for most people, ESET should be left at the default settings. Maybe turning on advanced DNA signatures would be interesting because we have seen some impressive ML detections from ESET before. The aggressive settings and their performance impacts don&#039;t justify the marginal improvement in protection.</blockquote>

[QUOTE="MacDefender, post: 938031, member: 83059"] Yeah ESET's advanced techniques (more static heuristics, possibly sandbox emulation on-device) do tend to be heavy. Both involve more analysis before the program is even allowed to run, which I think most users perceive as a slowdown. A behavior blocker traps and evaluates API calls which happen less often and most apps when they are doing CPU-intensive things are not calling out to Windows APIs constantly. That's too bad. Once again, "SM25.vbs" seems to have identically duplicated itself and then put that script into AutoRuns.... I can't imagine a behavior blocker would miss that. From the Huorong test: I think for most people, ESET should be left at the default settings. Maybe turning on advanced DNA signatures would be interesting because we have seen some impressive ML detections from ESET before. The aggressive settings and their performance impacts don't justify the marginal improvement in protection. [/QUOTE]

Verification