App Review An Avast Free AV Ransomware Test

[cruelsister]

 

[DJ Panda]

Not saying its a bad video but I would have recommended you did this https://malwaretips.com/threads/how...rity-2016-for-maximum-protection-guide.59880/ (Works for free) Also Avast and other AVs usually lean towards older threats. This shows having additional protection like Zemana or Crystal Security is always good to have.

 

[Lucent Warrior]

Excellent video @cruelsister ,
Im one of those that absolutely loves watching Malware disappear as it is being clobbered by a product also!

Thank you for your time and work.

 

[DardiM]

Thanks for your review

I think I will renew my KTS licence (oh, already done )

 

[yigido]

Hahaha, I can't stop laughing Aww..cute CyberCapture...
Cruelsister already maximized the protection settings (People love to link this thread (this)) but
I saw no difference the settings in the video.

Again and again.. do not trust any default allow AV.. whatever the component it uses.. it is "Default Allow".. it always allow threats run
Anyway, have fun with Avast Go don't stop recommend this to all of your friends, family, they will be secure(!) with it

Thanks @cruelsister much appreciated for this review.

 

[_CyberGhosT_]

Cool share, I was hopeful there for a sec.
Good job for them none the less.
Thanks CruelSis

 

[Deleted member 2913]

Hardened Mode Aggressive missed too...it allows only Avast whitelisted stuffs?
It missed coz the samples were script & not exe (if I am correct samples are script And guess hardened mode monitors exe only)?

 

[jamescv7]

In this case, their cloud functionality needs to improve more for Avast, because the overall components should benefit more accurately.

Their HIPS and CyberCapture are still so passive.

 

[yigido]

Hardened Mode Aggressive missed too...it allows only Avast whitelisted stuffs?
It missed coz the samples were script & not exe (if I am correct samples are script And guess hardened mode monitors exe only)?

After running RAA.js .. there was an .exe appeared on task manager ? Am I wrong?
It is not an excuse for Avast!

 

[Der.Reisende]

I think this will be a great series you're going to kick off @cruelsister, looking forward to more!
Thank you for another great production! Hopefully, Avast will close this security gap soon, as I really like this soft (free version also comes with unusually lot features)!

 

[ExoGen CyberSecurity]

Avast = Top kek, CyberCapture doesn't work, Hardened Mode still doesn't work well. Having everything set to high doesn't equal with high detection (you will have high FPs instead).

Maybe after Avast will add IDP from AVG will be better (I won't put my hopes in that).

 

[cruelsister]

The sample that got by was the typical RAA ransomware- so the only exe that it called up (other than wscript) is Wordpad for the false Document. For this test I purposely didn't use anything either true Zero-day or stuff I code as I wanted the concentration to be on common malware that AVAST should react to but does not. Avast fans are too caught up in impressive sounding terms like "Hardened Mode" and "CyberCapture" (I still LOVE that term!), when in reality sometimes they work and sometimes they don't.

But Avast isn't trash by any stretch. I think next week will be a repeat Avast test, but this time against something that has been showing up with great frequency lately- an executable that will try to turn our system into a malware distributing Zombie.

 

[SHvFl]

The sample that got by was the typical RAA ransomware- so the only exe that it called up (other than wscript) is Wordpad for the false Document. For this test I purposely didn't use anything either true Zero-day or stuff I code as I wanted the concentration to be on common malware that AVAST should react to but does not. Avast fans are too caught up in impressive sounding terms like "Hardened Mode" and "CyberCapture" (I still LOVE that term!), when in reality sometimes they work and sometimes they don't.

But Avast isn't trash by any stretch. I think next week will be a repeat Avast test, but this time against something that has been showing up with great frequency lately- an executable that will try to turn our system into a malware distributing Zombie.

CyberCapture does only exe and when it knows they came from online(downloaded from http/s and you also have to have web shield on and Avast community on. You also have to sacrifice your firstborn and pray to our lord and Savior Gaben daily). If you copy them to a vm from your pc it doesn't do anything. So basically it's kind of a gimmick. Sure Avast people will find a reason it does this but ok for me anything that doesn't react always it's a gimmick.

 

[bayasdev]

Great test @cruelsister
Avast is improving on every new version, but could you test It Qihoo 360 TS with BD engine realtime and PUP detection against Ransomware.

 

[cruelsister]

I've been meaning to get to Qihoo (which I like), but it's complicated as it really has to be done with QVM engine vs. QVM + BD. I have the next 3 weeks already pretty much planned out (another Avast, then BD 2017 and Webroot quickies); if I have the time before I go skiing in December I'll do it.

 

[woodrowbone]

I will love to see the reactions of the Webroot fanboys, as they will come to each others rescue like the do in other forums.
And yes, I have a feeling it will fail at some point in the hands of the good sister

And another yes, I am also a fan of WSA, but intelligent enough to see when it fails...
It will be really interesting to see if their "monitor/rollback" feature can keep the ransom at bay or not?

/W

 

[DJ Panda]

Avast = Top kek, CyberCapture doesn't work, Hardened Mode still doesn't work well. Having everything set to high doesn't equal with high detection (you will have high FPs instead).

Maybe after Avast will add IDP from AVG will be better (I won't put my hopes in that).

FP positives aren't THAT bad. I'd rather have a lot of those than an infected computer.

 

[ExoGen CyberSecurity]

FP positives aren't THAT bad. I'd rather have a lot of those than an infected computer.

I agree in one way, but a lot of people don't like FPs (like myself).

 

[Wordward]

I think it would be interesting to see how AVG Free does, considering the buy out. I'm thinking AVG would do better, which will make the buy out even more interesting for both products down the road.

 

[FrFc1908]

thanks for another well layed out video sis! I really like your style of testing I am looking forward for the next episodes in this series!!!