Reply to thread

Message

<blockquote data-quote="Orion" data-source="post: 705095" data-attributes="member: 51621">Hi CS and others,TI again.So [USER=43696]@Alikhan[/USER] and I have been talking about the delay in detection by BB for ransomware specifically.The principal developer of IDP from AVG said that this is due to cloud where if you disable file shield the cloud is not being queried which results in delay of detection.So some part of IDP relies on file shield and cloud to make decision in time.Also you are forgetting the usual chain my dear friend.If avast can block the source there is no way a binary will get dropped.While this is not a excuse there is a proper reason for the delay since there is cloud involvement in the decisions being made any new or old ransom malware may get a delayed detection.File shield also has cybercapture,deepscreen,filerep and evo-gen built into it so disabling it effectively cuts off avast means to fight against unknown malware.You can read Ali&#039;s post here:<a href="https://malwaretips.com/threads/another-avast-behavior-blocker-vs-ransomware-test.76225/page-2#post-680437" target="_blank">Video Review - Another Avast Behavior Blocker vs Ransomware Test</a>Please keep this in mind guys before basing conclusions because each product has a different way to protect its users without knowing that there is no proper test bed to replicate real world scenario&#039;s..Btw,i have a twitter for malware research too.Follow @avman1995</blockquote>

[QUOTE="Orion, post: 705095, member: 51621"] Hi CS and others, TI again.So [USER=43696]@Alikhan[/USER] and I have been talking about the delay in detection by BB for ransomware specifically.The principal developer of IDP from AVG said that this is due to cloud where if you disable file shield the cloud is not being queried which results in delay of detection.So some part of IDP relies on file shield and cloud to make decision in time.Also you are forgetting the usual chain my dear friend.If avast can block the source there is no way a binary will get dropped.While this is not a excuse there is a proper reason for the delay since there is cloud involvement in the decisions being made any new or old ransom malware may get a delayed detection.File shield also has cybercapture,deepscreen,filerep and evo-gen built into it so disabling it effectively cuts off avast means to fight against unknown malware.You can read Ali's post here: [URL="https://malwaretips.com/threads/another-avast-behavior-blocker-vs-ransomware-test.76225/page-2#post-680437"]Video Review - Another Avast Behavior Blocker vs Ransomware Test[/URL] Please keep this in mind guys before basing conclusions because each product has a different way to protect its users without knowing that there is no proper test bed to replicate real world scenario's.. Btw,i have a twitter for malware research too.Follow @avman1995 [/QUOTE]

Verification