App Review AVG Internet Security - Software Analyzer - ransomware test

[Werderforever]

if you want, I can quickly test it against those types of ransomwares it promises to block
no video, just screenshots if necessary

Yes, that´s a very good idea. Many thanks!

 

[Davidov]

[Quote = "Werderforever, post: 590.122, člen: 39523"] Ano, to je takový velmi dobrý nápad. Mnohokrát děkuji! [/CITÁT]
In the second part, use the MBR and filter so we know the combo works .-)

 

[Evjl's Rain]

Yes, that´s a very good idea. Many thanks!

I tested BD antiransowmare against petya, Teslacrypt, locky, (I don't have any CTB-locker sample) which they claim to protect against in the UI of the app
failure rate: 100%
missed all of them. Useless even my petya samples were very very old

 

[AtlBo]

Is anyone familiar with the origin of the use of the word petya for petya ransomware? I think of the book Doctor Zhivago and the character Petya every time it is mentioned. If you don't know who Petya and Tanya is in this book, you just must read the book in the epilogue

SparkNotes: Dr. Zhivago: Chapter 16: Epilogue



These epilogue chapters classify as madness. Tanya and Udaloy

 

[Deleted member 2913]

I did it but I didn't record a video. I will tell you the result: it blocked 99.99% of my samples, only petya bypassed and completely shut down the VM. only 1 miss
comodo firewall in Proactive mode + no restriction -> blocked everything including petya, 100% result

I mentioned this in Comodo Forum here
Comodo Cloud Antivirus 1.8.407387.418 Hotfix Version is Released! - News / Announcements / Feedback - CCAV

 

[Evjl's Rain]

I mentioned this in Comodo Forum here
Comodo Cloud Antivirus 1.8.407387.418 Hotfix Version is Released! - News / Announcements / Feedback - CCAV

the question is do they want to here it?
maybe they need a proof then

 

[Deleted member 2913]

the question is do they want to here it?
maybe they need a proof then

Did you tested latest version?

 

[Evjl's Rain]

Did you tested latest version?

not yet, I tested the older version, 1 day after they released the new one. I may open my VM, install CCAV and test it solely against petya. Record a very short video and give it to you so you can have a proof

 

[Deleted member 2913]

not yet, I tested the older version, 1 day after they released the new one. I may open my VM, install CCAV and test it solely against petya. Record a very short video and give it to you so you can have a proof

That would be good. I will post the link/video in Comodo Forum.

By the way, how you find CCAV overall?

 

[Evjl's Rain]

That would be good. I will post the link/video in Comodo Forum.

By the way, how you find CCAV overall?

it blocked 99.999% of ransomwares except MBR-type. Almost a perfect result
however, I disabled all the modules just left autosandbox on, CCAV always used 0.1-2.5% of my CPU in my i7 host machine (avast installed). I was monitoring it for 1 hour, I never saw it dropped to 0%, never. I manually whitelisted all avast folders but no improvement after a few reboots. That's why I uninstalled it
comodo firewall blocked 100% and didn't cause the persistent CPU usage

 

[Werderforever]

I tested BD antiransowmare against petya, Teslacrypt, locky, (I don't have any CTB-locker sample) which they claim to protect against in the UI of the app
failure rate: 100%
missed all of them. Useless even my petya samples were very very old

That´s very disappointing for Bitdefender, who has a good name in the Antivirus branch. They promise something and it´s not true. Total useless this tool.

Many thanks again for your help and effort!

 

[Like a Western!]

it blocked 99.999% of ransomwares except MBR-type. Almost a perfect result

Comodo becuase of its HIPS , almost block everything otherwise ask about their action : )) not surprise

by the way Evjl's Rain is there any finall comparison for these ransomware tests.. ?

 

[Evjl's Rain]

Comodo becuase of its HIPS , almost block everything otherwise ask about their action : )) not surprise

by the way Evjl's Rain is there any finall comparison for these ransomware tests.. ?

what is the final comparison?

No, I disabled Comodo's HIPS. Just sandbox was enabled and the sandbox blocked everything

 

[Like a Western!]

well we just have your test in diffrent topics, it would be great if you create ( of course when you finished your all tests ) a topic for finall results and compare tested products results ... for example creat a Table:

[vendor] [number of malware tested] [blocked]
Comodo ..............20 ........................ 16
..
..
.


hope you got it

 

[Evjl's Rain]

well we just have your test in diffrent topics, it would be great if you create ( of course when you finished your all tests ) a topic for finall results and compare tested products results ... for example creat a Table:

[vendor] [number of malware tested] [blocked]
Comodo ..............20 ........................ 16
..
..
.


hope you got it

hmm, I tested them differently. I just counted the number of missed samples but I may consider that when there is nothing else fun to test