Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 805200" data-attributes="member: 32260">I think that it could make difference in &#039;DLL Injecting Attack&#039;.That is true. The problem can be with delivery method. But, this can be accomplished by using the known scripting methods. I performed AVs anti-script test (on max AVs settings) against the simple scripts which downloaded and next executed an EXE file. The results were not good for any AV (some were terrible) except mks_vir Internet Security (blocked Internet connection for WSH and PowerShell) and specially tweaked KIS (script Interpreters highly restricted by Application Control). I tested only eight AVs but the results would be similar, except when script Interpreters are specially restricted like in mks_vir or Kaspersky (ESET HIPS can do it).Tested Avs: Avira Free, BitDefender Free, BitDefender TS, F-Secure Safe, Kaspersky Free, Kaspersky IS,&nbsp; mks_vir IS, Sophos Premium. The test details and discussion can be seen on MT thread starting with post:[URL unfurl=&quot;False&quot;]https://malwaretips.com/threads/do-we-actually-need-so-many-security-programs.87717/post-774150[/URL]</blockquote>

[QUOTE="Andy Ful, post: 805200, member: 32260"] I think that it could make difference in 'DLL Injecting Attack'. That is true. The problem can be with delivery method. But, this can be accomplished by using the known scripting methods. I performed AVs anti-script test (on max AVs settings) against the simple scripts which downloaded and next executed an EXE file. The results were not good for any AV (some were terrible) except mks_vir Internet Security (blocked Internet connection for WSH and PowerShell) and specially tweaked KIS (script Interpreters highly restricted by Application Control). I tested only eight AVs but the results would be similar, except when script Interpreters are specially restricted like in mks_vir or Kaspersky (ESET HIPS can do it). Tested Avs: Avira Free, BitDefender Free, BitDefender TS, F-Secure Safe, Kaspersky Free, Kaspersky IS, mks_vir IS, Sophos Premium. The test details and discussion can be seen on MT thread starting with post: [URL unfurl="False"]https://malwaretips.com/threads/do-we-actually-need-so-many-security-programs.87717/post-774150[/URL] [/QUOTE]

Verification