AVLab Protection Test Against Drive-by Download Attacks (April 2017)

[WolfensteinXeen]

Very interesting test that includes home products as well as endpoints. As usual, results should be taken with a grain of salt. Bitdefender, Eset, Kaspersky and Norton did very well in home product and got a Best+++ score. It is also interesting (but not surprising) to note that there were no differences in protection between the free and paid versions of Avast, AVG and Avira.

You can read the test in PDF here.

 

[mekelek]

this is actually a pretty good test, but looking at all the static detections, the samples couldn't have been too fresh.

 

[Sunshine-boy]

I do not trust this polish lab
in every test, they did that Arcabit got highest scores just wtf?

 

[mekelek]

I do not trust this polish lab
in every test, they did that Arcabit got highest scores just wtf?

I looked over that Arcabit site with google translate, looks like your generic AV: sigs, firewall, BB
doesn't say about any 3rd party engine or machine learning or anything

so yea, weird.

 

[509322]

I do not trust this polish lab
in every test, they did that Arcabit got highest scores just wtf?

AVLab has decent credibility.

You can take your concerns directly to them and they generally reply.

 

[ravi prakash saini]

perhaps i missed it if any one who has read the article thoroughly can confirm if they checked windows defender against drive by download with or without smart screen or with or without internet explorer.

 

[Deleted member 178]

AVlab is Polish, Arcabit is Polish... make your own conclusions

 

[ravi prakash saini]

AVlab is Polish, Arcabit is Polish... make your own conclusions

So they want to polish our brain

 

[Sunshine-boy]

if you check in every test they did u can find Comodo Dr.web and Arcabit on top
maybe it's marketing for these products! but I'm not sure
Oh and sorry for my eng mistakes

 

[Arequire]

Strange that CCAV missed the first .bat file completely. The sandbox had the chance to stop various parts of the infection chain but didn't.
Thankfully it sounds like Comodo fixed whatever the problem was that stopped the sandbox working correctly.

Soware provider Comodo quickly implemented appropriate security rules for scripts and applicaons run by a PowerShell interpreter.