[CheckLab.pl] Test of the best solutions to protect workstations in micro and small companies

[Adrian Ścibor]

Dear MWT forum Readers.

In November 2019, the CheckLab.pl organization prepared a list of popular solutions to protect computers in micro and small enterprises. Among the tested solutions, there are 13 specialized top-notch products, and also one solution for big business — Comodo Advanced Endpoint Protection. The Microsoft’s product known as Windows Defender was also qualified for the test as an integral part of the Windows 10 system.

cc: @Andy Ful

The results of November 2019

CheckLab as the first organization in the word shows such detailed information from tests to all interested people. We share checksums of malicious software by dividing them into protection technologies that have contributed to detect and stop a threat. According to experts, this type of innovative approach of comparing security will contribute to better understanding of differences between available products for consumers and enterprises.

The chart and table with malware SHAs available at:

AVLab Cybersecurity Foundation

AVLab Cybersecurity Foundation was founded in 2012. Find out about our services for testing advanced security solutions.

checklab.pl

November 2019's report is published at:

AVLab Cybersecurity Foundation

AVLab Cybersecurity Foundation was founded in 2012. Find out about our services for testing advanced security solutions.

checklab.pl

 

[TairikuOkami]

Level 1 clearly shows the effectiveness of browser protection.
I had to check upon ESET, I did not even know, it had any.

End of Life | ESET Online Help

help.eset.com

 

[DDE_Server]

Could you consider testing Emsisoft Antimalare in any of future tests ?

 

[TairikuOkami]

Could you consider testing Emsisoft Antimalare in any of future tests ?

Do not want to spam, but there is currently a survey, what products want people to be tested on AV Comparatives.

Spoiler

Security Survey 2020

Take this survey powered by surveymonkey.com. Create your own surveys for free.

de.surveymonkey.com

 

[DDE_Server]

Do not want to spam, but there is currently a survey, what products want people to be tested on AV Comparatives.

Spoiler

Security Survey 2020

Take this survey powered by surveymonkey.com. Create your own surveys for free.

de.surveymonkey.com

View attachment 231148

but i know that Emsi left AV test & AV comparative iam taking about check lab tests ?

 

[RoboMan]

Wow, Leo from TPSC made it to the survey.

 

[MacDefender]

I am curious about the level 1 escapes. I am guessing products that perform HTTPS inspection are the ones that block level 1 attacks the best. IMO Microsoft and Chrome should provide some better APIs for browser extensions to hook into file downloads -- Windows Defender SmartScreen and the Chrome built in antivirus seem to be allowed to scan downloads for several seconds.


Speaking of that, are these browser features disabled? Windows SmartScreen isn't excellent but the Chrome built in AV seems surprisingly good.

 

[SeriousHoax]

Level 1 clearly shows the effectiveness of browser protection.
I had to check upon ESET, I did not even know, it had any.

ESET's web protection is better than any other AV in my experience.

Chrome built in AV seems surprisingly good.

Built in AV! I don't know about that but Chorme has some sort of cleanup tool that's powered by ESET.

Google Chrome Cleanup. Now powered by ESET

Google Chrome Cleanup uses ESET technology to identify and eradicate suspicious or unwanted programs on your Windows computer.

www.eset.com

 

[MacDefender]

ESET's web protection is better than any other AV in my experience.

Built in AV! I don't know about that but Chorme has some sort of cleanup tool that's powered by ESET.

Google Chrome Cleanup. Now powered by ESET

Google Chrome Cleanup uses ESET technology to identify and eradicate suspicious or unwanted programs on your Windows computer.

www.eset.com

Yeah I'm definitely not knocking ESET's underlying excellence, just saying that as a malware writer, the most obvious way to conceal your payloads from inspection is by tunneling them over HTTPS, especially true for malware that downloads additional payloads (not this test per se)

And yeah, Chrome pretty much is a party pooper any time I intentionally try to download malware. Either tells me that it's not common and is harmful, or is straight up malware. I've also heard that this is powered by ESET, which sounds like a mutually beneficial agreement for both parties! I bet this is how ESET gets its hands on a lot of early zero day malware too.

 

[SeriousHoax]

Good to know that. Surely both are benefiting from this partnership.

 

[plat]

I would like to compliment you on the graph depiction and color scheme. I used to post somewhere else about the more harsh red/yellow/green bar graphs of other comparatives that can easily mess with one's mind--eg: the more red in the bar, the more of a turn-off the product would appear to someone, even though the difference between that and the next guy would be maybe .2%. lol! Very nice and clean-looking.

(Microsoft? You OK? ConfigureDefender for everyone!)

 

[Andy Ful]

..
(Microsoft? You OK? ConfigureDefender for everyone!)

Forget about it. I am glad that MS can just tolerate CD.

 

[ForgottenSeer 823865]

Wow, Leo from TPSC made it to the survey.

View attachment 231149

Not very surprising, one of the few (maybe the only one) youtester that knows what he is talking about.

 

[Evjl's Rain]

Built in AV! I don't know about that but Chorme has some sort of cleanup tool that's powered by ESET.

Google Chrome Cleanup. Now powered by ESET

Google Chrome Cleanup uses ESET technology to identify and eradicate suspicious or unwanted programs on your Windows computer.

www.eset.com

it's there for fun and never works, IMO
I put a lot of malwares which I allowed them to infect the VM. I manually run chrome clean up -> it found absolutely nothing

I think that tool is only effective for malicious extensions or some sort of chrome hooking malwares

I turned it off because it consumes a lot of resources (CPU and disk IO) more than what it can do, at least for now

 

[Adrian Ścibor]

I am curious about the level 1 escapes. I am guessing products that perform HTTPS inspection are the ones that block level 1 attacks the best. IMO Microsoft and Chrome should provide some better APIs for browser extensions to hook into file downloads -- Windows Defender SmartScreen and the Chrome built in antivirus seem to be allowed to scan downloads for several seconds.

Speaking of that, are these browser features disabled? Windows SmartScreen isn't excellent but the Chrome built in AV seems surprisingly good.

As for Chrome - protection by Chrome is disabled, because it would block all malicious files. The purpose of testing is examine the protection of the installed antiviruses, not Chrome. Let's suppose that product X does not have an HTTP / S filter, e.g. SecureAPlus. Then all malware could be blocked in the browser, so Level 1 would be 100%, which is not adequate to real situation. In this way, we could not check the protection of SecureAPlus or similar programs.

Could you consider testing Emsisoft Antimalare in any of future tests ?

Of course. You can easily change the month on the charts. This year we tested Emsisoft product for sure.