Battle Comparing Anti-Ransomware

[generalwu]

Hi All,

I'm currently using Avast AV Free along with Zemana Anti-Keylogger and recently I came across Kaspersky Anti-Ransomware which I'm curious if I were to use it to protect myself against Ransomware would be a waste of resources?

Thanks.

 

[bribon77]

I feel this maybe badly translated, that use the trducctor of Google.
what I want to say is that only Kaspersky blocks the Rasomwares.
AppCheck, acts as another way to let run the Rasomware but protects the system and leaves folders on all sides then restore them

 

[ForgottenSeer 58943]

@generalwu : Multiplicity | Software KVM Switch | Stardock

I was project lead/designer of Multiplicity when I was in upper management at Stardock. It was originally designed for gamers if you can believe that. I negotiated to have it bundled with Eve-Online at one point for multi-boxing. Then later it took off after being marketed to people like 911 call centers and such. Small world, eh?

Anyway, for most consumers/homes ransomware shouldn't be an issue. It's mostly targeted towards business/corporate and the vectors are mostly server based infrastructure and/or email clients. Using a Web Mail service, Libre Office instead of MSOffice, and a non-Adobe PDF viewer should largely eliminate most risk to ransomware. I haven't run into any consumers with Ransomware in a long time.

 

[Evjl's Rain]

I feel this maybe badly translated, that use the trducctor of Google.
what I want to say is that only Kaspersky blocks the Rasomwares.
AppCheck, acts as another way to let run the Rasomware but protects the system and leaves folders on all sides then restore them

yes that's how appcheck and kaspersky work

appcheck: after 20 files are encrypted => appcheck will be triggered a revert those changes
kaspersky: try to block before the file can do anything, if fails, it will try to revert but this is very limited

however, againts zero-day, appcheck is better
we already have an AV as a signature-based product => we need a good signature-less product, appcheck is a good one

 

[generalwu]

appcheck and kaspersky are very stable

appcheck > kaspersky: zero-day ransomwares. appcheck can revert most encrypted files, sometimes, it misses but files can be found in the backup folder
kaspersky (online only) > appcheck: a few day old ransomwares, MBR ransomwares

kaspersky has KSN (cloud) which can detect many ransomwares instantly. It has system watcher (a weaker version of the actual kaspersky suits) but it's much less effective than appcheck as malware hub tests proved it

another solution is 360 folder protector. it's not an antiransomware tool but it can backup files before any change applied. it can be used with other other tools in case antiransomware tools and AVs fail to protect, files will be safe (backed up) regardless of the infection

I can recommend kaspersky antiransomware + qihoo 360 folder protector = free. this combo is also great and your files will be aafe in most cases, better than appcheck free alone
appcheck pro can do everything: backup, protect MBR if you are willing to try and pay

360 folder protector is good if you know where to recover the files but not good for users friends who don't know anything about PC + you can't help them

Great explanation, thanks.

Does 360 folder comes as an standalone software or it comes along with 360 AV?

I feel this maybe badly translated, that use the trducctor of Google.
what I want to say is that only Kaspersky blocks the Rasomwares.
AppCheck, acts as another way to let run the Rasomware but protects the system and leaves folders on all sides then restore them

Again, great explanation. Thanks a lot.

I was project lead/designer of Multiplicity when I was in upper management at Stardock. It was originally designed for gamers if you can believe that. I negotiated to have it bundled with Eve-Online at one point for multi-boxing. Then later it took off after being marketed to people like 911 call centers and such. Small world, eh?

Anyway, for most consumers/homes ransomware shouldn't be an issue. It's mostly targeted towards business/corporate and the vectors are mostly server based infrastructure and/or email clients. Using a Web Mail service, Libre Office instead of MSOffice, and a non-Adobe PDF viewer should largely eliminate most risk to ransomware. I haven't run into any consumers with Ransomware in a long time.

I see, what you've said made sense too. Just that I've seen reports of consumer gotten ransomware too hence the precaution.

yes that's how appcheck and kaspersky work

appcheck: after 20 files are encrypted => appcheck will be triggered a revert those changes
kaspersky: try to block before the file can do anything, if fails, it will try to revert but this is very limited

however, againts zero-day, appcheck is better
we already have an AV as a signature-based product => we need a good signature-less product, appcheck is a good one

Also another great explaination.

Thanks guys, I think I gotten the answer.

I'll be installing AppCheck and monitor it's resource usage to see if it impacts my system.
If it's I'll probably remove it from my system.

 

[Evjl's Rain]

Does 360 folder comes as an standalone software or it comes along with 360 AV?

it is standalone program
360 Document Protector - the ransomware terminator

here is my review and a little guide how to use it

 

[generalwu]

it is standalone program
360 Document Protector - the ransomware terminator

here is my review and a little guide how to use it

Nice video review you've there, appreciated it.

But for now I'll keep AppCheck.