Reply to thread

Message

<blockquote data-quote="Trident" data-source="post: 1098218" data-attributes="member: 99014">I downloaded his table, available here:<a href="https://dl.comss.org/download/COMSS.TV-Test_01-02_2024.xlsx" target="_blank">таблица результатов</a>And watched the ZoneAlarm review, here:[MEDIA=vk]hash=23c4039bcba2498a;oid=-24226685;vid=456239762[/MEDIA]The reason it is blacked out, is because some sort of blocker (blocked his keyboard and stuff) was activated.[ATTACH=full]285004[/ATTACH]ZoneAlarm left 96 files not processed, he checked the hashes and they were matching, which means the security solution did not process them.He bombarded ZoneAlarm with the remaining 96 malware files.On the video it can be seen that it was processing many samples, he should have allowed some time.Eventually, it would have been remediated, but given that a single one may take 1-1.5minutes to be properly removed, for all the samples he executed, it could have taken about 15-20 minutes.In addition, all his malware files were executables, that downloaded one by one or dropped on disk by archiver, download manager, other malware, etc. will be locked and emulated.As of the last 2 versions, ZoneAlarm allows files to manually be sent for emulation too.</blockquote>

[QUOTE="Trident, post: 1098218, member: 99014"] I downloaded his table, available here: [URL='https://dl.comss.org/download/COMSS.TV-Test_01-02_2024.xlsx']таблица результатов[/URL] And watched the ZoneAlarm review, here: [MEDIA=vk]hash=23c4039bcba2498a;oid=-24226685;vid=456239762[/MEDIA] The reason it is blacked out, is because some sort of blocker (blocked his keyboard and stuff) was activated. [ATTACH type="full" width="486px" alt="1724081797025.png"]285004[/ATTACH] ZoneAlarm left 96 files not processed, he checked the hashes and they were matching, which means the security solution did not process them. He bombarded ZoneAlarm with the remaining 96 malware files. On the video it can be seen that it was processing many samples, he should have allowed some time. Eventually, it would have been remediated, but given that a single one may take 1-1.5minutes to be properly removed, for all the samples he executed, it could have taken about 15-20 minutes. In addition, all his malware files were executables, that downloaded one by one or dropped on disk by archiver, download manager, other malware, etc. will be locked and emulated. As of the last 2 versions, ZoneAlarm allows files to manually be sent for emulation too. [/QUOTE]

Verification