Advice Request Did somebody test ESET's HIPS against ransomware?

[giulia]

hi

may i ask if somebody does test some variant of ransomeware against eset hips?

i would like to test some of them ,inside a virtual machine but i'm pretty scarry of them


thanks
eset hips include a new feature

 

[omidomi]

Yes I've test it ESET's HIPS, it's the worst...

 

[giulia]

Yes I've test it ESET's HIPS, it's the worst...

thanks!

 

[tim one]

The question is: can HIPS detects process hollowing?

"Process hollowing is a technique used by some malware in which a legitimate process is loaded on the system solely to act as a container for hostile code. At launch, the legitimate code is deallocated and replaced with malicious code."

More info:

Marco Ramilli's Blog: Process Hollowing

 

[SHvFl]

The question is: can HIPS detects process hollowing?

"Process hollowing is a technique used by some malware in which a legitimate process is loaded on the system solely to act as a container for hostile code. At launch, the legitimate code is deallocated and replaced with malicious code."

More info:

Marco Ramilli's Blog: Process Hollowing

I guess eset hips should protect against it.
HIPS Question - ESET Smart Security & ESET Internet Security - ESET Security Forum

 

[tim one]

I guess eset hips should protect against it.
HIPS Question - ESET Smart Security & ESET Internet Security - ESET Security Forum

Thanks, in fact usually the malware allocates memory for the new code, by using VirtualAllocEx.
This technique is widely used also by the ransomware so that are not detected by signatures or classical heuristics technology.

 

[giulia]

Yes I've test it ESET's HIPS, it's the worst...

hi
may i know which software was the best?
thanks

 

[Der.Reisende]

hi
may i know which software was the best?
thanks

Qihoo 360 Total Security is very strong against Ransomware, according to my own experience and to @cruelsister's reviews.
I haven't yet tested the new v9 of it however.

 

[RejZoR]

ESET's HIPS is a disappointment. Compared to better behavior blockers, it's hard to configure, it's clumsy and it doesn't really catch much without bombarding the user with questions.

 

[giulia]

Yes I've test it ESET's HIPS, it's the worst...

ESET's HIPS is a disappointment. Compared to better behavior blockers, it's hard to configure, it's clumsy and it doesn't really catch much without bombarding the user with questions.

hi
are there some tests about eset 10 vs ransomware ? videos or webpages with tests
thanks

 

[omidomi]

hi
are there some tests about eset 10 vs ransomware ? videos or webpages with tests
thanks

Malware Hub | malwaretips.com