- Content source
- https://odysee.com/@Shadowra:f/DrWeb-Security-Space-BETA:1
DrWeb is a Russian antivirus publisher, a compatriot of Kaspersky.
For several years, they have been offering an antivirus solution called Security Space to protect machines.
They are also known for their disinfection solutions called CureIT and provide some solutions to eradicate and decrypt certain ransomware.
In this test, we will observe how DrWeb succeeds or fails in protecting the machine against threats.
Please note: By default, DrWeb does not install its firewall. I installed it deliberately.
After that, DrWeb is no longer interactive and relies on rules. When running it for the first time, I allow the connection to see if the other modules react or not. If I see a second alert (or a different payload), I block the connection or create a blocking rule.
Interface :
The product interface has changed little since I last tested it. It offers a mini interface and then deploys its large interface. You can therefore see its various shields (Spider Guard, Spider Gate, etc.), which are its agents (resident protection, web filtering, etc.).
I leave everything at default, including the predefined rules for behavioral protection (called Katana; DrWeb also offers a version with only behavioral protection).
Resource consumption: It is lightweight but tends to slow down Internet browsing speed.
Web protection: 4,5/9
DrWeb blocks half of the malicious links, including one partially during installation (the dropper installed the NanoCore RAT), which was blocked by the anti-malware engine.
A fairly average result.
Fake crack : N/A
The sample is too old and the site that distributed it was down.
Skipped.
Malware Pack : Remaining 45 threats out of 85
Once again, DrWeb's anti-malware engine is very average, but the software will also suffer from bad luck.
During testing, DrWeb was unable to recover from its errors. Apart from the firewall, which tried to do what it could (it is preconfigured, so processes signed by Microsoft will pass without alert, such as LOLBins - wscript.exe and co), the machine was heavily infected afterwards, to the point of crashing completely. To continue the cleaning process, I had to restart the machine without videos.
Final scan :
DrWeb : 0
NPE : 25
KVRT : 17 (Memory Infected)
Final opinion:
DrWeb is a very average antivirus program. It does not evolve while malware is constantly evolving, remaining stuck in the past.
It offers good solutions, but they are underutilized. As a result, the antivirus program is completely outdated and unable to catch up with subsequent actions.
Not recommended.
@Tachikoma request
For several years, they have been offering an antivirus solution called Security Space to protect machines.
They are also known for their disinfection solutions called CureIT and provide some solutions to eradicate and decrypt certain ransomware.
In this test, we will observe how DrWeb succeeds or fails in protecting the machine against threats.
Please note: By default, DrWeb does not install its firewall. I installed it deliberately.
After that, DrWeb is no longer interactive and relies on rules. When running it for the first time, I allow the connection to see if the other modules react or not. If I see a second alert (or a different payload), I block the connection or create a blocking rule.
Interface :
The product interface has changed little since I last tested it. It offers a mini interface and then deploys its large interface. You can therefore see its various shields (Spider Guard, Spider Gate, etc.), which are its agents (resident protection, web filtering, etc.).
I leave everything at default, including the predefined rules for behavioral protection (called Katana; DrWeb also offers a version with only behavioral protection).
Resource consumption: It is lightweight but tends to slow down Internet browsing speed.
Web protection: 4,5/9
DrWeb blocks half of the malicious links, including one partially during installation (the dropper installed the NanoCore RAT), which was blocked by the anti-malware engine.
A fairly average result.
Fake crack : N/A
The sample is too old and the site that distributed it was down.
Skipped.
Malware Pack : Remaining 45 threats out of 85
Once again, DrWeb's anti-malware engine is very average, but the software will also suffer from bad luck.
During testing, DrWeb was unable to recover from its errors. Apart from the firewall, which tried to do what it could (it is preconfigured, so processes signed by Microsoft will pass without alert, such as LOLBins - wscript.exe and co), the machine was heavily infected afterwards, to the point of crashing completely. To continue the cleaning process, I had to restart the machine without videos.
Final scan :
DrWeb : 0
NPE : 25
KVRT : 17 (Memory Infected)
Final opinion:
DrWeb is a very average antivirus program. It does not evolve while malware is constantly evolving, remaining stuck in the past.
It offers good solutions, but they are underutilized. As a result, the antivirus program is completely outdated and unable to catch up with subsequent actions.
Not recommended.
@Tachikoma request
The DrWeb Security tests are very good. 
