App Review ESET Smart Security Premium & Shade Ransomware

[adnage19]

Really interesting video test - ESET vs undetected by signatures ransomwares



Not good, not bad. First sample detected without problems with the new Anti-Ransomware protection. Unfortunately, second sample was able to decrypt files, even if ESET made few alerts.

edited by mod: embedded the video.

 

[eXDj]

hm not 100% ok

 

[adnage19]

hm not 100% ok

There is no AV which has 100% proactive protection. And for Eset it's still nice score because they finally made an improvement when it comes to proactive protection. V9 probably wouldn't block the first sample.

 

[eXDj]

and why for B and KIS is 100% score i am fan ESET but ...

 

[adnage19]

and why for B and KIS is 100% score i am fan ESET but ...

KIS has better proactive protection but it doesn't detect 100℅ of malware too. There is no test of Kaspersky vs. the second sample used in Eset test.

 

[Evgeny]

Didnt watched, have you turned hips to interactive?

 

[Stas]

Didnt watched, have you turned hips to interactive?

No it was set to automatic.

 

[Stas]

Both samples were detected by signatures

 

[adnage19]

Both samples were detected by signatures

Nope, the first one was blocked by HIPS (Anti-Ransomware module). Thes second one was detected but files were already encrypted so ESET was too late

 

[Stas]

Nope, the first one was blocked by HIPS (Anti-Ransomware module). Thes second one was detected but files were already encrypted so ESET was too late

After executing second sample there was a popup from eset why he allow it what was it???

 

[adnage19]

After executing second sample there was a popup from eset why he allow it what was it???

I don't know exactly, what that was, but he denied it (grey button).

 

[Azure]

I don't know whether the result would have been different. Still, I think it would have been better to test ESET 10 on Windows 10. Since then you can have ESET full protection. Anyone that has ESET 10 on Windows 10 should be able to notice that on the Antivirus setting there's a setting for AMSI. That is only available for Windows 10.

With that said,unless someone does an intensive comparison test on ESET on both Windows 7(or 8) and Windows 10. We might not know how truly effective ESET can be.

 

[adnage19]

I don't know whether the result would have been different. Still, I think it would have been better to test ESET 10 on Windows 10. Since then you can have ESET full protection. Anyone that has ESET 10 on Windows 10 should be able to notice that on the Antivirus setting there's a setting for AMSI. That is only available for Windows 10.

With that said,unless someone does an intensive comparison test on ESET on both Windows 7(or 8) and Windows 10. We might not know how truly effective ESET can be.

Wow, I didn't know, that this feature is only on Windows 10. I'm curious if it wouldn't make a difference.

 

[cmdzero]

Thats interesting, I'm wondering if HIPS on Smart Mode would of made any difference.

 

[novocaine]

I don't know exactly, what that was, but he denied it (grey button).

no bro, actually he ignore it, because gray icon is 'ignore' while the blue is 'disconnect' or 'clean', so he allowed the second sample to run

 

[Azure]

Wow, I didn't know, that this feature is only on Windows 10. I'm curious if it wouldn't make a difference.

Yeah, you can see it in here
ESET Internet Security - Online Help
Working with ESET Internet Security > Computer protection > Antivirus
https://i.imgur.com/MhtoimQ.png
"Enable advanced scanning via AMSI – Microsoft Antimalware Scan Interface tool that allows application developers new malware defenses (Windows 10 only)."

Now would having that make a difference? I don't know. I think that's a question for expert testers like @hjlbx and @cruelsister.

 

[adnage19]

no bro, actually he ignore it, because gray icon is 'ignore' while the blue is 'disconnect' or 'clean', so he allowed the second sample to run

You are right, I just used Russian alphabet + Google Translate
It's interesting then why he ignored it. Unfortunately I completely don't know what kind of alert was that. Somebody should translate it

 

[novocaine]

You are right, I just used Russian alphabet + Google Translate
It's interesting then why he ignored it. Unfortunately I completely don't know what kind of alert was that. Somebody should translate it

 

[novocaine]

wow right this fake video !! but users ignore malware !!

we should know the entire warning first

 

[adnage19]

Ok, everything's right with the test, explanation: