Malware Hub Report F-Secure 17.8 Beta - January 2020 Report

[harlan4096]

F-Secure 17.8 Beta - January 2020 Report

Due to the small number of samples used in this tests, you should take results with a grain of salt. We encourage you to compare these results with others and take informed decisions on what security products to use.

__

C: Clean / P: Protected / P - NC: Protected - Not Clean / I: Infected / E: Encrypted

* Dynamic BB Bonus Test (Real Time Protection Disabled)
* Partially Blocked
* BSR: Before System Reboot
* ASR: After System Reboot

January 2020	Samples Pack	Static Detection	Dynamic Detection	Total Detection	System Files Encrypted	2nd Opinion Scanners	System Final Status	Thread Link
02/01/2020​	8​	3 / 8​	1 / 4​	4 / 8​	Yes​	N/A​	I + E​	Post#3​
04/01/2020​	8​	7 / 8​	1 / 1​	8 / 8​	No​	C​	C​	Post#3​
06/01/2020​	2​	1 / 2​	0 / 1 1 / 1*​	1 / 2 1 / 1*​	No​	C​	I P*​	Post#6​
09/01/2020​	2​	1 / 2​	0 / 1 1 / 1*​	1 / 2​	No​	C (HMP NPE) I (WV)​	P BSR: I* ASR: P - NC*​	Post#6​
09/01/2020​	12​	5 / 12​	6 / 7​	11 / 12​	No​	C​	P​	Post#6​
10/01/2020​	2​	2 / 2​	2 / 2*​	2 / 2 2 / 2*​	No​	C​	C P*​	Post#4​
10/01/2020​	14​	10 / 14​	2 / 4​	12 / 14​	No​	C (HMP) I (WV NPE)​	BSR: I ASR: P - NC​	Post#5​
13/01/2020​	4​	3 / 4​	0 / 1 3 / 3*​	3 / 3 3 / 3*​	No​	C​	P P*​	Post#4​
13/01/2020​	7​	5 / 7​	1 / 2​	6 / 7​	No​	C (WV) I (HMP NPE)​	I​	Post#4​
13/01/2020​	2​	2 / 2​	2 / 2*​	2 /2 2 / 2*​	No​	C​	C P*​	Post#5​
15/01/2020​	1​	1 / 1​	1 / 1*​	1 / 1 1 / 1*​	No​	C​	C P*​	Post#5​
15/01/2020​	16​	6 / 16​	9 / 10​	15 / 16​	No​	C​	P​	Post#5​
16/01/2020​	1​	0 / 1​	1 / 1​	1 / 1​	No​	C​	P​	Post#3​
17/01/2020​	3​	3 / 3​	3 / 3*​	3 / 3 3 / 3*​	No​	C​	C P*​	Post#3​
17/01/2020​	20​	11 / 20​	5 / 9​	16 / 20​	No​	I​	BSR: I ASR: I​	Post#4​
19/01/2020​	2​	2 / 2​	2 / 2*​	2 / 2 2 / 2*​	No​	C​	C P*​	Post#5​
20/01/2020​	3​	3 / 3​	3 / 3*​	3 / 3 3 / 3*​	No​	C​	C P*​	Post#4​
21/01/2020​	13​	6 / 13​	3 + 1* / 7​	9 + 1* / 13​	No​	I (HMP) C (WV NPE)​	P​	Post#3​
22/01/2020​	2​	2 / 2​	2 / 2*​	2 / 2 2 / 2*​	No​	C​	C P*​	Post#3​
22/01/2020​	6​	2 / 6​	2 / 4​	4 / 6​	No​	C​	BSR: I ASR: P​	Post#5​
22/01/2020​	1​	1 / 1​	1 / 1*​	1 / 1 1 / 1*​	No​	C​	C P*​	Post#3​
23/01/2020​	1​	1 / 1​	1 / 1*​	1 / 1 1 / 1*​	No​	C​	C P*​	Post#3​
24/01/2020​	15​	7 / 15​	4 / 8​	11 / 15​	No​	I​	BSR: I ASR: I​	Post#3​
26/01/2020​	3​	3 / 3​	3 / 3*​	3 / 3 3 / 3*​	No​	C​	C P*​	Post#3​
27/01/2020​	11​	7 / 11​	0 / 4​	7 / 11​	No​	I​	BSR: I ASR: P-NC​	Post#3​
27/01/2020​	5​	5 / 5​	5 / 5*​	5 / 5 5 / 5*​	No​	C​	C P*​	Post#4​
28/01/2020​	1​	1 / 1​	1 / 1*​	1 / 1 1 / 1*​	No​	C​	C P*​	Post#3​
28/01/2020​	3​	3 / 3​	3 / 3*​	3 / 3 3 / 3*​	No​	C​	C P*​	Post#3​
30/01/2020​	4​	4 / 4​	4 / 4*​	4 / 4 4 / 4*​	No​	C​	C P*​	Post#3​
31/01/2020​	16​	9 / 16​	5 / 7​	14 / 16​	No​	I (NPE) C (WV HMP)​	BSR: I ASR: I​	Post#4​

 

[MacDefender]

I'm super curious what technique that malware pack uses to encrypt. DeepGuard is usually pretty sensitive especially in protected document locations, but it's a good reminder no behavior blocker is bulletproof.

 

[upnorth]

Hi guys on February I will stop testing for a while WiseVector StopX (until 2.5 stable version) and F-Secure beta.

I salute you as it been a pure pleasure watching the tests and follow along on the ride, even if it been a bit bumpy and F-Secure clearly failed hard in some tests.

Huge thanks! Your a rock for the MT community and very much appreciated.