Reply to thread

Message

<blockquote data-quote="Anthony Qian" data-source="post: 976049" data-attributes="member: 91446">Thanks to the three-year giveaway, I have been testing F-Secure SAFE 18.2 over the last few days. Compared with my previous experience with F-Secure, I see significant improvements in terms of DeepGuard and F-Secure Security Cloud. DeepGuard, an effective behavior blocker, successfully blocked the so-called <a href="https://app.any.run/tasks/2b7a9ab6-857b-4ff6-aafd-01d0549587c7/" target="_blank">Coffee Ransomware</a>, which Comodo, Kaspersky&#039;s SW, HitmanPro Alert, ESET, Bitdefender&#039;s ATD, and Symantec&#039;s SONAR failed to block when the threat was not yet added to their Virus Database, indicating that DeepGuard is better than other well-known BBs in some cases. However, DeepGuard is not perfect. It was unable to block the <a href="https://www.virustotal.com/gui/file/4c88894f3db3123130bf766ea024aa8baba4e9e1bd36d6509f61477e9e9bd345" target="_blank">Remcos </a>malware and some PowerShell script malwares in my testing. In addition, I hope DeepGuard will be able to roll back any changes made by malware in the future.F-Secure Security Cloud, F-Secure&#039;s equivalent of Kaspersky&#039;s KSN and ESET&#039;s LiveGrid, has done a very good job at detecting new malwares that Avira engine failed to detect. Its detection rate has improved. However, unlike KSN and LiveGrid, we cannot check the files&#039; reputations in F-Secure Security Cloud.The biggest shortcoming of F-Secure is its VERY SLOW response to users&#039; sample submissions. In my experience, F-Secure&#039;s analyst replied my submission after five days, saying the files I submitted were malicious and had been blocked by F-Secure Security Cloud for immediate protection (???<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite132" alt=":unsure:" title="Unsure&nbsp; &nbsp; :unsure:" loading="lazy" data-shortname=":unsure:" />). But, as the C&amp;C server is down, this sample actually does no harm when it was blocked by F-Secure Security Cloud <img class="smilie smilie--emoji" loading="lazy" alt="😅" title="Grinning face with sweat&nbsp; &nbsp; :sweat_smile:" src="https://cdn.jsdelivr.net/joypixels/assets/6.6/png/unicode/64/1f605.png" data-shortname=":sweat_smile:" />.</blockquote>

[QUOTE="Anthony Qian, post: 976049, member: 91446"] Thanks to the three-year giveaway, I have been testing F-Secure SAFE 18.2 over the last few days. Compared with my previous experience with F-Secure, I see significant improvements in terms of DeepGuard and F-Secure Security Cloud. DeepGuard, an effective behavior blocker, successfully blocked the so-called [URL='https://app.any.run/tasks/2b7a9ab6-857b-4ff6-aafd-01d0549587c7/']Coffee Ransomware[/URL], which Comodo, Kaspersky's SW, HitmanPro Alert, ESET, Bitdefender's ATD, and Symantec's SONAR failed to block when the threat was not yet added to their Virus Database, indicating that DeepGuard is better than other well-known BBs in some cases. However, DeepGuard is not perfect. It was unable to block the [URL='https://www.virustotal.com/gui/file/4c88894f3db3123130bf766ea024aa8baba4e9e1bd36d6509f61477e9e9bd345']Remcos [/URL]malware and some PowerShell script malwares in my testing. In addition, I hope DeepGuard will be able to roll back any changes made by malware in the future. F-Secure Security Cloud, F-Secure's equivalent of Kaspersky's KSN and ESET's LiveGrid, has done a very good job at detecting new malwares that Avira engine failed to detect. Its detection rate has improved. However, unlike KSN and LiveGrid, we cannot check the files' reputations in F-Secure Security Cloud. The biggest shortcoming of F-Secure is its VERY SLOW response to users' sample submissions. In my experience, F-Secure's analyst replied my submission after [B]five days[/B], saying the files I submitted were malicious and had been blocked by F-Secure Security Cloud for [I]immediate protection [/I](???:unsure:). But, as the C&C server is down, this sample actually does no harm when it was blocked by F-Secure Security Cloud 😅. [/QUOTE]

Verification