Reply to thread

Message

<blockquote data-quote="kC77" data-source="post: 981583" data-attributes="member: 92796">ok so yesterdays test failed to quarantine anything, giving the benefit of the doubt, restored a fresh checkpoint, did a fresh install of g-data, this time i halfed the amount of samples from 1800 to 900, but this time, to test its resident protectionso 900 fresh samples from the last week in c:\samples and a fresh copy updated etc of g-data (antivirus only)the command used to fire off all the .exe in a folder:[ICODE]for %1 in (C:\samples\*.exe) do &quot;%1&quot;[/ICODE]first thing noticable is just how slowwwwww it is, but for the first hour it did detect everything and blocked everything, but then a few started slipping through..... i could also tell as my routers IDS was warning me about malicious traffic on my network.....I left it going for an hour and a half, it couldn&#039;t get through the 900 samples in that time so i stopped the test as it obviously failedheres process monitor just before stopping the test [SPOILER=&quot;infected&quot;][ATTACH=full]265352[/ATTACH] [/SPOILER][SPOILER=&quot;2&quot;][ATTACH=full]265354[/ATTACH][/SPOILER]and some of the IPS alerts from the gateway[SPOILER=&quot;IPS Alerts &quot;] [ATTACH=full]265353[/ATTACH][/SPOILER]Now before you slate me.... I did give it a second chance and it clearly failed (slowly!!)just to make you feel better though this exact set of samples &amp; test&nbsp; made Sophos Home, completely blue screen the VM &amp; then become unbootable withing 6minutes!Windows Defender (with configure defender) Aced it within 15minutes</blockquote>

[QUOTE="kC77, post: 981583, member: 92796"] ok so yesterdays test failed to quarantine anything, giving the benefit of the doubt, restored a fresh checkpoint, did a fresh install of g-data, this time i halfed the amount of samples from 1800 to 900, but this time, to test its resident protection so 900 fresh samples from the last week in c:\samples and a fresh copy updated etc of g-data (antivirus only) the command used to fire off all the .exe in a folder: [ICODE]for %1 in (C:\samples\*.exe) do "%1"[/ICODE] first thing noticable is just how slowwwwww it is, but for the first hour it did detect everything and blocked everything, but then a few started slipping through..... i could also tell as my routers IDS was warning me about malicious traffic on my network..... I left it going for an hour and a half, it couldn't get through the 900 samples in that time so i stopped the test as it obviously failed heres process monitor just before stopping the test [SPOILER="infected"][ATTACH type="full" alt="gdata2.png"]265352[/ATTACH] [/SPOILER] [SPOILER="2"][ATTACH type="full"]265354[/ATTACH][/SPOILER] and some of the IPS alerts from the gateway [SPOILER="IPS Alerts "] [ATTACH type="full" alt="g-data-duringtest1.jpg"]265353[/ATTACH][/SPOILER] Now before you slate me.... I did give it a second chance and it clearly failed (slowly!!) just to make you feel better though this exact set of samples & test made Sophos Home, completely blue screen the VM & then become unbootable withing 6minutes! Windows Defender (with configure defender) Aced it within 15minutes [/QUOTE]

Verification