Reply to thread

Message

<blockquote data-quote="harlan4096" data-source="post: 802954" data-attributes="member: 36043">I will post here an extra test with KIS2019 I performed yesterday with the 2 samples (from dates 07/03/2019 &amp; 09/03/2019) that managed to encrypt system files in a Dynamic/On Execution BB Bonus Test with KES 11.1:Let&#039;s see now the same Dynamic/On Execution BB Bonus Test (in the same conditions) with KIS2019 and those 2 samples:In both cases the samples were already detected by signatures.In both cases File AV + Application Control (Host Intrusion Prevention in KES) + KSN were disabled.* (Hit) sql:[ATTACH]210377[/ATTACH][ATTACH]210375[/ATTACH][ATTACH]210376[/ATTACH]* (Hit) LockerGoga.exe:[ATTACH]210377[/ATTACH][ATTACH]210378[/ATTACH][ATTACH]210379[/ATTACH]It seems the BB modules in both products are working in different way against the same samples: KES 11.1 (Miss -&gt; encrypted files) &amp; KIS2019 (Hit -&gt; no files were encrypted) <img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite132" alt=":unsure:" title="Unsure&nbsp; &nbsp; :unsure:" loading="lazy" data-shortname=":unsure:" />.</blockquote>

[QUOTE="harlan4096, post: 802954, member: 36043"] I will post here an extra test with [B]KIS2019 [/B]I performed yesterday with the 2 samples ([B]from dates 07/03/2019 & 09/03/2019[/B]) that [B][COLOR=rgb(184, 49, 47)]managed to encrypt system files[/COLOR][/B][COLOR=rgb(184, 49, 47)][B] in a Dynamic/On Execution BB Bonus Test[/B][/COLOR] [COLOR=rgb(0, 0, 0)]with[/COLOR] KES 11.1: [B][COLOR=rgb(147, 101, 184)]Let's see now the same Dynamic/On Execution BB Bonus Test (in the same conditions) with KIS2019 and those 2 samples:[/COLOR][/B] In both cases the samples were already detected by signatures. In both cases File AV + Application Control (Host Intrusion Prevention in KES) + KSN were disabled. [B]* ([COLOR=rgb(65, 168, 95)]Hit[/COLOR]) sql:[/B] [ATTACH alt="210377"]210377[/ATTACH] [ATTACH alt="210375"]210375[/ATTACH][ATTACH alt="210376"]210376[/ATTACH] [B]* ([COLOR=rgb(65, 168, 95)]Hit[/COLOR]) LockerGoga.exe:[/B] [ATTACH alt="210377"]210377[/ATTACH] [ATTACH alt="210378"]210378[/ATTACH][ATTACH alt="210379"]210379[/ATTACH] [B]It seems the BB modules in both products are working in different way against the same samples: KES 11.1 ([COLOR=rgb(184, 49, 47)]Miss[/COLOR][COLOR=rgb(0, 0, 0)] ->[/COLOR][COLOR=rgb(184, 49, 47)] encrypted files[/COLOR]) & KIS2019 ([COLOR=rgb(65, 168, 95)]Hit [/COLOR][COLOR=rgb(0, 0, 0)]->[/COLOR][COLOR=rgb(65, 168, 95)] no files were encrypted[/COLOR]) :emoji_thinking:.[/B] [/QUOTE]

Verification