App Review Kaspersky IS vs Ransomware ( The PC Security Channel)

[dark_wielder]

 

[miguelang611]

Pretty impressive results
And that's even without harlan4096 harden config for protected folders! Great!

 

[BoraMurdar]

Can @harlan4096 explain what happened here?

 

[toto_10]

Thanks for sharing the video

 

[harlan4096]

Can @harlan4096 explain what happened here?

Do You mean about getting better result with FileAV + KSN disabled?

Even disabling both modules, still UDS (Urgent Detection System) remains working and using cloud

 

[BoraMurdar]

Do You mean about getting better result with FileAV + KSN disabled?

Even disabling both modules, still UDS (Urgent Detection System) remains working and using cloud

Yes. How is it possible? Could it be that cloud picked up what definitions missed and at the same time cloud is kinda dissabled when file AV is on?

 

[harlan4096]

Yeah probably or maybe a question of priority

Sometime ago I realized that disabling KSN setting does not disable fully the cloud features of the product, UDS still works and remains protecting the system, and it seems can't be disabled unless you go offline or probably disabling also System Watcher, but never tried...

 

[miguelang611]

Yeah probably or maybe a question of priority

Sometime ago I realized that disabling KSN setting does not disable fully the cloud features of the product, UDS still works and remains protecting the system, and it seems can't be disabled unless you go offline or probably disabling also System Watcher, but never tried...

Does this means that disabling KSN just impacts the rules that Application Control charges?
Or event they still work?
Thank u for the great info!

 

[The Ordynary]

Is the best antivirus in the world today, there is no doubt, complete in every way, it just needs to be a little lighter for weak PCs. otherwise, without words.

 

[Evjl's Rain]

Does this means that disabling KSN just impacts the rules that Application Control charges?
Or event they still work?
Thank u for the great info!

yes, application control gets the app rules/reputations/ratings from KSN. If you disable KSN, application will malfunction a bit
When you disable KSN after something is already detected by KSN or KSN-dependent modules, a reboot is a must to remove the cache => won't be detected by KSN/UDS any more

 

[miguelang611]

yes, application control gets the app rules/reputations/ratings from KSN. If you disable KSN, application will malfunction a bit
When you disable KSN after something is already detected by KSN or KSN-dependent modules, a reboot is a must to remove the cache => won't be detected by KSN/UDS any more

Thank u for the info.
As a user of KTS, I will keep KSN, but KSN seems pretty useless for a KSC Free user then.

 

[SeriousHoax]

but KSN seems pretty useless for a KSC Free user then

No it's not. KSC Free uses KSN too for checking the reputation of a file.

 

[miguelang611]

No it's not. KSC Free uses KSN too for checking the reputation of a file.

Oh well, that's great to know as well
So basically, KSN makes the "recheck" appart from "File antivirus" heuristics, before executing the file, where System Watcher kicks in, right?
Sorry for the questions, I'm new to Kaspersky, and while I'm pretty happy, I didn't find much info about how KSN really works
Cheers!

 

[Mariihh]

No surprise to me, although I don't trust his privacy too much and it has always affected the speed of my system while surfing the internet, he remains Jason Voorhees against digital threats.

 

[fabiobr]

ANY security software says "disabling real time protection is going to let your PC unprotected" you don't have to explain the HOME USER how modules works.

Dumb.

 

[SeriousHoax]

Oh well, that's great to know as well
So basically, KSN makes the "recheck" appart from "File antivirus" heuristics, before executing the file, where System Watcher kicks in, right?
Sorry for the questions, I'm new to Kaspersky, and while I'm pretty happy, I didn't find much info about how KSN really works
Cheers!

Yes. File antivirus checks newly created files and also on access by its signatures and light heuristics. Upon execution a more deep heuristic scan is performed as well as checks the reputation on KSN. System watcher is a post execution based module that always monitors activity of files and if it finds something suspicious then stops the process tree and tries to rollback all the actions performed by that malicious process.

 

[The Ordynary]

Using Kapersky on old ramsonware is like hiring a professional boxer to hit a child.
Thing is scary effective and you can almost hear the malware cry

 

[James246]

My guess is the basic Kaspersky Anti Ransomware Tool will also have a very impressive result in this test

 

[Tutman]

Is the best antivirus in the world today, there is no doubt, complete in every way, it just needs to be a little lighter for weak PCs. otherwise, without words.

Very impressive! I just went ahead and switched back to the free version myself yesterday.

 

[The Ordynary]

Very impressive! I just went ahead and switched back to the free version myself yesterday.

kaspersky improved a lot after launching its free version, increased its signatures considerably, mainly Pups who was his weakness, alido to one of the best behavior modules on the market,