App Review Kaspersky - Norton - ESET VS Malicous Scripts (LOLBins)

[Shadowra]

Content source

https://odysee.com/@Shadowra:f/Kaspersky---Norton---ESET-vs-Scripts:3

A totally different test in which we compare 3 antivirus programs: Kaspersky, Norton and ESET, against malicious scripts.

The antivirus programs have been left to default to scanning and executing the remaining scripts.

Spoiler: Results

Kaspersky : Kaspersky has good script detection capabilities. It leaves 2. The 1st one runs Powershell but doesn't do anything, I suspect the connection to the C&C server is blocked.
Machine clean

ESET: ESET has good detection too, but lets a piece of malware through (Latrodectus aka IceID) but blocks the connection to the server with its Web filtering.

Norton: Norton is the most disappointing. It struggles to catch up with attacks and ends up well infected.
It asks me to switch to NPE, which I do as it bombards me with alerts about GuLoader, which I accept.
The disinfection tools find nothing, but it's a failure for me.

@Azazel request

 

[Bot]

Thanks for the comprehensive test results. It's clear that each antivirus has its strengths and weaknesses. Kaspersky and ESET seem to have performed relatively well, while Norton seems to have struggled in this test. It's crucial to keep such tests in mind when choosing an antivirus. However, remember that no antivirus can provide 100% protection, so always be cautious online.

 

[BigWrench]

Great comprehensive test. I’m going to keep hanging with ESET.
Norton is just going backwards. I bet Avast would probably have done better.

 

[SumTingWong]

Can you test against Bitdefender, Avira, Emsisoft, F-Secure, Vipre?

 

[Shadowra]

Can you test against Bitdefender, Avira, Emsisoft, F-Secure, Vipre?

Yes mid or end of May

 

[Khushal]

Good Test

 

[ForgottenSeer 109138]

A totally different test in which we compare 3 antivirus programs: Kaspersky, Norton and ESET, against malicious scripts.

The antivirus programs have been left to default to scanning and executing the remaining scripts.

Spoiler: Results

Kaspersky : Kaspersky has good script detection capabilities. It leaves 2. The 1st one runs Powershell but doesn't do anything, I suspect the connection to the C&C server is blocked.
Machine clean

ESET: ESET has good detection too, but lets a piece of malware through (Latrodectus aka IceID) but blocks the connection to the server with its Web filtering.

Norton: Norton is the most disappointing. It struggles to catch up with attacks and ends up well infected.
It asks me to switch to NPE, which I do as it bombards me with alerts about GuLoader, which I accept.
The disinfection tools find nothing, but it's a failure for me.

@Azazel request

Interesting test. I do want to point out that more than likely that was Esets firewall that blocked that connection outbound since IcedID operates a proxy on port 49157 on infected computers and attempts to spread itself through the network from a compromised host.

 

[anirbandutta01]

A totally different test in which we compare 3 antivirus programs: Kaspersky, Norton and ESET, against malicious scripts.

The antivirus programs have been left to default to scanning and executing the remaining scripts.

Spoiler: Results

Kaspersky : Kaspersky has good script detection capabilities. It leaves 2. The 1st one runs Powershell but doesn't do anything, I suspect the connection to the C&C server is blocked.
Machine clean

ESET: ESET has good detection too, but lets a piece of malware through (Latrodectus aka IceID) but blocks the connection to the server with its Web filtering.

Norton: Norton is the most disappointing. It struggles to catch up with attacks and ends up well infected.
It asks me to switch to NPE, which I do as it bombards me with alerts about GuLoader, which I accept.
The disinfection tools find nothing, but it's a failure for me.

@Azazel request

Thank you @Shadowra for your excellent test. I'm happy with ESET NOD32 Antivirus & using Malwarebytes free as secondary scanner & Norton Power Eraser.

 

[JB007]

Yes mid or end of May

Hi @Shadowra
I cannot find this test; did you perform it yet?

 

[Shadowra]

Hi @Shadowra
I cannot find this test; did you perform it yet?

I had run it, but most of the malware no longer worked...
Unfortunately, I didn't get a call back for this video. I'll add it to my list.

 

[JB007]

I had run it, but most of the malware no longer worked...
Unfortunately, I didn't get a call back for this video. I'll add it to my list.

Thanks @Shadowra