Practical Response
Level 8
- Mar 10, 2024
- 359
Make sure to have in view connections via tcpview to see if it hammers the infection before transmission occurs, as that is most important.
Make your video test requests!
- Thread starter Shadowra
- Start date
Practical Response
Level 8
- Mar 10, 2024
- 359
@Shadowra
The below LOLBins list has been around since 2004 although modified and added server .exe's. It has been posted here before I think back some years. Its extensive and used by many that add LOLBins blocking in their applications.
Appguard, is not a install and test at default application. Its not designed to be run at default settings. It is designed to be placed on the system, locked down with no interaction from the "average users" to protect them from themselves. As any products that allow users "choices" is redundant as the user can simply click to ignore the warning if they want to run something bad enough, no matter how severe the warning looks. Locking the system ensures this will not be the case. Using parental controls of Appguard making a Superuser will allow you to set it up so the normal users can not change settings. It is not an easy application to set up and administer, most users lack the knowledge of the application let alone the operating system to know what and how to block. This leaves many users that claim Appguard not effective not only mistakenly wrong but silly because you can be sure they do not know how to use it claiming so.
Testing, can not be done with just a folder of samples in user space, as you will bore the crowd with nothing but "DOH" it wont run. You have to be very creative to test Appguard with simulated attacks. Not to mention there is no "trial" version to test at this point.
Apologies ahead of time for formatting and items being cut off since the website here limits ways to address such lists.
Azazel
Level 5
- Jun 15, 2023
- 237
Practical response AKA Ultimate vision, always fun to see a Chrome and Linux fan showing his love for Microsoft
we should all block the lolbin winword.exe (and excel and powerpoint and ...)
- Sep 2, 2021
- 2,319
I still have 2 videos to post and I'll take care of it, I haven't forgotten
I even prepared the way
(there won't be a D+2 test for this one, which is different )
- Sep 2, 2021
- 2,319
All comments are welcome, I read all your messages.
Concerning AppGuard, I have no experience of its use. I could test it, but it's an anti-exe.
Why not test it with other security software?
Nevertheless, I ask you to remain constructive and above all not to bicker in my requests, not because I ask for it, but it destroys the reading made by myself or the other members of this forum :/
As for the D+2 tests, this will come during May. Namely that I will be away for a few days at the beginning of May.
The next test will be Norton 360, it should be released on Wednesday or Thursday (this weekend, let me watch Coachella, already with the time difference I'm having a hard time xD )
Shadowra
Concerning AppGuard, I have no experience of its use. I could test it, but it's an anti-exe.
Why not test it with other security software?
Nevertheless, I ask you to remain constructive and above all not to bicker in my requests, not because I ask for it, but it destroys the reading made by myself or the other members of this forum :/
As for the D+2 tests, this will come during May. Namely that I will be away for a few days at the beginning of May.
The next test will be Norton 360, it should be released on Wednesday or Thursday (this weekend, let me watch Coachella, already with the time difference I'm having a hard time xD )
Shadowra
- Mar 30, 2022
- 231
@Shadowra
I became aware of the Cegis Cyber security program through AV-LAB.
avlab.pl
The program is based on the whitelist approach, similar to CyberLock. I would be very interested in a test. Has anyone ever looked into this program?
I became aware of the Cegis Cyber security program through AV-LAB.
Recent Results In January 2024 » AVLab Cybersecurity Foundation
Recent results of the Advanced In The Wild Malware Test, in which we regularly evaluate software to protect devices.
avlab.pl
Practical Response
Level 8
- Mar 10, 2024
- 359
This is a list of Windows binaries that are known to have vulnerabilities "CVEs" or often targeted or used by attackers. Using this for a block list does not mean one has to block everything on it. Anyone that has to use winword should harden it period.Practical response AKA Ultimate vision, always fun to see a Chrome and Linux fan showing his love for Microsoft
View attachment 282800
- Sep 2, 2021
- 2,319
@Shadowra
I became aware of the Cegis Cyber security program through AV-LAB.
The program is based on the whitelist approach, similar to CyberLock. I would be very interested in a test. Has anyone ever looked into this program?Recent Results In January 2024 » AVLab Cybersecurity Foundation
Recent results of the Advanced In The Wild Malware Test, in which we regularly evaluate software to protect devices.
I don't think there's a link to download it on their site :/.
- Mar 30, 2022
- 231
Please test the latest free version of : Avast, AVG, Kaspersky, Comodo Beta, Ahn Lab V3 Lite, Bitdefender free edition, Zone Alarm free antivirus+firewall against huge number of latest malware samples & all kinds of malicious & phising links.
Also test the latest paid version of : McAfee Total security, ESET Smart Security, Bitdefender Total Security, QuickHeal Total security, Avast & AVG Premium Security & Kaspersky Premium Security against all huge number of latest malware samples & all kinds of malicious & phising links.
Also test the latest paid version of : McAfee Total security, ESET Smart Security, Bitdefender Total Security, QuickHeal Total security, Avast & AVG Premium Security & Kaspersky Premium Security against all huge number of latest malware samples & all kinds of malicious & phising links.
Practical Response
Level 8
- Mar 10, 2024
- 359
@Shadowra probably be just as easy to put them all on at the same time then run that pack, time saving at least
- Jan 27, 2018
- 1,266
Wow, give the poor guy a break. Some of these were already tested if you look.
Last edited:
- Mar 2, 2023
- 800
Agree with @Digmor Crusher this would be a good place to start:
Video Reviews - Security and Privacy
Video reviews for security and privacy software.
malwaretips.com
- Sep 2, 2021
- 2,319
Most of the ones you mentioned have already been tested
Then, I can do a few but with time (like AhnLab, ZA, QuickHeal, K7).
(there's no point in testing the same antivirus 20 times)
But testing the latest versions with fresh malware samples and fresh malicious links is important & makes more sense if i am not wrong.Most of the ones you mentioned have already been tested
Then, I can do a few but with time (like AhnLab, ZA, QuickHeal, K7).
(there's no point in testing the same antivirus 20 times)
- Sep 2, 2021
- 2,319
Yes, but I only test in case of new versions which can be important (engine improvement, new features, major new build etc).
Some of the antivirus programs you mention don't have this. Others, I'll do because it's been a long time.
(Except for Avast, which will have a re-test).
Practical Response
Level 8
- Mar 10, 2024
- 359
Let me help you understand. Testing even at this level takes lots of time, resources and patience, especially for (and this here is a key word to understand) a "volunteer" to dedicate the time to making these videos. I mention this so as to not take away from his work with this next part.
That said, there is also the safety factor, which is why you do not see dedicated labs here providing true route of infection videos that would actually be more realistic and accurate as to a products abilities. If you could for example explain how the tester could execute a sample, let it openly establish connection with a command and control server yet contain it from infecting a network or a server, I'm all ears.
Yet without letting the samples do what they do naturally in the wild, the product can not do as "it's designed" and shine it's strengths and weaknesses properly. Hence making this testing inaccurate.
So enjoy the tests you do get from these volunteers and treat them with a grain of salt as the disclaimer states above. Understand it's not wise to base an opinion on the products abilities from these tests.although one does get a glimpse into the modules and workings of them.
- Feb 28, 2023
- 128
TrendMicro Machine Learning Engine
Only available at ApexOne/WorryFree, Not yet at PC-cillin.
Perhaps you can try comparing the detection rates with(ApexOne) and without(PC-cillin) ML?
Looks cool, I like geeky ##### like this.What else can you show ?View attachment 282833
View attachment 282834
TrendMicro Machine Learning Engine
Only available at ApexOne/WorryFree, Not yet at PC-cillin.
Perhaps you can try comparing the detection rates with(ApexOne) and without(PC-cillin) ML?
Last edited:
Similar threads
