Malware Bytes Realtime test against 1000+ recent samples

[kC77]

Hi been testing quite a few products with the same test in the past week, 1000+ samples ran one by one in via commandline in a test windows 10 VM.... adding a few fresh samples each day.... most "AV's" fail this test, most recent BIG failures

• Bit Defender Free (FAIL)
• Sophos Home Premium (FAIL)
• G-Data AV (FAIL)
• Norton (FAIL)
• ESET AV (FAIL)
• Kaspersky Cloud Free (Fail)

these were all compromised (Sophos actually missed a drive wiper malware and the test VM gets destroyed in around 5 minutes (retested this a week later and it still happens)
ESET... the test pictures get cryptolockered) Even Kaspersky Cloud Free fails and malware was left running & malicious connectivity to foreign countries (detected in IDS logs) - If you are running any of the above, MAKE sure you are running a second opinion scanner

Notable Passes with 100% protection from the samples -

• Hardened Windows defender (using configure defender in highest)
• F-Secure Safe
• Avast free

almost100% (mised 1 - Arcabit)


anyway I thought I'd give Malware bytes trial a go at the test this evening, and it did not disappoint, Nothing got through or ran, no IDS alerts triggered or external communication, there was an installer pop up that i just said no to... but there was no malware/ransomware etc running in process explorer, MBAM stopped it all in its tracks.

MBAM realtime passed a hard test that many other of the so called "Big AV's" fail at, so well done MBAM!! thats now 4 products that pass this test & these would be the only products (so far) I could seriously recommend.

Spoiler: process explorer - Post 1000 samples ran - Impressive!

gif of the test if you are bored enough! download dropbox (99mb)

well done to MBAM! you are keeping your userbase safe!

 

[Kongo]

Emsisoft would be interesting if you find the time

 

[kC77]

Emsisoft would be interesting if you find the time

I had already done it (I think!) But cant find any pics etc... i seem to remember it did well, but was inconclusive as it missed a few things... Ill redo it tonight and post up later on!

 

[Kongo]

I had already done it (I think!) But cant find any pics etc... i seem to remember it did well, but was inconclusive as it missed a few things... Ill redo it tonight and post up later on!

And if you could test Huorong someday it would be cool too. It has so many Firewall modules and quite a strong HIPS that I really would like to see in action once again. Thanks a lot for taking your time to share the results of your tests.

 

[Shadowra]

Good little test
(finally a fellow tester )

 

[Trooper]

Hi been testing quite a few products with the same test in the past week, 1000+ samples ran one by one in via commandline in a test windows 10 VM.... adding a few fresh samples each day.... most "AV's" fail this test, most recent BIG failures

• Bit Defender Free (FAIL)
• Sophos Home Premium (FAIL)
• G-Data AV (FAIL)
• Norton (FAIL)
• ESET AV (FAIL)
• Kaspersky Cloud Free (Fail)

these were all compromised (Sophos actually missed a drive wiper malware and the test VM gets destroyed in around 5 minutes (retested this a week later and it still happens)
ESET... the test pictures get cryptolockered) Even Kaspersky Cloud Free fails and malware was left running & malicious connectivity to foreign countries (detected in IDS logs) - If you are running any of the above, MAKE sure you are running a second opinion scanner

Notable Passes with 100% protection from the samples -

• Hardened Windows defender (using configure defender in highest)
• F-Secure Safe
• Avast free

almost100% (mised 1 - Arcabit)


anyway I thought I'd give Malware bytes trial a go at the test this evening, and it did not disappoint, Nothing got through or ran, no IDS alerts triggered or external communication, there was an installer pop up that i just said no to... but there was no malware/ransomware etc running in process explorer, MBAM stopped it all in its tracks.

MBAM realtime passed a hard test that many other of the so called "Big AV's" fail at, so well done MBAM!! thats now 4 products that pass this test & these would be the only products (so far) I could seriously recommend.

Spoiler: process explorer - Post 1000 samples ran - Impressive!

View attachment 265430

gif of the test if you are bored enough! download dropbox (99mb)

well done to MBAM! you are keeping your userbase safe!

Wow F-Secure doing well here. Was wondering about this suite of late. Was everything at default settings?

 

[SeriousHoax]

A tip for anyone playing the long GIFs: Play the GIF in Pot Player. Pot Player lets you play a GIF file similar to a video file. You can pause, skip forward, backward and everything.

 

[SeriousHoax]

Hardened Windows defender (using configure defender in highest)

Do you mean only MD+CD? Hard Configurator/Simple Windows Hardening wasn't installed?

 

[kC77]

Emsisoft would be interesting if you find the time

Emsisoft Antimalware test against 1000 Recent samples....

Was asked to do a quick test, so here it is, 1000+ recent samples from the past 10days, many have completely failed this test Bit defender Free, Kaspersky Free Cloud, Sophos Home, ESET AV Norton etc were totally compromised Anyway with bit defender free failing so badly, I was a bit concerned...

malwaretips.com

 

[Kongo]

Emsisoft Antimalware test against 1000 Recent samples....

Was asked to do a quick test, so here it is, 1000+ recent samples from the past 10days, many have completely failed this test Bit defender Free, Kaspersky Free Cloud, Sophos Home, ESET AV Norton etc were totally compromised Anyway with bit defender free failing so badly, I was a bit concerned...

malwaretips.com

Damn, that was quick. Thanks!

 

[Kongo]

Wow F-Secure doing well here. Was wondering about this suite of late. Was everything at default settings?

There aren't many settings that would impact protection I guess. F-Secure's settings are pretty basic.

 

[kC77]

Damn, that was quick. Thanks!

Wow F-Secure doing well here. Was wondering about this suite of late. Was everything at default settings?

Hi Yes there were no settings changed..... Install, update, run test

 

[kC77]

Do you mean only MD+CD? Hard Configurator/Simple Windows Hardening wasn't installed?

Hi yes sorry
HC with all SRP on, CD in Highest

 

[Trooper]

There aren't many settings that would impact protection I guess. F-Secure's settings are pretty basic.

I never tried it as far as I can recall. Was curious. Thanks man.

 

[Sunshine-boy]

thank you for your effort.

 

[simbatippe1234]

Bitdefender Total Security would be very exciting (for me) to try out, if you can find the time I would be extremely grateful

 

[HarborFront]

Hi yes sorry
HC with all SRP on, CD in Highest

So you are saying MD+CD+HC, right?

 

[OhioRebel]

Can you share the results for GDATA?

 

[Anthony Qian]

Hardened Windows defender (using configure defender in highest) will blocked almost anything unknown from running - not ideal.

F-Secure’s DeepGuard also tends to block unknown and rare softwares from running.

Based on the results, I think the samples used are quite fresh.

 

[L0ckJaw]

Can you share the results for GDATA?

App Review - Gdata Total Security 2022

Hello and welcome to the Gdata test! Gdata is a German company, quite well known, offering its security suite for years. Based on 2 Antivirus engines (Bitdefender and its own, CloseGap / GDATA Engine), the suite has evolved over the years. The interface still does not change... it dates from...

malwaretips.com