Advice Request Need new computer security suggestion

[Shadowra]

Be careful with FS. The intrinsic ransomware protection leaves a bit to be desired from time to time, even though files encrypted were within protected folders (eg Pony). Better to use it with CF- at least here the encrypted files will only be within containment.

I'm bouncing on this, I just tested...
I didn't use Pony because the dropper didn't work unfortunately.

For this test, I got a dropper from the Pandora Ransomware.
I then modified the file a little bit (if you knew any, I repacked the malware with a Confuser) . F-Secure Database and DeepGuard did not block.
Honever, the anti-ransomware protection was useless. MP3 file, txt file and jpg file were encrypted....

 

[superleeds27]

I'm bouncing on this, I just tested...
I didn't use Pony because the dropper didn't work unfortunately.

For this test, I got a dropper from the Pandora Ransomware.
I then modified the file a little bit (if you knew any, I repacked the malware with a Confuser) . F-Secure Database and DeepGuard did not block.
Honever, the anti-ransomware protection was useless. MP3 file, txt file and jpg file were encrypted....

Ouch

 

[L0ckJaw]

G-Data all the way

The best G DATA of all time - Test our security software 2022

Every 6 seconds our experts register a new threat - convince yourself now of the multiple award-winning G DATA virus protection.

www.gdatasoftware.com

 

[SpiderWeb]

Kaspersky

Personally, switched to M1 Mac since I realized there is no security solution to Windows other than switching OS and CPU architecture.

 

[blackice]

There is no substitute for good computing hygiene and habits. The AV is just for accidents/rare occurrences. Nothing will save you from risky behavior, and with good computing hygiene you probably won't come across much ransomware in a home environment.

 

[SeriousHoax]

Your reason for changing AV doesn't seem plausible to me. You said the user disabled the AV before getting infected. If the user can disable ESET, then he/she might be able to disable any other AV. Even Comodo's auto containment/sandbox can be disabled manually. So unless you do what user Scirious suggested about password protecting your AV, I don't see how your problem is going to be solved by changing to a different vendor.
Let me know if I misunderstood something.

 

[tlacenka]

yes, you misundersood something...
i wrote what i have tryed on mine HOME computer and the reasons i dont want some security solutions
and i dont have trust to eset actually because of what happened in our WORK computer (which i dont use and i dont have any control over it)
smbdy asks why i dont trust eset - so i answered and i dont want to run it at mine home computer actually
so there are two computers, which i was talking about - i know i can disable anything on mine, but thats not the way how i use mine home computer, same as i dont download anything new - i dont have problem to pay for software (yes, there were long long time ago times, when i didnot have even legal bios), but those times are gone... just want something with CF or sandboxing..thats all btw and i have bought almost all of the sw i have wrote, that i have tryed - because i use it on other computers (parents etc), so money is not issue - the issue is, tthat i have not resource, when i try it on this computer...thats all (maybe mine english is really bad, butt this is how i can write ...it wont be better i think .)

 

[navidlukas]

Kaspersky

Personally, switched to M1 Mac since I realized there is no security solution to Windows other than switching OS and CPU architecture.

The M1 has a big security loophole, and Apple can't patch it | Digital Trends

MIT researchers have developed a new attack that exploits hardware on Apple's M1, bypassing the last line of defense for many software bugs.

www.digitaltrends.com

 

[Arequire]

The M1 has a big security loophole, and Apple can't patch it | Digital Trends

MIT researchers have developed a new attack that exploits hardware on Apple's M1, bypassing the last line of defense for many software bugs.

www.digitaltrends.com

MIT researchers say there isn’t a reason to be worried ... a software vulnerability must exist first for PACMAN to do anything.