Battle Planned: Real-world Test of Trend Micro, ZoneAlarm, Eset and Webroot

How to test?

  • Defaults

  • Tweaked


Results are only viewable after voting.
Compare list
ZoneAlarm, Eset, Webroot, Trend Micro
Platform(s)
  1. Microsoft Windows

simmerskool

Level 40
Verified
Top Poster
Well-known
Apr 16, 2017
2,913
This test will stay as planned strictly, maybe in the future we can test MS Defender or CyberLock.
understood, but then some future test will NOT be the same test which for me diminishes its value. That's one plus for labs like AV Labs pl, AVs get the same malware and test procedures.
CL is intended to run with your AV of choice, not "or"... it runs well with most AV. The other big factor for me, is AV system impact to the extent you can have objective values, and perhaps subjective, I appreciate your opinion.
 

Trident

Level 34
Thread author
Verified
Top Poster
Well-known
Feb 7, 2023
2,355
understood, but then some future test will NOT be the same test which for me diminishes its value. That's one plus for labs like AV Labs pl, AVs get the same malware and test procedures.
CL is intended to run with your AV of choice, not "or"... it runs well with most AV. The other big factor for me, is AV system impact to the extent you can have objective values, and perhaps subjective, I appreciate your opinion.
I will provide in the end of the test (to prevent someone from uploading the samples) all files related to the test. So if anyone wants to test additional AVs.

I have decided that the tables with malicious links and files will be hosted online. So a link will be provided.
 
F

ForgottenSeer 114834

Share with the vendor, shouldn't the vendor be sharing that with us, the users? Are they not keeping up with their own product, but launching it and saying, *"you all figure it out and get back to us with your results." Is a sad commentary of that vendor, no?

And what are we trying to turn this forum into, or at least the AV testing, into a white coat lab, sterile research center? But I get it, if you're going to do it, do it right to be useful for those here and visit this thread from a Google search etc.:)

*which tends to be Bitdefender, a lot of times the users ARE the beta testers, especially with their Password Manager and new Parental Controls "upgrade". They tell us how it's supposed to work with the articles submitted, but the users are the ones telling them the issues. They make it, say "here it is", and we figure it out, and raise a complaint on the forum.

I'm done, if you want to reply, that's fine, but I don't want to continue to highjack this topic :) Cheers :)
Let's not twist this. It's simple if you do not test the products full abilities you can not claim it fails. Otherwise you are spreading misinformation.

The Hub was about testing and reporting to vendors to help all users, otherwise what's the point of testing other than a pissing contest.
 
  • Like
Reactions: Divine_Barakah

Trident

Level 34
Thread author
Verified
Top Poster
Well-known
Feb 7, 2023
2,355
Let's not twist this. It's simple if you do not test the products full abilities you can not claim it fails. Otherwise you are spreading misinformation.

The Hub was about testing and reporting to vendors to help all users, otherwise what's the point of testing other than a pissing contest.
If by product's full abilities you mean HIPS rules, this is not the product's abilities - it is the user's abilities. Eset does not offer any package of pre-configured rules that can be download or otherwise imported to claim that we are testing Eset's abilities. If you have any specific rule set, you can provide it to me and I will test in on the side, but it will not affect Eset's overall verdict, because the non-american ZoneAlarm that you were extremely quick to poo-poo yesterday doesn't need 150 HIPs rules to protect you - it relies on a fully automated emulation.

You claimed that your favourite products (Eset and Webroot) are better, now you are asking me to spend 30 minutes on configuring modules, when the "low quality" ZoneAlarm is just install and forget.

If by full abilities you mean maxed out heuristics, if the vendor is so confident that these heuristics will run without causing FPs, then why they don't activate them by default? Years ago, Symantec was begging to get Norton tested with the aggressive set of heuristics and AV-Comparatives declined.
 

mlnevese

Level 28
Verified
Top Poster
Well-known
May 3, 2015
1,783
Let's not twist this. It's simple if you do not test the products full abilities you can not claim it fails. Otherwise you are spreading misinformation.

The Hub was about testing and reporting to vendors to help all users, otherwise what's the point of testing other than a pissing contest.
Yes, it failed under default settings. Have you ever worked with home users? They don't know and don't care about tweaking anything; they don't understand how it works.

The people who participate in forums like this are far from being the average home users, even those who are just beginning to learn at least showed some interest on how things work.

That's why I proposed a separate test where all products are tweaked, but don't call it real world, maybe advanced user test would be more appropriate.
 

Jonny Quest

Level 23
Verified
Top Poster
Well-known
Mar 2, 2023
1,212
Let's not twist this. It's simple if you do not test the products full abilities you can not claim it fails. Otherwise you are spreading misinformation.

The Hub was about testing and reporting to vendors to help all users, otherwise what's the point of testing other than a pissing contest.
Spreading misinformation? I think that's YouTube's job more than what happens here ;) :)

Is this The Hub? Sorry, you're amazingly intelligent, insightful, and I mean that, but at times it's maybe more than I personally need, at times I fell like we're being scolded on this forum.
So maybe it's a bit of a cop out on my end, but I want to enjoy this forum a little more....Ignored. Cheers :)

2024-08-13_11-32-49.png
 

Divine_Barakah

Level 33
Verified
Top Poster
Well-known
May 10, 2019
2,289
Let's not twist this. It's simple if you do not test the products full abilities you can not claim it fails. Otherwise you are spreading misinformation.
If the company behind a certain product chooses to promote the product with a set of default settings, this means that those settings are recommended or they would have advised users to change the X settings which is not the case. If a product fails the test on default settings, which the majority of users are using, then it is a fail no matter how you interpret that.
 
F

ForgottenSeer 114834

If by product's full abilities you mean HIPS rules, this is not the product's abilities - it is the user's abilities. Eset does not offer any package of pre-configured rules that can be download or otherwise imported to claim that we are testing Eset's abilities. If you have any specific rule set, you can provide it to me and I will test in on the side, but it will not affect Eset's overall verdict, because the non-american ZoneAlarm that you were extremely quick to poo-poo yesterday doesn't need 150 HIPs rules to protect you - it relies on a fully automated emulation.

You claimed that your favourite products (Eset and Webroot) are better, now you are asking me to spend 30 minutes on configuring modules, when the "low quality" ZoneAlarm is just install and forget.

If by full abilities you mean maxed out heuristics, if the vendor is so confident that these heuristics will run without causing FPs, then why they don't activate them by default? Years ago, Symantec was begging to get Norton tested with the aggressive set of heuristics and AV-Comparatives declined.
You are twisting things as well, I never claimed they were my favorite products, I stated that testing CIS with Cruelsis settings (modified from default) and testing the others at default make it a hypocrite test. Failing a product when you do not test true routes of infection or the products full abilities is misleading and provides false information to the readers.

Last but not least, this is not a social media site that hinges on popularity and look at me pissing contest, it's a security forum where users come for help, and are met with misleading views, fanboi opinions, and quite frankly, anything but help. I see multiple users crowd a thread and detail it so badly that the user looking for help is left confused. The users doing this spreading false information because things are not handle correctly here.

This thread and test sounds like giant waste of time and like other things will only mislead others.

Professionals my hind side.
 

Divine_Barakah

Level 33
Verified
Top Poster
Well-known
May 10, 2019
2,289
I just hate this attitude. I am using MB Premium which the majority of MT members do not see as an antivirus replacement. I have never tried to defend that or push other users to believe in what i believe. Everyone has the right to choose what works for them.

Now let us wait for the test and see how the three products perform. Then we can have a constructive discussion. I hope when Webroot fails, its fans do not come here and say hey you conducted the test in the wrong way.
 

Trident

Level 34
Thread author
Verified
Top Poster
Well-known
Feb 7, 2023
2,355
see multiple users crowd a thread and detail it so badly that the user looking for help is left confused. The users doing this spreading false information because things are not handle correctly here
You were criticising various tests for being unrealistic and now you want me to create HIPS rules as if the average user is an IT security professor with 3 books on malware published.
The way you change your opinion whenever and however is convenient for you, I'm gonna start thinking that you are pushing misinformation.

Now this is my last reply.
 

Trident

Level 34
Thread author
Verified
Top Poster
Well-known
Feb 7, 2023
2,355
I just hate this attitude. I am using MB Premium which the majority of MT members do not see as an antivirus replacement. I have never tried to defend that or push other users to believe in what i believe. Everyone has the right to choose what works for them.

Now let us wait for the test and see how the three products perform. Then we can have a constructive discussion. I hope when Webroot fails, its fans do not come here and say hey you conducted the test in the wrong way.
This is why I am querying the crowd before I do it. I could've outright published the test.
 
F

ForgottenSeer 114834

I just hate this attitude. I am using MB Premium which the majority of MT members do not see as an antivirus replacement. I have never tried to defend that or push other users to believe in what i believe. Everyone has the right to choose what works for them.

Now let us wait for the test and see how the three products perform. Then we can have a constructive discussion. I hope when Webroot fails, its fans do not come here and say hey you conducted the test in the wrong way.
You are correct no fanbois of webroot, I only stated test it as designed. Wonder why webroot banned trident with prejudice?
 
  • Like
Reactions: Divine_Barakah

Divine_Barakah

Level 33
Verified
Top Poster
Well-known
May 10, 2019
2,289
You are correct no fanbois of webroot, I only stated test it as designed. Wonder why webroot banned trident with prejudice?
Well, in almost every testing lab Webroot scored in the lowest ranks. I find it absurd that all tests are not compatible with Webroot. Maybe Webroot should change sth? MB for example was criticised as not being an antivirus replacement and some users said they'd prefer if MB had remained as a second opinion scanner. Guess what MB has did? They improved thge product and is still improving it. When was the last time Webroot has introduced any major changes?


And btw if you disgaree with the way MT users conduct test, please do your own and share a vid of the test in the way you see right.


Edit:

It is like a parent who says IELTS is not a realistic test for my son's mind does not behave as others' minds. You have to create a test that works in the same way as my son's mind does lol.
 

mlnevese

Level 28
Verified
Top Poster
Well-known
May 3, 2015
1,783
If this was a test for business-grade protection, I'd expect all products to be tweaked until they are analyzing every electron passing through the computer processors, or, at least, as if they were configured by a competent professional.

If a product aimed at the home market is designed to be used a certain way, then it should come preconfigured that way.
 

Divine_Barakah

Level 33
Verified
Top Poster
Well-known
May 10, 2019
2,289
If this was a test for business-grade protection, I'd expect all products to be tweaked until they are analyzing every electron passing through the computer processors, or, at least, as if they were configured by a competent professional.

If a product is designed to be used a certain way, then it should come preconfigured that way.
Well, products in business environments are configured by professionals and I believe security vendors do provide premium support for the fact business spend 10X the price compared to home users.
 

Trident

Level 34
Thread author
Verified
Top Poster
Well-known
Feb 7, 2023
2,355
If this was a test for business-grade protection, I'd expect all products to be tweaked until they are analyzing every electron passing through the computer processors, or, at least, as if they were configured by a competent professional.

If a product is designed to be used a certain way, then it should come preconfigured that way.
Indeed. Unrealistic would be to bypass modules, for example, product offers emulation (as Eset does too) but instead of downloading the file, I am using flash drives. Or I have disabled behavioural blocking, web filtering or any other component. Nothing is disabled here and attacks look like what attackers use every day.

But unless Eset can provide me with a package of HIPS rules, no rules will be created, apart from what the product automatically creates.
 

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top