Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Security
Video Reviews - Security and Privacy
RANSTOP against ransomware
Message
<blockquote data-quote="CalinGhibu" data-source="post: 612096" data-attributes="member: 60200"><p>I would not say it failed - the video does not show that.</p><p></p><p>When testing ransomware, you should not start multiple strains at the same time, because the result becomes irrelevant. Here is why:</p><p>Ransomware encrypts certain types of files. If you launch 4 variants, the first one which gets to encrypt the files will do so, while the rest may not. Ranswomare changes file extensions so subsequent ransomware will NOT encrypt the same file, generally - unless you use a variant that encrypts all files (without an extension filter). Having said that, in such a test chances are only ONE ransomware gets to do its job, while others look for files to encrypt.</p><p></p><p>The product does not detect signatures, it detects behaviors. If ransomware does not get to expose its behavior = encrypt files, it will NOT get detected. That is why from the video, only one threat is detected. </p><p>That is why [USER=7463]@cruelsister[/USER] launches ransomware one after another during her tests.</p><p></p><p>The video does not show results of encryption with other ransomware, nor recovery options. </p><p></p><p>We have tested the samples and we successfully block all ransomware. One of the files in the test, Cancer, is not ransomware - it is a virus that deletes files and renders the machine unusable - without asking for ransom as files cannot be recuperated. We did not block that during the tests as ransomware, we detect it as a suspicious mass delete operation, reported it as such, and backed up the files. The files it damages can be manually recovered.</p></blockquote><p></p>
[QUOTE="CalinGhibu, post: 612096, member: 60200"] I would not say it failed - the video does not show that. When testing ransomware, you should not start multiple strains at the same time, because the result becomes irrelevant. Here is why: Ransomware encrypts certain types of files. If you launch 4 variants, the first one which gets to encrypt the files will do so, while the rest may not. Ranswomare changes file extensions so subsequent ransomware will NOT encrypt the same file, generally - unless you use a variant that encrypts all files (without an extension filter). Having said that, in such a test chances are only ONE ransomware gets to do its job, while others look for files to encrypt. The product does not detect signatures, it detects behaviors. If ransomware does not get to expose its behavior = encrypt files, it will NOT get detected. That is why from the video, only one threat is detected. That is why [USER=7463]@cruelsister[/USER] launches ransomware one after another during her tests. The video does not show results of encryption with other ransomware, nor recovery options. We have tested the samples and we successfully block all ransomware. One of the files in the test, Cancer, is not ransomware - it is a virus that deletes files and renders the machine unusable - without asking for ransom as files cannot be recuperated. We did not block that during the tests as ransomware, we detect it as a suspicious mass delete operation, reported it as such, and backed up the files. The files it damages can be manually recovered. [/QUOTE]
Insert quotes…
Verification
Post reply
Top