Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 939917" data-attributes="member: 32260">Thank Malware Hub testing I confirmed which combinations of AV + SWH are strongest.First, I would like to recall that Kaspersky with Application Control can be set to work similarly to Trusted Application Mode, so all executables and some popular script types run in the Untrusted group if they are unknown in KSN. Such settings + disabling the option which trusts applications that have a digital signature are sufficiently strong and do not require additional protection via SWH.Generally, I recommend all other AVs that can apply astounding protection against executables (EXE, DLL, etc.) due to File Reputation in the Cloud:<ul>
<li data-xf-list-type="ul">Avast/AVG (Hardened Mode + CyberCapture)</li>
<li data-xf-list-type="ul">Microsoft Defender (MAX or INTERACTIVE Protection Level, CFA can be disabled)</li>
<li data-xf-list-type="ul">Norton 360</li>
</ul>The above AVs use different File Reputation features. The most comprehensive is Norton (Symantec) Insight.There are very small differences in the protection between all mentioned solutions:Norton + SWH ~ KIS (highly tweaked) &gt; MSD MAX + SWH ~ Avast/AVG HD &amp; CC + SWH</blockquote>

[QUOTE="Andy Ful, post: 939917, member: 32260"] Thank Malware Hub testing I confirmed which combinations of AV + SWH are strongest. First, I would like to recall that [B]Kaspersky with Application Control[/B] can be set to work similarly to Trusted Application Mode, so all executables and some popular script types run in the Untrusted group if they are unknown in KSN. Such settings + disabling the option which trusts applications that have a digital signature are sufficiently strong and [B]do not require additional protection via SWH[/B]. Generally, I recommend all other AVs that can apply astounding protection against executables (EXE, DLL, etc.) due to File Reputation in the Cloud: [LIST] [*]Avast/AVG (Hardened Mode + CyberCapture) [*]Microsoft Defender (MAX or INTERACTIVE Protection Level, CFA can be disabled) [*]Norton 360 [/LIST] The above AVs use different File Reputation features. The most comprehensive is Norton (Symantec) Insight. There are very small differences in the protection between all mentioned solutions: Norton + SWH ~ KIS (highly tweaked) > MSD MAX + SWH ~ Avast/AVG HD & CC + SWH [/QUOTE]

Verification