Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 1021920" data-attributes="member: 32260">Please note, that the Real-World statistics in this thread cannot differ between Norton, Bitdefender, Avast, Kaspersky, and Trend Micro.We can conclude that Norton can be indeed the top AV because it uses Download Insight (reputation file lookup) in default settings. This can produce many false positives. Similar results (and false positives) can be seen for any popular AV when using Edge with enabled SmartScreen + PUA + SmartScreen for Explorer.The difference between Norton and other AVs is that Norton uses file reputation lookup in default settings, but other AVs do not. Anyway, blocking files by Norton is probably the most usable as compared to other solutions.There are also stronger possibilities (more false positives), for example:<ul>
<li data-xf-list-type="ul">tweaked Comodo ([USER=7463]@cruelsister[/USER] settings),</li>
<li data-xf-list-type="ul">tweaked Kaspersky (KIS in [USER=36043]@harlan4096[/USER]&nbsp; settings),</li>
<li data-xf-list-type="ul">tweaked Microsoft Defender with Smart App Control on Windows 11,</li>
</ul>A similarly strong protection to Norton can probably apply:<ul>
<li data-xf-list-type="ul">Microsoft Defender with advanced settings (ASR rules, etc.),</li>
<li data-xf-list-type="ul">Avast with enabled Hardened Mode.</li>
</ul>They can use file reputation lookup similarly to Norton, but only for EXE files. Post edited for more clarity.</blockquote>

[QUOTE="Andy Ful, post: 1021920, member: 32260"] [B]Please note, that the Real-World statistics in this thread cannot differ between Norton, Bitdefender, Avast, Kaspersky, and Trend Micro.[/B] We can conclude that Norton can be indeed the top AV because it uses Download Insight (reputation file lookup) in default settings. This can produce many false positives. Similar results (and false positives) can be seen for any popular AV when using Edge with enabled SmartScreen + [B][COLOR=rgb(184, 49, 47)]PUA + SmartScreen for Explorer[/COLOR][/B]. The difference between Norton and other AVs is that Norton uses file reputation lookup in default settings, but other AVs do not. Anyway, blocking files by Norton is probably the most usable as compared to other solutions. There are also stronger possibilities (more false positives), for example: [LIST] [*]tweaked Comodo ([USER=7463]@cruelsister[/USER] settings), [*]tweaked Kaspersky (KIS in [USER=36043]@harlan4096[/USER] settings), [*]tweaked Microsoft Defender with Smart App Control on Windows 11, [/LIST] A similarly strong protection to Norton can probably apply: [LIST] [*]Microsoft Defender with advanced settings (ASR rules, etc.), [*]Avast with enabled Hardened Mode. [/LIST] They can use file reputation lookup similarly to Norton, but only for EXE files. Post edited for more clarity. [/QUOTE]

Verification