App Review This ransomware bypass every antivirus and removes antivirus

[XylentAntivirus]

Please test K7 Ultimate edition.

Okay I will do it right now.

 

[Szellem]

It detects by cloud right now probably but it didn't got deleted because Andy explanation is correct and we need use another method like Defender remover. But can't detect ransomware payload for some reason (I don't know is he going to detect final payload right now but when I tested in past it didn't get detected.).

If you have the time and inclination, you could test it.
I think a lot of people would be interested in your work.

 

[XylentAntivirus]

If you have the time and inclination, you could test it.
I think a lot of people would be interested in your work.

I actually focusing on my antivirus instead of making viruses because it easy to destory something which someone created but it's harder to recreate it. But I can test it. Due to reported to Virustotal there race aganist time. I stuck at this stage right now:

 

[XylentAntivirus]

Ok it give me trial.

 

[XylentAntivirus]

It detected as suspicious

 

[Captain Awesome]

It detected as suspicious View attachment 287585

Thank you for testing K7. K7 BB is very strong. It improved a lot.

 

[Behold Eck]

Thank you for testing K7. K7 BB is very strong. It improved a lot.

Is it still as light on resources as it`s the lightest AV that I`ve ever had on my system?

Regards Eck

 

[Captain Awesome]

Is it still as light on resources as it`s the lightest AV that I`ve ever had on my system?

Regards Eck

Yes it's lightweight.

 

[Vitali Ortzi]

Is it still as light on resources as it`s the lightest AV that I`ve ever had on my system?

Regards Eck

Lighter then eset and majority of av software
But personally I think eset is a better balance as it's maybe heavier but has far better results in tests (only low end machines shouldn't use eset )
But I'm definitely keeping an eye on k7 it's my favorite Indian av software

 

[Vitali Ortzi]

Thank you for testing K7. K7 BB is very strong. It improved a lot.

Getting closer to the big boys they definitely did amazing work


So it has a price and performance advantage to other vendors but still a tier lower then the average av in terms of security so I can't really recommend it except maybe for low end machines maybe it's because it was optimized for the Indian market (lower performance requirement and low R&D investment to fit that market economy)

 

[Captain Awesome]

Getting closer to the big boys they definitely did amazing work


So it has a price and performance advantage to other vendors but still a tier lower then the average av in terms of security so I can't really recommend it except maybe for low end machines maybe it's because it was optimized for the Indian market (lower performance requirement and low R&D investment to fit that market economy)

100% agreed with you. In india big daddy Quickheal capturing most of the market with their marketing tactics and money. But one thing K7 is far ahead is their genius core team and better company to users communication. Hope that K7 is going like this.

 

[Dreams&Visions]

100% agreed with you. In india big daddy Quickheal capturing most of the market with their marketing tactics and money. But one thing K7 is far ahead is their genius core team and better company to users communication. Hope that K7 is going like this.

In terms of protection, regular Updates, upgrades and ease of use (autoupgrade), K7 outshines QH IMHO.
Even more in terms customer service and price (Infiniti)
That's the best marketing someone could wish for.

 

[Mr.NoName]

It's easy to intercept this type of attack—it's all about system visibility. If I may suggest, using NTP via a secure connection to the vendor's main servers is the first step. After that, monitoring message sectors for modifications is crucial, regardless of encryption. It's all about detecting the steps.
However, in the current antivirus (AV) solutions, there is no provisioning detection—only behavior-based and on-demand detection. We need more and more autonomous modules for decision-making based on facts, not just rules.

 

[Nikola Milanovic]

The malware is private malware like Solaris. I don't tested Comodo because he is clearly cheater due to auto containment but I bypassed him before.

 

[Mr.NoName]

Are there any enthusiasts and proactive individuals interested in working on a detailed project for detecting and blocking different types of ransomware?

 

[XylentAntivirus]

Are there any enthusiasts and proactive individuals interested in working on a detailed project for detecting and blocking different types of ransomware?

I working on Ransomware detection and that's one man project.

 

[XylentAntivirus]

View attachment 287598
View attachment 287599

If I change little bit then Comodo still going to say clean.

 

[Andy Ful]

Until the malware is non-prevalent, most AVs will block it only by a signature.