App Review Trellix Endpoint Security

It is advised to take all reviews with a grain of salt. In extreme cases some reviews use dramatization for entertainment purposes.
Content created by
Shadowra

Shadowra

Level 36
Thread author
Verified
Top Poster
Content Creator
Malware Tester
Well-known
Sep 2, 2021
2,586
Hello and welcome to the Trellix test!
Trellix is a business-oriented antivirus.
Formerly owned by FireEye on the Bitdefender engine,
Trellix has merged with McAfee Enterprise.
Henceforth, the antivirus takes the look of McAfee and its engine.

The interface between the merger has not moved. The settings are very
settings are very numerous, which is very appreciable.

In terms of protection, Trellix is very good! It impressed me.
The McAfee engine has been well muscled against current malware.
Big defect on the other hand, it is very heavy on the system, I had
I had several RAM impacts which is a pity.
The analysis is also very long, it took 24 minutes for a quick analysis...



RAM Usage : Heavy
Malware URL test : 10/10 (All blocked)
Fake crack : 1/1 (detected)
Malware Pack : Remaining 15 files out of 231.
Excellent protection provided by Trellix & McAfee!
The antivirus defended itself well thanks to AMSI and its AI (JTI/Suspect).
Only ScreenConnect and a RAT passed, the system can be cleaned despite the infection.

Resistance to script attacks: Yes

Result :
Trellix: 1
NPE : 2
KVRT : 7 (KVRT indicates 12 but I counted only the present malwares, the cache of Edge are malwares that Trellix had detected)

Recommand : Yes
System Clean : System infected but can be disinfected
 

Shadowra

Level 36
Thread author
Verified
Top Poster
Content Creator
Malware Tester
Well-known
Sep 2, 2021
2,586
When you say heavy on RAM, does that also mean user has the sensation that it is slowing down the computer, or just using a lot of RAM, but then if it uses too much RAM it must slow down the computer, yes??:unsure:

Both :)
It is greedy in RAM and the computer is slowed down with the use
 

simmerskool

Level 36
Verified
Top Poster
Well-known
Apr 16, 2017
2,585
Both :)
It is greedy in RAM and the computer is slowed down with the use
Thanks! I totally appreciate all the videos!! I'm not sure how good a test would have to be to convince me to replace ESET with something else. It seems there are several good and comparable AVs. And I do play a little in my vmware, it's just so far I'm not convinced my vm is running as well as it should. maybe my VM expectations are not realistic.
Seasons Greetings.
 

Mahesh Sudula

Level 17
Verified
Top Poster
Well-known
Sep 3, 2017
825
JTI suspect is purely cloud based detection works on "file hash". Mcafee always had excellent real time threat data, their visibility and customer base is quite high next to Symantec.

But I wonder how would it be to test by disabling INET, that should stress it's proactive defenses to " actually work" (If and if they exist in first place) *

Is it possible to test? Curious on the result
 

Shadowra

Level 36
Thread author
Verified
Top Poster
Content Creator
Malware Tester
Well-known
Sep 2, 2021
2,586
JTI suspect is purely cloud based detection works on "file hash". Mcafee always had excellent real time threat data, their visibility and customer base is quite high next to Symantec.

But I wonder how would it be to test by disabling INET, that should stress it's proactive defenses to " actually work" (If and if they exist in first place) *

Is it possible to test? Curious on the result

I'm looking into this as soon as possible :)
 

Shadowra

Level 36
Thread author
Verified
Top Poster
Content Creator
Malware Tester
Well-known
Sep 2, 2021
2,586

lyldz

Level 3
Verified
Well-known
Jun 4, 2016
135
There used to be an unmanaged client. at least that's how I remember it, like symantec. can we use it like that now?
 
  • Like
Reactions: simmerskool

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

User Menu

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top