Serious Discussion Turtle‘s Enhanced Realworld Tests ( updated )

[harlan4096]

It's not a beta or at least it's TR, but probably will be/it is already the final version, because it can be activated with commercial keys, beta can't be.

You can change temporally the Chinese UI into English with the key combination SHIFT + F12 (SHIFT + F5 back to original lang.)

 

[harlan4096]

If you can contact Kaspersky officials, I strongly recommend that you provide feedback on the issue with Nimbo C2. They can indeed generate VHO detection on the original Nimbo C2 exe, but it is not effective on the DLL. And unless BypassUAC is attempted, System Watcher will also be completely blind to Nimbo C2's activities, including keylog and file transfer.

If You can provide me, via pm, the sample/s, I can try to send a report.

 

[[correlate]]

Sincerely thank you.
I initially conducted tests to rank the effectiveness of various security software, but after my second test, WiseVector proactively contacted me and I discussed the testing process with them. Then, they released a new version to completely prevent Empire's file less attacks.
Afterwards, Huorong/QiAnXin also contacted me and I reviewed the entire testing process with them, believing that it would also be helpful to them. Now that's my main purpose, that's why I'm continuing this test. So starting from the third issue, I will not only publish the results on security forums in China, but also on MalwareTips, because I hope to write in detail how the samples were generated and what modifications were made, so that security software vendors can directly follow it to enhance their protection.
I can use these tools and hackers can also use them, so enhancing protection is not a bad thing for anyone, which is also the reason why I am disclosing it in detail.
I don't work for any security software vendor, and I'm not a full-time researcher. I just want to do my best to make the internet more secure. That's why I never provide ranking charts for the tests I publish, but I try to provide detailed explanations of the attack process and sample sources.

Because of this original intention, I seem to have overlooked the people who hope to use my tests as rankings, and I will pay attention to them in the future. Start by distinguishing between enterprise level and consumer level.​

Hello Mr @ShenguiTurmi
Can you do a test on Jiangmin program?
赤豹终端安全软件

 

[ForgottenSeer 103564]

Ahhh it must hurts when your baby is not treated fair.

When did MalwareTips become a daycare service for toddlers.

 

[ShenguiTurmi]

Hello Mr @ShenguiTurmi
Can you do a test on Jiangmin program?
赤豹终端安全软件

I am in mainland China, so I cannot purchase the Taiwan version. The activation binding device for the mainland version cannot be experienced by you personally.
As for the testing, I included it in this test, but it is not allowed to post non English videos here, so now only the results are available.
Simply put, it has machine learning, but it is not very strong (relative to DeepInstinct/CrowdStrike), has no behavior based protection, and has no script protection at all.

 

[[correlate]]

I am in mainland China, so I cannot purchase the Taiwan version. The activation binding device for the mainland version cannot be experienced by you personally.
As for the testing, I included it in this test, but it is not allowed to post non English videos here, so now only the results are available.
Simply put, it has machine learning, but it is not very strong (relative to DeepInstinct/CrowdStrike), has no behavior based protection, and has no script protection at all.

And this as well
micropoint
微点主动防御软件体验版

东方微点

 

[ShenguiTurmi]

And this as well
micropoint
微点主动防御软件体验版

东方微点

Its dead.
No any upgreade after 2023.
Now they are reunited with Wisevector in heaven.

 

[[correlate]]

I am in mainland China, so I cannot purchase the Taiwan version. The activation binding device for the mainland version cannot be experienced by you personally.
As for the testing, I included it in this test, but it is not allowed to post non English videos here, so now only the results are available.
Simply put, it has machine learning, but it is not very strong (relative to DeepInstinct/CrowdStrike), has no behavior based protection, and has no script protection at all.

Can you send me the video link
So that I can watch

 

[ShenguiTurmi]

Can you send me the video link
So that I can watch

Sure, I ll send via PM.

 

[Nikola Milanovic]

@Shadowra do you use Xcitium/Comodo?

 

[ShenguiTurmi]

@Shadowra do you use Xcitium/Comodo?

App Review - Comodo Firewall BETA 2024 (Modified Settings)

Comodo Firewall is a well-known and comprehensive free firewall. In this test, we chose not to install Comodo's anti-malware engine to see how the Sandbox and firewall would react. This isn't just another test, the aim is to see whether Comodo would protect us without anti-virus, especially with...

malwaretips.com

he already tested it.

 

[Shadowra]

@Shadowra do you use Xcitium/Comodo?

Nope, Eset

 

[Nikola Milanovic]

Nope, Eset

But you reccomend Xcitium

 

[Shadowra]

But you reccomend Xcitium

The anti-malware scan is not one of the best, but in terms of pure protection and unknown threats, yes, it is effective

 

[Kongo]

DeepInstinct > All

To be fair, Deep Instinct blocks basically everything (malicious / non-malicious) with most aggressive settings.

 

[Jengo]

This "test" totally not representable at all. Mix of Hard / Normal settings..... please learn how to test by contacting @Shadowra , your test is a waste of time ( and time to read )
Next please.....

 

[Kongo]

This "test" totally not representable at all. Mix of Hard / Normal settings..... please learn how to test by contacting @Shadowra , your test is a waste of time ( and time to read )
Next please.....

Even tho the test was rather sub-optimal I am sure it took a lot of time and effort for them. So no need to be that disrespectful.

 

[Jengo]

Even tho the test was rather sub-optimal I am sure it took a lot of time and effort for them. So no need to be that disrespectful.

Nothing disrespectful at all, just some friendly advise. Such a waste of time for them to do this and all is wrong. So thats why i suggest, learn from @Shadowra

 

[Kongo]

Nothing disrespectful at all, just some friendly advise. Such a waste of time for them to do this and all is wrong. So thats why i suggest, learn from @Shadowra

We probably have a different view on the word "disrespectful"

 

[likeastar20]

Nothing disrespectful at all, just some friendly advise. Such a waste of time for them to do this and all is wrong. So thats why i suggest, learn from @Shadowra

Damn, I didn't know @Shadowra had a degree in malware testing