Reply to thread

Message

<blockquote data-quote="Local Host" data-source="post: 938531">In Home AVs, you better off relying on Behaviour Blockers like System Watcher.I don&#039;t even need to go far to see both Kaspersky and WD in action on the Malware Hub, which confirms how poor WD is against scripts even with your configuration, in comparison to Kaspersky.We even had a recent example here, <a href="https://malwaretips.com/threads/drive-by-downloads-can-you-get-malware-just-from-visiting-a-website.107483/" target="_blank">Q&amp;A - Drive-by downloads: Can you get malware just from visiting a website?</a>Kaspersky blocked the custom script I wrote for testing that, while WD didn&#039;t even flinch as I expected, so much for that superior script protection you rely so much on.AMSI is pretty basic and it won&#039;t detect a good chunk of scripts, there&#039;s a good reason AMSI is complemented by Windows Defender ATP monitoring in the Enterprise, in the case of Kaspersky they have Adaptive Anomaly Control.</blockquote>

[QUOTE="Local Host, post: 938531"] In Home AVs, you better off relying on Behaviour Blockers like System Watcher. I don't even need to go far to see both Kaspersky and WD in action on the Malware Hub, which confirms how poor WD is against scripts even with your configuration, in comparison to Kaspersky. We even had a recent example here, [URL='https://malwaretips.com/threads/drive-by-downloads-can-you-get-malware-just-from-visiting-a-website.107483/']Q&A - Drive-by downloads: Can you get malware just from visiting a website?[/URL] Kaspersky blocked the custom script I wrote for testing that, while WD didn't even flinch as I expected, so much for that superior script protection you rely so much on. AMSI is pretty basic and it won't detect a good chunk of scripts, there's a good reason AMSI is complemented by Windows Defender ATP monitoring in the Enterprise, in the case of Kaspersky they have Adaptive Anomaly Control. [/QUOTE]

Verification