Reply to thread

Message

<blockquote data-quote="Trident" data-source="post: 1043977" data-attributes="member: 99014">I was a bit gentle to it in the beginning <img class="smilie smilie--emoji" loading="lazy" alt="😀" title="Grinning face&nbsp; &nbsp; :grinning:" src="https://cdn.jsdelivr.net/joypixels/assets/6.6/png/unicode/64/1f600.png" data-shortname=":grinning:" />It removed some dropped/downloaded malware.Then I got uninterested in this anymore. About 7-8 infections were merrily running with heuristics set to max. So not always tweaking this and that helps.In the Webroot case with tweaks and without, it’s just bad. And they are selling it for £65.I’m getting my ZoneAlarm back now.Apparently Sophos engine is capable of handling password-protected zips. In the files used to test Webroot (less than successfully) Sophos detected malware.[URL unfurl=&quot;true&quot;]https://www.sophos.com/de-de/threat-center/threat-analyses/viruses-and-spyware/Mal~DrodZp-A/detailed-analysis#:~:text=Mal%2FDrodZp-A%20is%20an%20archive%20with%20malicious%20content.%20It,seen%20as%20an%20attachment%20in%20spam%20email%20messages.[/URL][ATTACH=full]276073[/ATTACH]Additional script test (malicious document not emulated or cleaned, downloaded during the webroot time)[ATTACH=full]276074[/ATTACH][ATTACH=full]276075[/ATTACH][ATTACH=full]276076[/ATTACH][ATTACH=full]276077[/ATTACH][ATTACH=full]276078[/ATTACH][ATTACH=full]276079[/ATTACH][ATTACH=full]276080[/ATTACH]Btw this is how I like tests, with few samples every day so I can pick and understand them, otherwise too many samples at one is not as effective test.</blockquote>

[QUOTE="Trident, post: 1043977, member: 99014"] I was a bit gentle to it in the beginning 😀 It removed some dropped/downloaded malware. Then I got uninterested in this anymore. About 7-8 infections were merrily running with heuristics set to max. So not always tweaking this and that helps. In the Webroot case with tweaks and without, it’s just bad. And they are selling it for £65. I’m getting my ZoneAlarm back now. Apparently Sophos engine is capable of handling password-protected zips. In the files used to test Webroot (less than successfully) Sophos detected malware. [URL unfurl="true"]https://www.sophos.com/de-de/threat-center/threat-analyses/viruses-and-spyware/Mal~DrodZp-A/detailed-analysis#:~:text=Mal%2FDrodZp-A%20is%20an%20archive%20with%20malicious%20content.%20It,seen%20as%20an%20attachment%20in%20spam%20email%20messages.[/URL] [ATTACH type="full" width="329px" alt="1686500440923.png"]276073[/ATTACH] Additional script test (malicious document not emulated or cleaned, downloaded during the webroot time) [ATTACH type="full" width="339px" alt="1686501376792.png"]276074[/ATTACH][ATTACH type="full" width="484px" alt="1686501399895.png"]276075[/ATTACH][ATTACH type="full" width="335px" alt="1686501431285.png"]276076[/ATTACH][ATTACH type="full" width="343px" alt="1686501483934.png"]276077[/ATTACH][ATTACH type="full" width="338px" alt="1686501513699.png"]276078[/ATTACH][ATTACH type="full" width="336px" alt="1686501549831.png"]276079[/ATTACH][ATTACH type="full" width="482px" alt="1686501593453.png"]276080[/ATTACH] Btw this is how I like tests, with few samples every day so I can pick and understand them, otherwise too many samples at one is not as effective test. [/QUOTE]

Verification