App Review ZoneAlarm Extreme Security Next Gen 2024 - With Malware Tests

[vonvon]

ZangClean cleans everything, even the license information, so if you reinstall some time later, a new license is used, customer support quickly fixes this little problem.

 

[Trident]

ZangClean cleans everything, even the license information, so if you reinstall some time later, a new license is used, customer support quickly fixes this little problem.

It is best to first uninstall the product, which frees up the license seat and then run the tool to clean up the gunk.

 

[TuxTalk]

With a little hindsight, the home screen only appeared until the first scan was done. Otherwise, still light and also at a very cheap price (€15.95 for 3 devices - €16.95 for 5 devices). Few false positives fixed once and for all.

Where did you find this price ?

 

[vonvon]

Here :

Renewal

Renew now and get a special price to crown your loyalty to us

www.zonealarm.com

They send a new 6 digits code.
You can directly desactivate automatic renewal.

 

[Trident]

Here :

Renewal

Renew now and get a special price to crown your loyalty to us

www.zonealarm.com

They send a new 6 digits code.

It’s what I used too.

 

[zidong]

AVG/Avast have strong records when it comes to protection. Both signatures and behavioural protection. I do agree they come bundled with bloatware, but this has nothing to do with protection level.

I think only AVG and Avast offer custom installation. This is a big PLUS if someone want to try 3rd party antivirus.

 

[Divine_Barakah]

I think only AVG and Avast offer custom installation. This is a big PLUS if someone want to try 3rd party antivirus.

Avg, Avast and G Data offer custom installation. I am not aware of any other solutions that offers that. Norton does not offer custom installation.

Emsisoft is bloat-free. Webroot is too.

 

[TuxTalk]

ZoneAlarm too

 

[Divine_Barakah]

it is insufficient and same goes for Trend.

Well, I have to disagree here. Trend Micro offers great protection. I know it's got mediocre signatures, but Hypersensitive mode, though it generates a high number of FPs, offers great protection. Its phishing protection is great too.

 

[Trident]

Well, I have to disagree here. Trend Micro offers great protection. I know it's got mediocre signatures, but Hypersensitive mode, though it generates a high number of FPs, offers great protection. Its phishing protection is great too.

That’s how I tested it recently and it failed miserably too, just like it has always been failing. On shadowra’s test it failed to block old ransomware with detection on VT 50/70. It did not offer to perform remediation for the ransomware.

 

[Divine_Barakah]

That’s how I tested it recently and it failed miserably too, just like it has always been failing. On shadowra’s test it failed to block old ransomware with detection on VT 50/70. It did not offer to perform remediation for the ransomware.

Well, it would be interesting to see TM fail when Hypersensitive mode is enabled.

Regarding Shadowra's tests. They're doing a great job but I have my reservations.

Anyway, I am eagerly waiting for your vids.

 

[ForgottenSeer 114834]

It includes the promoted evasion shield, which was set to “detect and remediate”. Webroot does not reveal the technicalities around it, but the 2 scripts were detected as PS/ObfuscatedURL.A which suggests that the shield looks at

• Unable to read a URL through regex (script is obfuscated) +
• Script interpreter connects to the network (observed either through user-mode hook or kernel driver, not sure).

Third one was not detected.

Unknown files undergo real-time analysis and scrutiny.

Suspicious files are executed in a controlled, isolated environment (semi-sandbox) to observe their behavior without affecting the system.

 

[Trident]

Unknown files undergo real-time analysis and scrutiny.

Suspicious files are executed in a controlled, isolated environment (sandbox) to observe their behavior without affecting the system.

No, they have no sandbox.

 

[Divine_Barakah]

Unknown files undergo real-time analysis and scrutiny.

Suspicious files are executed in a controlled, isolated environment (sandbox) to observe their behavior without affecting the system.

Supposing the infection bypassed the web filter (or browser extension) in the first place.

Honestly I find it amusing how almost all those who test antivirus products come up with a 500 or so samples store on a Network drive and they test them in bulk. I don't know how on earth this is supposed to reflect a real world scenario.

 

[Trident]

Supposing the infection bypassed the web filter (or browser extension) in the first place.

Honestly I find it amusing how almost all those who test antivirus products come up with a 500 or so samples store on a Network drive and they test them in bulk. I don't know how on earth this is supposed to reflect a real world scenario.

I tested Trend with 4 downloaded samples and it did not detect 3 of them, which were also posted with their hashes here, I can’t be looking for the post now. So not sure that it is an amazing product. One of them was very widely known.
It was in hypersensitive mode as always.

 

[Divine_Barakah]

I tested Trend with 4 downloaded samples and it did not detect 3 of them, which were also posted with their hashes here, I can’t be looking for the post now. So not sure that it is an amazing product. One of them was very widely known.
It was in hypersensitive mode as always.

Downloaded from where? I am not defending TM here or any other product. What I am trying to express is the fact that almost all security products behave in a way that would happen in a real world scenario.

It would be great to conduct ur tests. Waiting to see the vids.

 

[Trident]

Downloaded from where? I am not defending TM here or any other product. What I am trying to express is the fact that almost all security products behave in a way that would happen in a real world scenario.

It would be great to conduct ur tests. Waiting to see the vids.

They were downloaded through a sharing site, as I get them on my mac and upload them. This is very valid, users will be going around and downloading stuff. Attackers very frequently abuse trusted sharing websites to host their payloads.

Furthermore, malware with VT 50/70 should be detected no matter where it comes from. Otherwise, I’m sure we can all argue how effective the product is.

 

[Smoke]

Is there a way to make the Firewall/Application Control default block with user prompt? I can't seem to find anything.

 

[Trident]

Is there a way to make the Firewall/Application Control default block with user prompt? I can't seem to find anything.

Short answer, nope. Sorry.