Forum Home
Press F1
 
Thread ID: 143754 2017-04-02 05:09:00 Ransomware questions Tony (4941) Press F1
Post ID Timestamp Content User
1433716 2017-05-17 22:06:00 More from Eset here forum.eset.com

Seem they block it but I would not run the WannaCry exe just to test it
Lawrence (2987)
1433717 2017-05-17 22:36:00 Interesting,Eset fails to protect you from WannaCry also Microsoft Security Essentials fails

malwaretips.com

Edit- In the wrong thread but similar

yes, and no.
They ran the test , deliberately with OLD AV definitions .
This tests how well AV programs block as yet unkown malware . That is more of a real world test .
One possible issue in the testing is that some AV is cloud based, so even using old AV sig's , would the tested AV just go on the cloud & detect via update sigs on the cloud making the test worthless ?

The results dont mean ESET wont now block wanacrypt. It means that ESET failed to block it before wanacry was known & sig's written to detect it.
Signature based AV is becoming more & more useless. By the time new sigs are written, the malware has spread across the world & is often too late.
Eset failed to block via behaviour analasys/heuristics .
From experience , ESET is not good at blocking as yet unkown malware. Cant comment too much on the other brands .
Also,in general, when you need to use freeware programs to clean up malware that paid AV cant clean, then we have an issue .

But whats the alternative.
Nod is reliable,wont bog down the system, has good support, and doesnt act as bad as malware like the freeware AV does (freeware AV popups, scareware, scams etc)

At the end of the day, its just one test.
Cant go by 1 batch of testing alone, needs to be confirmed by other companies testing , as there may be errors & bias in the testing methods.
1101 (13337)
1 2 3 4 5 6 7