MRG Flash Tests 2011

Let us not forget Emsisoft, great software and good performance again

 

i dint forget .. i just took name of my favourite products

 

Congrats Zemana. Emsisoft continues its great performance.

 

Good 'ol MBAM does it again. Avira failing kinda surprised me, but I don't worry much about these tests. What gets failed one week will get passed the next.

 

Tell me about it.
MBAM's detection rate is too good not to have it running full time.
I just re-enabled the protection module.
Maybe I should turn off VIPRE!

 

MBAM Pro is the only real-time anti-malware I have running.
(I do on-demand scans with EAM Free (quick scan) and Hitman Pro which are also at the top of the charts with the MRG flash tests)

Sandboxie probably does the majority of the heavy lifting (such as it is) anyway.

 

Awesome, the top ones as always performing.
Nice surprise from KIS! Wonder if it was pure signatures/heuristics or it involved one of the many modules in KIS.

 

Wow except for a couple of bright spots the AV's were an epic fail in the latest test.

 

True, but take the tests for what they are, just a periodic, random test of a few samples. It's not a make or break deal (yeah, some here might strongly disagree, but not much can be done with those types).

 

Is that the most failure rate yet?

 

Seems that the last test was an "all or nothing" kinda thing. Wondering why that is.

 

Because of similar variants? These are added usually added by vendors as soon as a new unrecognized variant emerges.

 

In case anyone has missed it, here is MRG's summary of the test results to date:

http://malwareresearchgroup.com/malware-tests/flash-test-results/

 

Defensewall seems uber awesome (When i tried it 2 years ago i didn't like it was so quiet but i never knew it was so effective).

Anyways, i like setting up rules. In OA if you enable the whitelist after the first few boot ups theres almost no pop ups and i dont like that!!

 

Does MRG release the hashes for these samples they tested. I would be interested in replicating these results

Thanks,

Shane.

 

Shanep,

Do you remember from the SEP version 12.1 thread I had started that I wrote you that even with Insight and SONAR, Endpoint Protection new version 12.1 miserably failed my home tests against TROJAN RANSOM ?

Well, MGR Flash Tests results for 4 variants of this NASTY trojan have just confirmed what I wrote you here.

I still do not understand how you managed to make Norton 2011 and 2012 pass these tests against RANSOM...

But, to be apples vs apples and not apples vs oranges comparison, you should test SEP 12.1 instead. Do you have access to SEP installer being a Symantec employee?



Carlos

 

Have some doubts in MRG results? I don't. All logical. Blacklisting's dead. http://www.anti-malware.ru/forum/index.php?act=attach&type=post&id=6632

 

We get the actual samples. So far the ones we have missed were confirmed to be the malware listed in the test.

 

I don't get it, Ilya.
It that supposed to be a bad file that Norton is saying is okay?
What?

 

Page42,

Trust me, the file NIS did not detect is the evilest piece of malware I've ever come across with [excepting the infamous TDSS].

It distributes mainly on Russian porn sites so, whoever is looking for... “fun” in the wrong places may as well end-up with his computer/laptop held for ransom. Hence, the name: Trojan Ransom.

I have tested this nasty on VM against various AV's [Eset, Avast!, Avira, Kaspersky, Symantec, McAfee, Comodo, etc.] and, while sometimes some of these AVs may detect one variant, the authors of this piece of malware come up immediately with another one, this time, a new one that goes mainly undetected.



Regards,


Carlos

 

I don't think anyone on this forum would say that blacklisting is efficient for security.

 

Thanks for filling in the blanks for me, Carlos.

 

There was a Youtube from Britec that explains the removal of Ransomware. Not sure if it is what you are dealing with.

Code:

http://www.youtube.com/user/Britec09#p/u/0/3lkr_NXbCe4

 

There appears to be one and only one champion to date,
with 68 PASSES and 0 FAILS...

 

DW, MBAM, and EAM