Jump to content

cyberhash

Most Valued Members
  • Posts

    728
  • Joined

  • Last visited

  • Days Won

    30

Posts posted by cyberhash

  1. Honestly you would think after years of the same/similar threads that people would eventually understand that "Tests" don't equate to real world.

    It's a very rare occurrence when ESET products actually fails to protect people in "Everyday" use, hence why the forums are nearly devoid of any complaints regarding infection.

    The OP and others keep relating to tests but have never fell short of protection themself when using the products.

    Unless you get infected with something or fall victim to some kind of ransomware when posting "What If's" is fruitless and misleading to other users.
     

  2. 15 minutes ago, claudiu said:

    I wouldn't so sure: see the detection of Malwarebytes (everything disabled . only Antiransomware protection active )

    This is the purpose of "Test Files" : to test a capability .

    An answer as " we know that is a test file , that's why we did not detect it" is an insult to a paying user.

    MBAM.jpg

    Obviously we have different opinions on what this "Simulator" actually does or achieves.

    Like i said above, the application needs looked at properly to see if it does "what is advertised" on the label. From what i can see on the screenshots, every test just "encrypts files and deletes the originals". I could do exactly the same thing creating a password protected file using Winrar, which is legitimate.

  3. 6 minutes ago, claudiu said:

    This is the convenient answer , to justify failure. The Antiransomware protection on ESET is based on HIPS , which cannot distinguish between a simulator an a real threat (unless the simulator is on a white list)

    See here a test with Eicar, another "simulator"

    Yet, ESET will detect it as a normal threat.

     

    It's not a convenient answer , its a fact

    Eicar is a "test" file that pre-dates any HIPS type system. It's not a simulator.

    Never heard of "knowbe4" , the app needs torn apart to see how it works. But i suspect its nonsense that would return the same result when run under any security product......... the old term "Scareware" comes to mind ?

  4. The answer is in the name ....... It's a "Simulator" = not the real thing

    Firefox and chrome both block you from downloading this and on the "KnowBe4" webpage they acknowledge this and tell you how to get "Around" this.

    Why would ANY legitimate security vendor have to provide details on how to do this. Im sure they would be in contact with google and mozilla to have it unblocked if it was a mistake.



     

    ran.jpg

  5. 1 hour ago, claudiu said:

    Funny thing, some rules "allow this and that" are still enabled.

     

    By disabling the firewall , allow "everything" takes place. Not just "this and that"

    ESET Firewall and WFC are equally easy to use. WFC is not actually a dedicated firewall and just allows for easier use of windows own firewall.

    The firewall within EIS offers botnet and network attack protection and "MIGHT" offer greater protection than windows firewall does by default.

    https://support.eset.com/kb318/?viewlocale=en_US

  6. 22 minutes ago, claudiu said:

    Any firewall I had so far would mark somehow the invalid rules ( Windows Firewall Control, PC Tools Firewall Plus).

    How difficult would be for ESET to implement that.

     


    Yes it's a small annoyance that does not affect functionality, so after uninstalling an program i generally remove the rule i created manually at the same time so i don't end up with a number of redundant rules.

  7. 3 hours ago, alexander14 said:

    That’s is AV gives many detect and sample .  Please see page and result . This is important for Eset , how to working to send and result white or black .

    Color red -this is good detect ,   Green - white , or AV not detect and sample  to send sample.

    Virustotal provides a scan using multiple engines and includes ESET in the results.

    Plus anything you may "think" is suspicious , can be submitted to ESET via a few different methods. Via windows explorer (right click and submit for analysis)

    sub.jpg.fae80fe9c85ac48b65bbeb2c1401466d.jpg


    Or via email  https://support.eset.com/kb141/?locale=en_US&viewlocale=en_US

     



     

  8. I'm pretty positive the exact same thing was posted by someone on the forum back in FEB when these results were spotted.

    Av-Test seems to be a great source of information. That good it's not ran a test on windows 10 since December 2017 :lol: , so i would personally question their overall methodology and reliability.

    https://www.av-test.org/en/antivirus/home-windows/windows-10/

    MSE is never consistent in either its detection or false positives rate,  if you scroll through the (Av-Comparatives) chart for the whole of 2017 you will see that. Paid solutions are more consistent , regardless of who the vendor is.

×
×
  • Create New...