hello and welcome to the PC Security today we'll be taking a look at a Fiji antivirus free one of her mod set discord pointed out that I haven't really checked this out in the last two years and while they are now owned by avast if you're not aware from a user perspective it's still a different product so I guess we'll put it through our battery of tests even though we know that the engines behind it and the technology is likely gonna be very similar to avast now I should also point out that given they're owned by avast you can expect a few similarities the slightly annoying ads that you see with regards to
protection that can be considered a little bit misleading sometimes and also not so good data privacy given that they sell your data to third parties but if you're okay with that you get computer protection which includes foil shield behavioral shield around some more protection network inspector all for free along with web and email so quite a few shields in here the UI itself is quite decent I would actually prefer this to avast although as you can see here it says we found four risks to your online security but this is basically just an ad as our main solution is to upgrade to Internet security to avoid these risks ignoring that our first databases are up to date we will go ahead and do another check for updates and then we will start our test so as you know here at the PC security we don't just talk about
products we actually test them against real malware so in here we've got 1339 items these are freshly collected and there's all sorts of threats in here including ransomware rpu peas trojans and we will automate the execution of all of these threats on this test system using our script called Malik's so now that we know we are fully up-to-date I'm going to get started with that essentially we're simulating a network attack vector where we navigate to our folder in Z shared and we've got all the threats located there not on the system so we're not disabling anything we're not copy-pasting anything but as soon as we launch Malik's top ey all these threats are essentially going to invade this system we'll see how a VG can protect us real-time protection is indeed turned on so let the testing begin so far so good we're
maintaining a detection of hundred percent but it's early days so we don't know how this is going to go in order to keep an eye on the resource usage during the test I'm also going to have task manager open and you can kind of look at a VG's resource usage throughout the entire test now this is going to take a while but given that this is an edited article we can do some magic let's speed it up shall we [Music] [Music] whoo-hoo looks like the test is finally complete that took fairly long 30 minutes to be precise but keep in mind that the resource usage was very low throughout the test so it seems like AVG prefers slower resource usage over faster decision-making so out of the 1339 files that we tried executing we
only have two misses with a final proactive detection of 99.85% they do after all have one of the largest threat networks in the world so you would kind of expect their detection ratio to be up there this doesn't really tell us about their behavioural blocking capabilities so we're going to do one more test after this to figure that out but before that I'm just gonna do a second opinion scan with hitman Pro some forensics on the system to see if any of these 2 meses naturally resulted in persistent threats hitman pro didn't flag anything other than the suspicious driver which is likely just a false positive so
we'll move on Auto runs does reveal a sketchy item here called web Explorer fortunately it does seem like this item was later removed by AVG because there's a fall not founder when you look at the image path so if anything we've got some traces on the system but for the most part it is clean now we're going to do a quick ransomware test with some popular variants that you might have heard of like wanna cry Patea all the rest these are of course well known threats and should be picked up by the signatures but we'll go ahead and try to test the behavior blocker here by going into computer and disabling the file
shield so what this is intended to do is prevent the signatures from interfering so we can actually see if the behavior shield and the ransomware protection is able to deal with the threats that we're going to throw at it now essentially we're trying to simulate an attack with similar ransomware as the infamous threats from the past when the product does not have Singh for them we will use the same Mallik script to automate the process so we just need to type Python I like stop py and go ahead with a similar test now of course we are going to see a lot more missus that's just because we are looking at the reactive defenses here to some extent we're looking at the behavioral blocking component however the main
thing here is not really the detection ratio you can ignore that entirely but we're going to see if the ransomware is able to infiltrate the system and do any real damage as you can see the behavior blocker is blocking these apps but we have definitely quite a few rounds and we're variants executing trying to make copies on the desktop we'll see if any of our data is affected or encrypted I think that's the main thing here we go into our folders let's see if we have documents and ok so it says your files are
encrypted but if we actually open the document our data is safe that is indeed good news let's give this some more time though and get back to it so the ransomware has had time to do its mischief and then we'll see if our data is still safe alright so let's have another look at the system so AVG is blocking a lot of these threats using IDP or IDP generic detections that is great to see because IDP or identity protection is kind of the classic AVG shield that used to be there with the older versions it's nice to see that they've maintained that and the same naming scheme it always used to be a decent behavior
blocker but it does look like it's blocking most of the ransomware threats here if we take a look at our data again our documents still seem to be doing fine I don't think any of our data is actually encrypted here if we look at pictures our pictures are fine as well however the data on the desktop might have been affected so I'm pretty sure our icons here were effect we've got ransom messages on the desktop and we just had a desktop background changed looks like Windows Explorer has been deleted as well so it seems like a VG's ransomware protection component tried to protect the data in our documents and pictures folder but elsewhere on the system ransomware is still wrecking havoc all of the threats were not successfully blocked by an IDP or the behavior shield and again our data is still there everything's fine except the desktop backgrounds changed and the data on the desktop seems to be encrypted so if
you had any important documents on your desktop those would be gone to oblivion by all this ransomware oh and by the way I forgot to mention if we look at our actual shared folder it seems the data here has been obliterated not just that we've also got copies of ransomware scripts and all sorts of things in here it seems some of the ransomware created its own executables and then that was encr
threats would be spreading laterally at this point infecting other systems on the network destroying falls everywhere and while AVG might protect a couple of folders that if things are essential everything else is going to be burned up so what can I say for the defense is overall maybe three point six not great not terrible if you don't get the meme that's not a good connotation so it's definitely not a good result in the second part of the test but hey I guess it's not terrible for free AV let me know what you think in the comments below so there you have it those are my final thoughts on AVG Antivirus free but I hope you enjoyed this article don't forget to like and share if you enjoyed it and subscribe to the PC security
for more amazing cybersecurity content check out our website the PC security comm there's a lot of exciting stuff there and if you'd like us to assist in the cybersecurity of your business or get evaluated feel free to reach out join our discord community if you just want to hang out and have fun this is Leo thank you so much for watching and as always stay informed stay secure
Read More Clcik Here:
تعليقات
إرسال تعليق