AV-C: Proactive protection against the WannaCry ransomware

petr0vic

The WannaCry ransomware has been a major news story over the last few days. It has infected hundreds of thousands of computers worldwide (mostly in Russia), including some well-known companies and institutions. All the programs in our public Main Test Series now detect the WannaCry malware samples by means of signatures, but we decided to find out which of these programs would have blocked the malware proactively, i.e. before the the outbreak started and the malware samples became known. We ran a proactive protection test, i.e. we used vulnerable Windows 7 systems with definitions prior to May 12th. A WannaCry malware sample was then executed on offline systems. The list below shows which of the tested programs would have protected the system, and which did not.

Adaware Pro Security	Protected
Avast Free Antivirus	Protected
AVG Free Antivirus	Protected
AVIRA Antivirus Pro	Protected
Bitdefender Internet Security	Protected
BullGuard Internet Security	Protected
CrowdStrike Falcon Prevent	Protected
Emsisoft Anti-Malware	Protected
eScan Corporate 360	Protected
ESET Internet Security	Not protected
F-Secure SAFE	Protected
Fortinet FortiClient	Not protected
Kaspersky Internet Security	Protected
McAfee Internet Security	Not protected
Microsoft Security Essentials	Not protected
Panda Free Antivirus	Protected
Seqrite Endpoint Security	Protected
Tencent PC Manager	Protected
Symantec Norton Security	Protected
Trend Micro Internet Security	Protected
VIPRE Advanced Security for Home	Protected

As can be seen above, a majority of these products protected against this ransonware, but over 200,000 systems worldwide were compromised by it nonetheless. New variants might appear, and results for the next outbreak could look different. Users are advised to keep their systems patched, enable AV protection (i.e. do not disable features) and keep it up-to-date, as well as practising safe computing.

http://weblog.av-comparatives.org/proactive-protection-wannacry-ransomware/

houtiancheng

厉害了AVC~
官方测试出来了~可惜没有360，没法洗地了
但还是要恭喜腾讯，这次可以挺胸吹一波了~

maopu12

EIS的网页上不是说可以防住吗？为啥AVAST FREE都可以防住？

欧阳宣

eset真的不能？我不信
还是没主防没人权？

xukai3100

eset真是雪崩！

tun

听来ESET是堵了洞不让进，可是AVC测试是在离线系统下运行样本

maopu12

，我昨天才花钱买的正版EIS，

天狐狐狐

maopu12 发表于 2017-5-17 22:02
，我昨天才花钱买的正版EIS，

别虚啊哥们，不要只看这一个而失去对ESET的信心啊

maopu12

希望EIS坚挺吧

KevinYu0504

感谢分享 ~
houtiancheng 大的测试估计影起许多人跟着测试 ~

真的遗憾 360 在 AVC 测试缺席，不然可以看到某些人的理论是真是假