Antivirus on the market are far too vulnerable and can be disabled in some minutes!

[Murphy]

Hi ,
Today i found something very interesting :

,,ESIEA gathered by international experts from the security offensive has managed to disable a few minutes the 6 best-selling antivirus in the world. ,,

,,Stopwatch in hand, two experts have proven antivirus 7 ... The least resistant held 1mn 56s ....The results of this "consumer test" a new kind of speak for themselves:
-- McAfee : 1 min 56s
-- Norton : 4 min
-- GDATA : 5 min
-- AVG : 15 min
-- NOD32 : 33 min
-- Kaspersky : 40 min
-- Dr Web, the harder to circumvent, however, was sufficiently weakened to conclude with a little more time (over an hour), candidates would be able to disable antivirus seventh. ,, ( Google Translate )

Read here ( French )
Read here ( English - Google Translate )

For the complete report of testing and what methods are disabled each product download this .
Best regards !

[safeguy]

It's not surprising to see McAfee and Norton to be disabled within such a short time...after all, these are the brands mostly well-known among 'normal' consumers and hence, are often the first target for hackers. Honestly, I didn't quite expect to see AVG withstanding over a longer period of time...15 minutes as compared to Norton and McAfee, you can say that's quite an achievement for AVG although it's not that great. Eset and Kapsersky...well, we all know how much "better" they are...so no surprise it withstands longer. The only complain is why can't they totally prevent themselves from being disabled....

But most importantly, we all should learn 1 lesson from this 'research'....never ever put your 100% trust on your AV only to protect you. Hackers are getting smarter every day and it's getting harder for AV companies to keep up...try to widen your protection by using various 'supplements'...it helps. And not to forget, common sense is a MUST...

A wise man has once said:

Whenever there's a door, there's a hole and key to it. Same goes for security, there's bound to be a loophole to it. All we can do is to lock the door and pray.

P.S. That wise man is me. Those are my own words...haha

[assassin]

Nice Find and it is shocking to see the major antivirus vendors being shutoff in minutes.
good i am using a-square which is not on the list.

[luffy]

Thanks for sharing.

[bivas600]

a shocking review god i am using norton

[safeguy]

@bivas600

Shocked? What are you waiting for...perhaps it's time for a change?

[Gabethebabe]

Fun

Kinda Matousec test, but for AV´s

Who cares that Dr. Web is difficult to disable - it hardly detects anything.

Still: to be able to execute a script that disables an AV requires you downloading some malware explicitedly written for the AV you use and before that same AV has its sig DB or HIPS updated to cater for that same malware.

I wouldn´t worry about this too much.

[alpha1]

About Kaspersky,
If you are using Kaspersky on Interactive Protection I think you can simply block all operations that you want so I think then you can't modify it or any other think without your privileges.

[shan]

i didnt read the testing method but in the McAfee which i used it took me less than 10 sec
Open task manager and kill MCsheild.exe like process and the scanner is disabled and restarts in 60 sec more than enough time for the bad guys to pop in some goodies :P

[safeguy]

@shan

Yeah...I remember i did something similar like you, shan, when I was using McAfee. It was using too much RAM on my PC and i couldn't stand the slowness of my PC at that time. As such, I tried ending McShield.exe through Task Manager and it was REALLY simple and fast to end..you don't even need third-party tools to do it...

And at that moment, it didn't came across my mind how easy it was to disable McAfee's service...now that you mention it, I feel glad I'm no longer using it.

Short while ago, I just tried to end avgnt.exe (Avira's real-time protection service) through Task Manager but access was denied. I'm not saying that's great (I know there are surely ways to end it by force) but at least, it's better than McAfee's 'reaction'.