Avast WEBforum

Other => Non-Avast security products => Topic started by: Lisandro on February 03, 2017, 03:10:49 PM

Title: RansomFree
Post by: Lisandro on February 03, 2017, 03:10:49 PM
RejZoR suggested RansomFree (https://www.cybereason.com/) side-by-side with Avast.
I'm a bit affraid about a program without any setting or interface... What is it really doing?
What is the "fileless ransomware"?

"RansomFree is a behavioral anti-ransomware tool for detecting and stopping never-before-seen ransomware. RansomFree protects against local encryption, the encryption of files on network or shared drives, and catches stand-alone ransomware programs as well as fileless ransomware."

Is the "behavioral ... detection of encryption" the feature that Avast team was trying to add to Avast 2017 later this year?
Remember when they talked about it in Prague?
Title: Re: RansomFree
Post by: RejZoR on February 03, 2017, 09:02:15 PM
In a nutshell, yes, that's what avast! team has been working on for a while. Honeypot and behavior based ransomware detection, as well as generic whitelist based protection of user data folders.

RansomFree is not bad. I mean, it's free so you can't really go wrong. And even though it has virtually no interface, it doesn't really need one to be honest. It's just there and it works. It'll be a bit redundant when avast! gets all the anti-ransomware goodies, but until then, why not. Though, release of Behavior Shield will be a huge asset for avast! already.
Title: Re: RansomFree
Post by: CraigB on February 04, 2017, 05:43:23 AM
I've been following some of the cybereason topics and not sure if I'm comfortable with the "Honeypot" files placed everywhere throughout the system :-\ are they cleanly removed after removing the cybereason program :-\

I also use WinAntiRansom which works extremely well though can be a little annoying at times because it acts more like an anti exe so best off disabling before updating your known programs, it's very lite and it uninstalls cleanly.
Title: Re: RansomFree
Post by: avon on February 04, 2017, 02:54:09 PM
Title: Re: RansomFree
Post by: Pondus on February 04, 2017, 03:12:18 PM
avast should get a similar intigrated ransomware protection as TrendMicro



Title: Re: RansomFree
Post by: Lisandro on February 07, 2017, 02:01:32 PM
The major drawback:

The downside is that RansomFree needs a short amount of time to detect the start of the encryption operations. This means that a few of your files will be encrypted before RansomFree detects anything wrong.

Seems scaring :(

Does RejZoR tested it?
Title: Re: RansomFree
Post by: RejZoR on February 10, 2017, 03:39:49 PM
You can watch my test of Cybereason RansomFree 2.1 here:

Back when I was testing it, it was still vulnerable to some strains as shown in video. Those have been fixed since.