Cable Forum - View Single Post

Qtx · 11-05-2014, 18:19

It's trivial to bypass most AV's using standard settings and many software firewalls if you are able to exploit a vulnerability through a browser and drive-by download, so don't feel they protect you 100%. There is always a time frame before signatures appear for newly found stuff. For something that isn't spread wide then there may not be a signature for it at all. Then there are various custom cryptors and things like powershell payloads which nearly all the AV's don't stop.

Turning heuristics on in the AV will help a lot although may also give you more false alarms.

11-05-2014, 18:19	#11
Qtx CF's Worst Nightmare Join Date: May 2012 Location: Probably outside the M25 Services: Sky Fibre Unlimited 40/10 Posts: 3,473	Re: What do I do when Windows XP ends? It's trivial to bypass most AV's using standard settings and many software firewalls if you are able to exploit a vulnerability through a browser and drive-by download, so don't feel they protect you 100%. There is always a time frame before signatures appear for newly found stuff. For something that isn't spread wide then there may not be a signature for it at all. Then there are various custom cryptors and things like powershell payloads which nearly all the AV's don't stop. Turning heuristics on in the AV will help a lot although may also give you more false alarms.