(EPILEPSY WARNING) Malwarebytes VS LcryptX Ransomware

Added: 2026-05-19

[00:00:06][music] >> What's up everybody? Welcome back to our video. It is let me Hello everybody. My name is welcome.

[00:00:14]And today I'm going to be testing something special in particular. So if you don't know, which I'm probably sure you don't know, but yeah, I was trying to test it against Malwarebytes today, but then I came across something else. I had this thought in my head and I was like, wait, but Malwarebytes isn't that great against ransomware, is it?

[00:00:33]No, I don't think so. It did struggle a lot when it wasn't like for the signatures that it had. So I really was using my brain cells here. I was really thinking this over, you know, as I usually do, and I came to a conclusion that I got to test more ransomware against it. And what do you know?

[00:00:50]Malwarebytes failed, but not against the new sample. I mean, yes, it did miss one of the new samples and I just started spamming a bunch of god damn what Python command prompt or something like that, and I'll put that on the screen right now.

[00:01:03]And no, the last one, bro. The last one. The last one, dude.

[00:01:11]The last one, no. Come on, man. Look at that. Oh, yeah, it's over. I think it's over.

[00:01:17]I don't think that was the only problem cuz after that, the problems ended and the all of those command prompts just closed and it was gone. But look at the I've never seen Process Explorer this overloaded. Holy Yeah.

[00:01:31]It closed.

[00:01:33]So I was like, yeah, okay, you know what? That's better than I remember. You know, it's it's dealing with ransomware really nice. But then, oh then, I go ahead and run something older. I it was detecting most of the older ones, too.

[00:01:46]But then I ran ElcryptX and I was just completely just blown away by the result. I'm not going to tell you what happened yet. You know what? I'm just going to show you because, you know, we have a folder which is really confidence inspiring right here. You know, just die. Guys, we know what's going to happen to this system after I run this.

[00:02:03]As you can see, these are both VBS files. What's funny about this? Look at the date. This ransomware is over half a year old and yet it's not blocked and it is a known very known piece of ransomware, too. So, this is my question. I'm going to show you how I reacted initially to it in the video.

[00:02:18]I'm not going to post that video, but I'm also going to give you the result of the malware test which I did off camera with Malwarebytes and you're going to see how it did. So, I don't know if you're going to be very impressed or not, but you know, this is a fun video that I planned. Let me go ahead and get everything running, but I don't think we'll need to. I just get Process Explorer. There we go.

[00:02:36]Everything is fine. Malwarebytes is open. It's not running. Let's wait for this to settle. We have these two items.

[00:02:42]I'll run one of them or maybe both.

[00:02:44]Maybe just one. If one does nothing, we still have the other sample, but this is the sample I'm talking about. There we go. It's settled.

[00:02:51]So, let's go ahead and disable this modifier because it's going to interfere and we do not want that. So, with that out the way, let's run an update.

[00:03:00]Malwarebytes is up to date. Yes, there we go. And then let's go ahead and re-enable malware protection. Everything is up. Everything is enabled. Again, look. It's all up. Everything works.

[00:03:12]Now, we're going to go ahead and execute these. I'm going to put this aside and this to this side and we're going to see what happens. Now, we also have pictures right here. Okay, so we do in fact have everything prepared. Let's scroll all the way down. There we go. And Process Explorer is settling down. So, we're ready and with that, let's execute this ransomware which is a VBS script, by the way. So, here we go.

[00:03:35]We hit yes.

[00:03:37]Process Explorer closes. User Account Control. Malwarebytes is up again.

[00:03:42]Just want to stress that.

[00:03:44]Firewall is off.

[00:03:47]I didn't do that. And Okay, it blocked the connection.

[00:03:54]Okay.

[00:03:55]Okay, yeah. It blocked the Yeah.

[00:03:57]Ransomware, yeah. Okay.

[00:04:01]But, did it really?

[00:04:03]Did it really?

[00:04:05]Did it really block it?

[00:04:09]What do you guys think?

[00:04:14]Yeah.

[00:04:16]Are you guys sure?

[00:04:19]Are you guys absolutely sure it blocked?

[00:04:21]>> [music] >> Yeah. Are you sure?

[00:04:24]You know, are you >> [laughter] >> Oh my god. Yeah.

[00:04:27]Okay. Yeah. Are we absolutely 100%? Are we confident?

[00:04:34]Are we totally sure that this ransomware has been blocked, you know? Yeah, okay. There we go.

[00:04:42]Are we sure?

[00:04:45]Also, that's not my real IP. Don't worry. That's my network IP. I'm just saying.

[00:04:51]But, yeah. Look Look at this chaos. Wow.

[00:04:54]Look at that.

[00:04:59]Oh my god. Yeah, that is just Thank you, Malwarebytes.

[00:05:05]Absolute amazing performance.

[00:05:09]And again, did you see how old this sample is?

[00:05:12]This sample is so old, and yet Malwarebytes does nothing about it payload. Absolutely nothing. Yeah, it said it blocked it, but then Al Quraix just went ahead and did it anyway.

[00:05:24]So, you guys tell me it Is this real, or am I getting trolled by Malwarebytes demons right now?

[00:05:31]Cuz Let me try to close all of these. Oh, no. No. Come on. Please. Please. Please.

[00:05:37]Please. Please. Yes.

[00:05:38]Yes. Oh, no. They're back. Oh my god.

[00:05:40]Yeah. There we go.

[00:05:42]But, yeah. Let's go ahead and restart this system real quick, and we'll see what happens after I do that. So, one quick restart and then we'll see if this persists or if it doesn't or if Malwarebytes can actually stop it. Now, that's something I haven't seen. So, let's do that real quick.

[00:05:56]So, uh Yeah, this is all I'm seeing right now.

[00:06:01]This is all I'm seeing right now. This system is just destroyed. This is it.

[00:06:05]There's literally nothing to this. If I try control insert, which is Yeah, there we go. That's just beautiful. Okay, if I just sign out real quick.

[00:06:14]There we go.

[00:06:16]Wow.

[00:06:19]That's impressive. Let's try to fix this.

[00:06:22]Okay, let's let's see what we can do.

[00:06:23]Let's see what we can do. If we can enter safe mode and see if files are actually encrypted, that would be cool.

[00:06:28]But I'm not sure if we could do that. At least control insert works, which is uh I guess that's a good thing.

[00:06:34]So, let's go ahead and do this thing.

[00:06:37]Okay.

[00:06:39]So, now I'm going to go ahead and hit safe mode networking and see what happens. Just more of a curiosity at this point.

[00:06:46]Let's see.

[00:06:49]Bruh. That was Yeah, okay.

[00:06:52]Safe mode is gone. That is gone.

[00:06:54]Networking is gone.

[00:06:56]So, we have this. We have network now, but our whole thing is just gone. So, yeah, this system is completely just gone. It's It's It's done for. It's just there's nothing. So, we could go ahead and fix this, but the point is look at Malwarebytes, up-to-date, working. It even detected it. But then, as you saw, it started throwing out infected files, like the encrypted ones. And I was like, "Nah, dude. Nah." I'm going to I'm going to play the original reaction to this clip. I was running a bunch of auto ransomware, but this one just sticked.

[00:07:26]And I want to show you how I reacted to that initially because it was beautiful.

[00:07:30]It just I cannot replicate my reaction, my shock to that like right now because I've already seen what happened, but I still have the initial video, so I'll play that right now.

[00:07:43]Okay.

[00:07:44]Okay, yes.

[00:07:47]Process Explorer closed, but it got deleted, okay.

[00:07:52]Oh, oh, oh, oh, what's that? What's that? What's that? What's that? What's that? Okay.

[00:07:57]Okay.

[00:07:59]And did anything get actually encrypted?

[00:08:00]No, okay. Okay. Okay. Okay, yes.

[00:08:05]Oh, oh, no, okay. It's it's it's done.

[00:08:09]It's over. It's over. I had to poke.

[00:08:12]IP address Oh, that's terrifying.

[00:08:15]Your IP address, that is my uh network IP. So, haha.

[00:08:21]Uh okay, but wow.

[00:08:25]That is nightmare fuel, bro. That is nightmare fuel.

[00:08:28]Oh my god.

[00:08:30]Dude, that is crazy. That is holy [ __ ] Oh.

[00:08:37]Wow.

[00:08:38]That is that is a spectacle.

[00:08:40]That is an actual spectacle. Wow.

[00:08:45]Bro, this is a spectacle.

[00:08:48]Holy [ __ ] Look, I'm not even mad. This is incredible.

[00:08:54]This is art. This is beautiful.

[00:08:57]Uh congratulations, Malwarebytes, by the way. You have um absolutely failed.

[00:09:03]But yeah, overall, man, like after I've seen this, I am 100% sure this is a 7-month old ransomware, by the way.

[00:09:12]I know I know it blocked a lot of them, even the new ones, but a 7-month old ransomware, and you had a signature for it, and yet you still didn't block it. I The system is done for. Like, this is just you have to reinstall Windows. You have to do fixes. You have to waste time.

[00:09:29]Damage is done. Like, you can block it.

[00:09:31]Even if you block the encryption, damage is done.

[00:09:34]Dude, damage is done. The system is down. That's it. That's it. It's over.

[00:09:39]So, yeah. I hope you enjoyed this little demonstration. I know I haven't really done that. Oh, and before I go for today, I'd like to show you the result of the test that I did against malware.

[00:09:52]>> [screaming] >> Yeah. Not the best thing ever and I didn't pass it either. I was going to go like like maybe we should try ransomware as well and now I'm definitely not passing it. So, yeah. Thank you all for your time. Thank you for watching and I'll see you all in the next video.