A/V Software Questions (Conflicts?)

damien76 · 14 May 2011

I symphatize with you because there is no experience lke that when you wanna let something run in your pc and it ain't functioning right even when you seem to know it is right(with all that you are doing is right). Been there done that. Just to add.

Exclude all folders of MBAM in Trend Micro, SpyBot also. Exclude Trend Micro in both MBAM and SpyBot. One realtime only. Others on-demand.

On a ligther note. Yes sometimes Avast performs bad though popular. Rootkits and zip/packed files are trouble for Avast. In my system with Avast IS, I run it with additional of PrevxSOL and an on-demend of GMER every 2weeks. Avira though some say have a lot of FP's is better in detection and lighter. You just have to exclude again all folders of all your security apps in Scan>Exclusions and Guard>Exclusions. As for FP, it is better to have FP's and place them in quarantine than to have a non-detection. Take the case of Avast. ver1125 still has BSOD in some configs but it differs. As with all AV installation as well with other software apps having BSOD does not necessarily mean it cannot be solved. (But do remember all AV's miss something-somewhere-sometime and that is a fact.)

All AV's like Avira/Avast have ways to determine FP's in participation with the user. Submit it to them as you test it via VirusTotal, Jotti's and FilterBit. Send the results of all 3 as well. Avira replies in a span of 2 days max, mostly just a day. If you are jittery about letting an "in-doubt app flag as FP run" then run it in Sandboxie whilst decision is not yet reached.

Sending samples to Avast is a different situation as they reply as needed only. See here for some good read My AV: Sending samples for verification....how-to/experiences..etc - Wilders Security Forums

SpyBot has many issues also I tried Bing search and well see Trend Micro issues with SpyBot_Bing search

Have VirusTotal Uploader ver2 in hand for fast sending of fles for test. Fact is an FP is better than non-detection. Tinkering with detection level hinders an apps capability to perform at it's level of effectiveness. I have in fact several pc's with different combinations:

- KAV + Comodo Firewall with D+ + MBAMPro (on-demand)
- Avast IS + PrevxSOL + Outpost Firewall Pro + MBAM Pro (on-demand)(GMER 2x week)
- Comodo IS (with AV) + PrevxSOL + SASPy Pro (on-demand)
- Avira Premium + Comodo Firewall with D+ + PrevxSOL + MBAM Pro on-demand
- Avira Premium Security Suite + Online Armor Premium + MBAM Pro(on-demand) + HitmanPro (on-demand)
- FSecure IS + MBAM Pro(realtime)+ HitmanPro (on-demand)

All of them with Sandboxie paid. They all play well nicely. I see to it that I check their performance weekly.

Layered security should be good but you should layer light. Exclude all folders in all your security apps for a no conflict situation. If something seems not working right. Uninstall 1 then test, leaving the main AV of your choice. In the end it is you who will decide what to run in your system. No advice will be pertinent to you if there is a known-conflict (and you are feeling it that it is so) and you still want to cross-your fingers and go using it.

I hope you find the answers you need and the combination you want efficiently.

OceanicAirlines · 22 May 2011

That is perhaps the best, well-phrased, detailed and succinct response I've ever gotten!

Thank you for tackling such a complex and ambiguous subject.

I know what to do: simply put... configure my software! If suspected (or possible) conflict, then simply run one real-time, leave the rest as on-demand.

(Question) Do you get a multi-license discount for MBAMPro? I haven't purchased mine yet, but want it and love the flash scan. Also, same for SandboxIE?

I always go to CheapAntiVirus.com. I invite you to enjoy their OEM Boxed Discounts (THEY'RE GREAT but you gotta subscribe to email alerts, as stuff comes & goes.)

Avira PSS can be as low as $20.00 for a yr. / 1 PC. No kidding.

I'll look for the button or whatever, but you deserve some credit for such a great post. Thanks again, man.

damien76 · 24 May 2011

@OceanicAirlines,

For MBAMPro, I use only 1 license for all my pc's. I just install it on all of them. About licensing discounts I don't know about that so you may have to contact Malwarebytes support for info.

For Sandboxie, I heard that Tzuk offers that. Get in touch with him in the sandboxie forums. He is very accomodating there. Send him a PM about it(you'd have to join the forums first that is). I don't know about the support email there now but I tried using it before and he responded also. Sandboxie paid can be used on unlimited number of pc's you own. Re-activation of license after 6months is a prerequisite now.

The members are all here to help out each other so assistance(however slow/late the reply) will always be there when you need it. Just feel free to post so others may interact as well.

You have a good one:)

OceanicAirlines · 03 Aug 2011

damien76 said:

Get in touch with him in the sandboxie forums. He is very accomodating there.

I'm sorry, I must have deleted the email notification. I was just logging-in, as I needed some help with some Windows 7-related issues and also found some stuff worth providing input to.

Thank you for that referral; I'll be sure to do that.

I actually just purchased MBAM (retail/boxed, kinda unusual, but I have a great site I found through eBay of all places called

Code:

www.cheapantivirus.com

, selling it for less than $20.) I also grabbed a copy of Ghost for $15.

I pass that name around, as it's the cheapest place I can find, at least.

I haven't jumped into SandboxIE yet; I've been having a lost of performance issues in Windows 7 x64 (Home Premium / Dell OEM) build 7601... (also software conflict/compatibility issues.)

Thanks again for your thorough imput! Hopefully you can chime-in on my post today!

damien76 · 08 Aug 2011

MBAM is really a keeper and very well suggested as antimalware augmentation layer. You should go and try Sandboxie. When I tried it fo the first time I did an image backup first so if anything will happen or I need to revert it'll be just minutes away.

Well there are other alternatives to SBIE around. I do not know if I mentioned it already but there's GesWall( light virtualization app, hopefully it's still there --seems to be underdeveloped) and BufferZonePro. Avast Pro and IS has it's own sandbox as with Comodo IS(free). PrevxSOL(free) is also there bu not like a sandbox. Online Armor has it's RunSafer (sort of a LUA solution but I use it in browsers especially Chrome in one of my systems).

I also grabbed a copy of Ghost for $15.

-- Is that Norton Ghost? Haven't used that one. Have used Macrium Reflect, Paragon Backup and Restore 10 Suite and Keriver 1-Click Restore Free. Now using ATI Home 2011.

Actually visited CheapAntiVirus.com | Your #1 source for cheap Norton, Kaspersky, McAfee and Trend Micro antivirus and internet security software! last June and yeah seem to be one of the cheapest if not the cheapest around.

If you experience conflict/compatibility issues just post it here in the forums. There are a lot who will help you out here plus the learning is superb here.

Goodluck :)

OceanicAirlines · 09 Aug 2011

Good to know you enjoyed their discounts! Norton Ghost, yes. I love it and have enjoyed it before. Ironically, I've had my license (boxed) MBAM PRO & Norton Ghost for a few days & haven't opened them.... been wrapped-up in my SteamPowered games. SUPERAntiSpyware Pro 5.0*** (newest version) is AMAZING! (Developed since I last posted.)

I absolutely recommend it. It's just. Awesome. Nothing more I can say.

Their database is standout and their support is very educational & smart/fast.

I'm going to pull the trigger & get SandboxIE. I'm surprised you brought up PrevX. I had a bad experience w/ it, as it (like Loaris Trojan Remover,) seem to either present false positives or incorrect info. Like Hitmanpro, it's, I suppose, stuff I need to learn more about.

I'm gonna close this if it isn't already. Thanks again for your awesome reply.