Is Antivirus Software Dead?

[sblocker]

is avast home edition a good anti virus?

 

[TheIgster]

Defensewall might be worth a try, but alas, 32-bit only. Of no use on my system.

Edit: Just would like to add that I work as a programmer and in tech support and deal with normal, average users on a daily basis...sorry, but something like Defensewall would mystify them and make them want to just turn their computer off. AV software is going nowhere until things like DW can work completely on their own and I'm not sure that will ever happen.

I would also like to point out after watching Matt's review that it's all fine and dandy to have something like DW if you know what you are doing, but what happens if you trust something you THINK is safe? Then what? Users are stupid. That's why we need AV and malware utils in the first place.

 

[gamepro127]

Defensewall might be worth a try, but alas, 32-bit only. Of no use on my system.

Edit: Just would like to add that I work as a programmer and in tech support and deal with normal, average users on a daily basis...sorry, but something like Defensewall would mystify them and make them want to just turn their computer off. AV software is going nowhere until things like DW can work completely on their own and I'm not sure that will ever happen.

I would also like to point out after watching Matt's review that it's all fine and dandy to have something like DW if you know what you are doing, but what happens if you trust something you THINK is safe? Then what? Users are stupid. That's why we need AV and malware utils in the first place.

There is where your wrong.
I have firefox in untrusted and just about every other program. Programs run in un-trusted easy. In untrusted, they just have limited rights. Ex: Since Firefox is in untrusted, an exploit wouldent go anywhere - Since it will be unable to do anything once/IF it makes a new process. Firefox and the rest of your PC will be 100% Secure.

And defence wall isent "hard" to use - Its actually very easy. Its definitely the best for people who surf the web and email as its basically 99.999% protection.

 

[Dinesh]

Defensewall might be worth a try, but alas, 32-bit only. Of no use on my system.

Edit: Just would like to add that I work as a programmer and in tech support and deal with normal, average users on a daily basis...sorry, but something like Defensewall would mystify them and make them want to just turn their computer off. AV software is going nowhere until things like DW can work completely on their own and I'm not sure that will ever happen.

I would also like to point out after watching Matt's review that it's all fine and dandy to have something like DW if you know what you are doing, but what happens if you trust something you THINK is safe? Then what? Users are stupid. That's why we need AV and malware utils in the first place.

 

[JMH]

is avast home edition a good anti virus?

Hello sblocker,
Yes Avast Home Edition is considered a good anti virus programme that offers basic protection for home users.
Read through the links below for further information.

http://www.avast.com/eng/avast-free-home-antivirus-antispyware.html

http://www.sevenforums.com/system-security/497-latest-release-avast-home-edition-antivirus.html

 

[Creer]

Defensewall might be worth a try, but alas, 32-bit only. Of no use on my system.

Edit: Just would like to add that I work as a programmer and in tech support and deal with normal, average users on a daily basis...sorry, but something like Defensewall would mystify them and make them want to just turn their computer off. AV software is going nowhere until things like DW can work completely on their own and I'm not sure that will ever happen.

I would also like to point out after watching Matt's review that it's all fine and dandy to have something like DW if you know what you are doing, but what happens if you trust something you THINK is safe? Then what? Users are stupid. That's why we need AV and malware utils in the first place.

I agree with you that before install almost every single application, users first what should do is read the help file to know how it works and how it will protect them.

When you downloaded a file by app which is on Untrusted application list in DW - then the attributes from this untrusted application are inherited, so the just downloaded file is also Untrusted.
If you righ click on this file and from DW shell menu choose "Run as Trusted" (it set off DW protection for this file) - and this file will be infected then your system will be infected, but it will be your fault because you trusted application/file for which you were not 100% sure that this file/app is legitimate/trusted.

I've installed DW on computer of my sister few months ago. I did it because her notebook slowed down dramatically, she had only one security application running in real-time and it was AV: Avira (yeah I know it is pretty light AV but on her notebook it wasn't).
Please note that she is not tech/computer savvy user, and only one thing I told her - when you want install trusted application run them as Trusted from DW shell menu, when you noticed that smth wrong is happen on your desktop press Stop Attack button or key-combination WIN+ALT+A. When you wanna log in into your bank account use DefenseWall Bank/Shopping Mode from right click on tray icon menu.
That's all, since that she never ask me for help with her computer, and her notebook works now much faster than ever.

 

[TheIgster]

I'm telling you, most users are stupid and have no want or need to "learn' how to use apps like DW or to learn to trust or untrust or they will think they CAN trust certain things. Anytime you put decisions into the hands of the common user you will have problems because most users could not be bothered to learn what is what. In fact, most users I talk to on a daily basis "normal everyday users" don't know the difference between a text file and a program. DW is getting close, but I don't think it is exactly where we need to be to give up on AV software...not yet.

Sorry, but AV/anti-malware software isn't going anywhere.

 

[jav]

I have reviewed DefenseWall HIPS and in theory it seems nice.
But still I dont want just blindly follow some new programmm.
So question is:
Can I run DefenseWall HIPS and my current Anti-Virus at the same time with real time protection enabled on both?
Will it cause some problems? Like compatibility? (But in theory as Dfencewall isnt AV, it shouldn't, is it right?)
My current AV: McAfee Security Centre.. (so it's Security Centre it has build in AV, Firewall, anti-spyware) but I dont want to turn off any of it's functions?


And as Defence Wall HIPS is claimed to be lightweight (taking only 7 MB RAM), I shoulnt have any issue with decreased performance while running both DW and McAefee, Am I right?


So, any suggestions?
Thank you..

 

[Creer]

I have reviewed DefenseWall HIPS and in theory it seems nice.
But still I dont want just blindly follow some new programmm.
So question is:
Can I run DefenseWall HIPS and my current Anti-Virus at the same time with real time protection enabled on both?
Will it cause some problems? Like compatibility? (But in theory as Dfencewall isnt AV, it shouldn't, is it right?)
My current AV: McAfee Security Centre.. (so it's Security Centre it has build in AV, Firewall, anti-spyware) but I dont want to turn off any of it's functions?


And as Defence Wall HIPS is claimed to be lightweight (taking only 7 MB RAM), I shoulnt have any issue with decreased performance while running both DW and McAefee, Am I right?


So, any suggestions?
Thank you..

Ad.1.
Yes you can.

Ad.2.
No it won't cause problems. DefenseWall HIPS is a based-on sandbox policy HIPS software but it could works without single issue with other HIPS on the market like OA or Comodo Defense+. New version of DefenseWall - Personal Firewall will be an old version of DefenseWall HIPS plus implemented into it firewall module - this version also can be run (of course if you want) with other FW available on the market. This is idea of DefenseWall - works with others applications without single issue.

Ad.3.
You don't have to, as I said DefenseWall is compatible with others security software.

Ad.4.
Yes you are right DefenseWall is super lightweight application, and it could be your first line of defense. I have only one security app installed - DW and my system has never been so responsive and fast like now.
AV normally (by default) slows down every single machine - more or less - read this article: If you have a slow browser, read here

 

[jav]

Ad.1.
Yes you can.

Ad.2.
No it won't cause problems. DefenseWall HIPS is a based-on sandbox policy HIPS software but it could works without single issue with other HIPS on the market like OA or Comodo Defense+. New version of DefenseWall - Personal Firewall will be old version DefenseWall HIPS plus implemented into it firewall module - this version also can be run (of course if you want) with other FW on the market. This is idea of DefenseWall - works with other application without single issue.

Ad.3.
You don't have to, as I said DefenseWall is compatible with others security software.

Ad.4.
Yes you are right DefenseWall is super lightweight application, and it could be your first line of defense. I have only one security app installed - DW and my system has never been so responsive and fast like now.
AV normally (by default) slows down every single machine - more or less - read this article: If you have a slow browser, read here

Thank you very much for your answers!
Yes, I know that most AV programmes will slow down my PC. But still I am not ready to abandon AVs yet. Maybe after some time when I see DefenceWall functions and effectiveness I will take the plunge =)

And to be sure;
Is this right download site:
SoftSphere Technologies, the official site of the DefenseWall HIPS - Host Intrusion Prevention System - sandbox your browser, e-mail, IM, IRC, P2P for secure Internet work. Anti-Spyware, Anti-Rootkit, Anti-Malware, Anti-Keylogger, Anti-Virus. Defence

And support forum: Gladiator Security Forums

And you talked about DefenseWall - Personal Firewall, Is it already out or plans?
Thank you again

 

[Creer]

Ad.1.
Yes you can.

Ad.2.
No it won't cause problems. DefenseWall HIPS is a based-on sandbox policy HIPS software but it could works without single issue with other HIPS on the market like OA or Comodo Defense+. New version of DefenseWall - Personal Firewall will be old version DefenseWall HIPS plus implemented into it firewall module - this version also can be run (of course if you want) with other FW on the market. This is idea of DefenseWall - works with other application without single issue.

Ad.3.
You don't have to, as I said DefenseWall is compatible with others security software.

Ad.4.
Yes you are right DefenseWall is super lightweight application, and it could be your first line of defense. I have only one security app installed - DW and my system has never been so responsive and fast like now.
AV normally (by default) slows down every single machine - more or less - read this article: If you have a slow browser, read here

Thank you very much for your answers!
Yes, I know that most AV programmes will slow down my PC. But still I am not ready to abandon AVs yet. Maybe after some time when I see DefenceWall functions and effectiveness I will take the plunge =)

And to be sure;
Is this right download site:
SoftSphere Technologies, the official site of the DefenseWall HIPS - Host Intrusion Prevention System - sandbox your browser, e-mail, IM, IRC, P2P for secure Internet work. Anti-Spyware, Anti-Rootkit, Anti-Malware, Anti-Keylogger, Anti-Virus. Defence

And support forum: Gladiator Security Forums

And you talked about DefenseWall - Personal Firewall, Is it already out or plans?
Thank you again

You are welcome.

Yes this is right download site, however if english is not your native language, here is DW in more languages: SoftSphere Technologies, the official site of the DefenseWall HIPS - Host Intrusion Prevention System - sandbox your browser, e-mail, IM, IRC, P2P for secure Internet work. Anti-Spyware, Anti-Rootkit, Anti-Malware, Anti-Keylogger, Anti-Virus. Defence


Support forum: Gladiator Security Forum -> SoftSphere Technologies Support Forums

In this week DefenseWall Personal Firewall will be officially available for everyone for public beta tests so stay tune.

 

[jimbo45]

Hi all
I think my take on most CURRENT (and I mean Current) FREE / Home type of AV software is well known -- I tend to think that around 90% of it is just junk using an outmoded technology attempting to find viruses on your machine AFTER the machine has already been infected.

These days most danger comes from activities that you do in your browser as I've posted elsewhere on the site.

A lot of these types of attacks using clever embedded code that your browser runs are quite difficult to stop - and after the code has been executed there is absolutely no trace that anything untoward was ever done on your machine - even if your entire spare drive has had porno loaded on to it .

AV software needs to concentrate far more on catching these types of attacks -- it's relatively simple to scan for "nasties" in a typical downladed .exe or .dll file -- but how would you find a virus for example embedded in an MP3 file - especially if the code is built up dynamically by an external program which knows that it's stored an mp3 on your system with an embedded codex.

For example it can read the file and build up machine code from the contents of the mp3 file - all compressed music files will contain "artifacts" - so the AV software can't compare an mp3 file against a database of known viruses. Compression ratios / tagging info etc etc are usually fairly unique for each user.

My malware would be able to read say records 3,9,41, 22 etc in the file - take the first 4 binary bytes to build up my "bootstrap program" and then execute it - all dynamically. - Not too hard to do actually.

In addition to a previous post I made incorporating Malware 101, here's a snippet from Lesson 2.

To do real damage on a computer you only need to run what is known as a bootstrap type program --very few bytes needed . A legitmate example is of course the boot process.

This is essentially how the boot process works

1) the computer executes one instruction at adress xxxx (this is in the hardware bios)
2) this instruction tells computer to read 1 sector of disk into memory and start executing code from the address read in

Now you've got a "classical" program which can start to load the rest of the OS.

So your "Malware" only needs to consist of 2 simple instructions

the bootstrap - reads instruction either from a remote web site or build it up from data stored on the users machine

and then in 2) it tells the machine to execute code on website xxxx or whatever.

It's not quite that simple but you can see what I mean. --After instruction 2) has been executed there's no trace that it ever existed - hence will be missed by typical "classical AV.

I think that a lot of work needs now to be done by AV companies to combat these types of threats.

If you have a logger in your router that logs all IP addresses visited - switch it on as these are ilmost impossible for external users to hack into these hrdware logs.

Basic "Virus protection" is just that -- very basic and will only prevent attacks against programs you actually run yourself on your machine. Most don't protect against carefully embedded code initiated by "3rd parties" on remote web sites.

Cheers
jimbo