Newcomer Challenges the Antivirus Establishment (PCWorld)

[mrhero]

{QUOTE-> Newcomer Challenges the Antivirus Establishment
Start-up Robot Genius claims that it has a new way to fight malware and says established vendors have some catching up to do. <-QUOTE}
http://www.pcworld.com/article/131369-1/article.html?tk=nl_dnxnws

[Thankful]

It seems Syberus is currently available for download here:
http://robotgenius.net/

[Pedro]

Well, this thread sure will hit page 10. A new BB with bold statements.
Any testers yet?

[btman]

99%.... Hah... Hah... Someone prove it wrong. Please do. lol.

[ErikAlbert]

{QUOTE->
Start-up Robot Genius claims that it has a new way to fight malware and that established vendors have some catching up to do.

The Robot Genius client software, called Spyberus, uses a driver-based filtering technique to monitor and track like an audit trail all installed files on a system.

Spyberus detects malware and reverse malware infections using a Take Control feature to stop malware-hijacked processes.
<-QUOTE}
They don't explain to me how it works, just a bunch of words and expressions that doesn't mean anything to me.
Maybe other members do understand this, certainly not me. I'm too stupid for this.

[sukarof]

Great! a new toy to play with. :thumb:
Will try it.

[ErikAlbert]

{QUOTE-> Great! a new toy to play with. :thumb:
Will try it. <-QUOTE}
Indeed a new toy, I'm looking forward to the results. Try to break it any possible way you can. That's what I would do IF I was a security expert or an experienced user.

[Firecat]

This technology of Robot Genius Spyberus is basically almost the same concept as KAV's proactive defense module, Norman Sandbox or BitDefender B-HAVE. When you want an ability measure of Spyberus, think KAV PDM or Micropoint, though with not quite the same effectiveness because this company is new in the security field.

There was one Principal AntiVirus in past which relied on same measure. The only thing really interesting about this is the so-called Take Control tool, which can help in malware disinfection.

[Pedro]

Firecat, they claim to be ahead of AVs. Testing is in order IMO! Just not by me..;D

[ErikAlbert]

{QUOTE->
There was one Principal AntiVirus in past which relied on same measure. The only thing really interesting about this is the so-called Take Control tool, which can help in malware disinfection. <-QUOTE}
It sounds better to me that "I" Take Control, not some tool, that doesn't see the difference between good and bad.
Scanners have also false/positives, because they aren't smart enough, that's because these scanners have an I.Q. of a brick.

[Thankful]

I tested against Firewall Leaktester's anti-keylogger test. It failed the first three tests. I didn't test the screen capture parts. This program seems to act like PrevX in that it stores a database of applications and asks user if he/she wants to contribute to building the database. Just my $0.02.

[ErikAlbert]

{QUOTE-> I tested against Firewall Leaktester's anti-keylogger test. It failed the first three tests. I didn't test the screen capture parts. This program seems to act like PrevX in that it stores a database of applications and asks user if he/she wants to contribute to building the database. Just my $0.02. <-QUOTE}
Three leaks and this is supposed to be a Genius ? Sigh ... another rasp. ::)

[Peter2150]

I am going to take a shot at this thing.

[Peter2150]

{QUOTE-> They don't explain to me how it works, just a bunch of words and expressions that doesn't mean anything to me.
Maybe other members do understand this, certainly not me. I'm too stupid for this. <-QUOTE}

Erik

I can now tell you exactly how it works. And yes it is 100% guaranteed protection. It takes advantage of a well know WIindows system feature at log on. The BSOD;D

Yep quite the genius. I suppose it's it's so good I should uninstall KIS and SSM, and see what happens.

Pete

[Peter2150]

Okay I uninstalled KIS and SSM, and RG installed okay. Thru DFK - Threat Simulator at it, and assuming I was smart enough to block the warning it came up with, it at least didn't get shut down. DFK still said I was owned. THen I threw Killdisk at it. No warning, no challenge, just sayanora hard disk.

THis thing had one other huge strike against it as far as I am concerned and I would waste, time or money on it. Namely the founder developed on other significant company and then sold it out to Symantec. No thanks for me.

[ErikAlbert]

Peter,
ROFLMAO. Thanks for sharing the brilliant results of this newcomer, who challenges the AntiVirus Establishment. ROFLMAO.

[Mrkvonic]

Hello,
Sounds boring...
Mrk

[sukarof]

Spyberus added about 15 extra seconds to the boot process, but that might be an internal furious fight between Prevx1, Comodo FW, spyberus and boclean for getting closest to the kernel :)
It didnt play well with Comodo Firewall, it kept locking my computer. I turned off Comodo FW but then spyberus crasched. I didnt have time to see much of its features before it crasched. IT also prevented Comodo Boclean tray icon from starting.

I noticed one popup though, it was when I started Process explorer. Spyberus said it couldnt guarantee that PE was safe (and then it crasched) and that gave me an indication of what kind of software it might be, it looked like it was some sort of HIPS that wanted to ask too many questions. I was really only interested to check the sandbox feature. In the description it sounded a bit like Tiny Firewall Pro´s concept. That would´ve been nice to have though.

Maybe I try it on a clean snapshot someday.

[korb]

it kept rebooting on my system with comodo BO,ssm pro, sensive guard installed.had to uninstall

[kjempen]

Not a program I would like to ever install on my system again (not unless I'm prepared for a re-format). It was affecting my system in safe mode even, making my computer sluggish to the extreme. I had quite a bit problems getting rid of this thing. Luckily I got to run an uninstaller application/cleaner (Smarty Uninstaller) in safe mode, and even if the Windows Installer service doesn't work in safe mode, Smarty Uninstaller got rid of the registry entries for Spyberus and most of the files I guess.

[coolbluewater]

Sounds like more snake-oil from just another company trying to get a foothold in the burgeoning sector of Windows security, and shame on PC World for endorsing yet another potential advertising cash cow for its lame publication without testing and reviewing it first. The days of PC World focusing primarily on PCs are long gone.

[Peter2150]

{QUOTE-> Sounds like more snake-oil from just another company trying to get a foothold in the burgeoning sector of Windows security, and shame on PC World for endorsing yet another potential advertising cash cow for its lame publication without testing and reviewing it first. The days of PC World focusing primarily on PCs are long gone. <-QUOTE}

No Joke. That review was a joke, and the reviewer clearly never tried to run the thing. It is so far behind the curve compared to Prevx1,Online Armor, SSM and KAV/KIS that it is pathetic.

It's hard not to believe that the review wasn't intended to help get advertising dollars. PC World reviews rendered worthless.

[mfenech]

Someone should invite an RG rep to post here. Good pub for them, fun for us :)

[Thankful]

{QUOTE-> Someone should invite an RG rep to post here. Good pub for them, fun for us :) <-QUOTE}
I sent them an email regarding my test results. Haven't heard back yet.

[ErikAlbert]

Poor users who read PC World regularly, they can't trust it anymore. I prefer to do my own evaluations and testings. It isn't that difficult if you think long enough. Even when this software would work properly, I wouldn't need it anyway.

[Chubb]

I hope that it is not another ViruScape with bold statements!!! ::) ;D

[Firecat]

{QUOTE-> I hope that it is not another ViruScape with bold statements!!! ::) ;D <-QUOTE}
ViruScape actually had signatures, but heh, its methods of detection were so crude. I remember that ViruScape's results at virus.gr (it scored very high) really gave Antony Petrakis a bad rep and put a dent in virus.gr's reliability. Do you know WHY ViruScape scored so high in virus.gr? It scored high because the creator/CEO of TeraInnovations was a VXer and probably had all of VirusP's samples. But they didn't add signatures for all of those. ViruScape was innovative in the sense that it used md5 checksums and CRC32 checksums to "detect" VirusP's files (which was obvious cheating). So, in case any of you wondered why ViruScape was among the top in virus.gr, this is the simple reason, that they detected the CRC32/MD5 checksum and simply attached a virus name to it. No real signatures, no disinfection, no real detection at all. Just a token detection.

This one is based on behaviour blocking, so obviously it cannot pull a ViruScape type heist, but right now things are not looking so good for it. At best its like an HIPS, but its still too immature to be of any real use. Cheeky to come up and say that AV vendors have catching up to do.

[ErikAlbert]

I understand it very well now. Spyberus is very good on paper and PC World is a paper. :)

[Kees1958]

Hi guys,

have a look http://www.wilderssecurity.com/showthread.php?p=981259

Regards K

[Perman]

hi, folks: Not much improvement since last year. Where is the promise that Brian has promised ? They are looking more victims for cruel rabbit-eye testing. Why would'nt they hull in hundreds hundreds PC workstations and test it themselves? It is insane to ask public to do this for them. To the developer, DIY. and get over w/ it.

[Chubb]

{QUOTE-> ViruScape actually had signatures, but heh, its methods of detection were so crude. I remember that ViruScape's results at virus.gr (it scored very high) really gave Antony Petrakis a bad rep and put a dent in virus.gr's reliability. Do you know WHY ViruScape scored so high in virus.gr? It scored high because the creator/CEO of TeraInnovations was a VXer and probably had all of VirusP's samples. But they didn't add signatures for all of those. ViruScape was innovative in the sense that it used md5 checksums and CRC32 checksums to "detect" VirusP's files (which was obvious cheating). So, in case any of you wondered why ViruScape was among the top in virus.gr, this is the simple reason, that they detected the CRC32/MD5 checksum and simply attached a virus name to it. No real signatures, no disinfection, no real detection at all. Just a token detection. <-QUOTE}

Thanks Firecat for the tip!!! I understand it better now!!!
:thumb: :thumb: :-*

[cheater87]

Looks like its free.

[Franklin]

Quote the author from another site.
{QUOTE-> You are correct in pointing out similarities between Goback and even Windows Recovery, and I could even add to the list (Ghost and cvs). Like us, all of these programs record information that allows you to roll back to a previous point in time. To go even one step further, we also share similarities with products such as Google Desktop, which silently watches for the creation of new files and indexes all new content allowing for quick future searches. (It was in part the example of Google Desktop that inspired us to create this new technology). <-QUOTE}
Author Robotgenius (http://forums.spywareinfo.com/index.php?s=&showtopic=77280&view=findpost&p=422264)

[ErikAlbert]

{QUOTE-> That being said, I want to make it clear that RobotGenius definitely brings something new to the anti-malware scene. Our rollback functionality (which is only one of the tools we provide), rather than providing version control, is interested in the causal history of the filesystem (ie in determining the ultimate source of any file or registry key created). Say for instance, you turn on your computer today and find a new (and sleazy) link on your desktop to, say, a porn site. With Spyberus installed, you can follow the trail back to its origins, for instance: <-QUOTE}
http://forums.spywareinfo.com/index.php?showtopic=77280&st=15&p=422264&#entry422264

The author is talking about rollback as something new. I have rollback since March 2006 and a much better one than his software.
My rollback doesn't give me a BSOD, like Peter had on his computer while he was testing RobotGenius.
My rollback removes BSOD's like peanuts and alot of other problems, including my mistakes.
This man has alot of blabla for writing posts, but no decent software.
My advice for this man : don't talk, don't write and WORK HARD, your software NEEDS IT. Sigh. :(

[Peter2150]

{QUOTE-> http://forums.spywareinfo.com/index.php?showtopic=77280&st=15&p=422264&#entry422264

The author is talking about rollback as something new. I have rollback since March 2006 and a much better one than his software.
My rollback doesn't give me a BSOD, like Peter had on his computer while he was testing RobotGenius.
My rollback removes BSOD's like peanuts and alot of other problems, including my mistakes.
This man has alot of blabla for writing posts, but no decent software.
My advice for this man : don't talk, don't write and WORK HARD, your software NEEDS IT. Sigh. :( <-QUOTE}

ROFL. Yeah he needs to look around. Something new....

[nadirah]

{QUOTE-> http://forums.spywareinfo.com/index.php?showtopic=77280&st=15&p=422264&#entry422264

The author is talking about rollback as something new. I have rollback since March 2006 and a much better one than his software.
My rollback doesn't give me a BSOD, like Peter had on his computer while he was testing RobotGenius.
My rollback removes BSOD's like peanuts and alot of other problems, including my mistakes.
This man has alot of blabla for writing posts, but no decent software.
My advice for this man : don't talk, don't write and WORK HARD, your software NEEDS IT. Sigh. :( <-QUOTE}

You are a good lecturer indeed. :thumb:

[Escalader]

Guy's Guy's and Gal's!

Does anybody remember the late Carl Sagan's warning?

"Extraordinary claims require extraordinary Proof!"

When AV-Comparatives reports on them then and only then will I look at it!


100% give me a break!

Good idea to run a leak test for them! Wonder why they didn't do that them selves first before inflicting it on unsuspecting ad believers.

Are we going to help them test and develop a product free?

Not me!

[Rasheed187]

Well, I can make it quick, it won´t install on my VM, I get a blue screen upon startup of the OS. So basically it´s game over for Robot Genius on my machines. :thumbd: