VBA32 build 3.12.2 released

[Bob D]

What's new (since 3.12.0.2 (14 June)):
{QUOTE-> * win32 viruses base format improved, it became more compact

* processing of PE files improved

* script viruses search algorithms improved. Now they are faster and use less memory.

* the emulator improved, set of supported packers of PE files extended

+ detection algorithm for new version of Trojan-Dropper.Feebs <-QUOTE}
Most notable is process memory reduced by almost two-thirds.

[n8chavez]

Where can I download it from. I assume this is the non-beta version, right?

[likuidkewl]

{QUOTE-> Where can I download it from. I assume this is the non-beta version, right? <-QUOTE}
It will arrive via the auto update feature, no installer is available yet.
Installers usually follow within a week.
-Dan

[Bob D]

{QUOTE-> I assume this is the non-beta version, right? <-QUOTE}
Correct. This is (VBA32 WinNT Personal) release ver.

[likuidkewl]

VBA32 Personal, Workstation, Server, Commandline, Linux, and special case servers are all available ;)

[Durad]

Great news from Virus Blokada!

Now they should work on new, modern interface, add some free services and they are ready for USA market.

[the Tester]

"Most notable is process memory reduced by almost two-thirds."

That is an improvement! :thumb:

[Don Pelotas]

{QUOTE-> Great news from Virus Blokada!

Now they should work on new, modern interface, add some free services and they are ready for USA market. <-QUOTE}
Durad, i've not tried VBA32 in a very long time......................do they still have that Windows classic/Kaspersky 3.0 lookalike GUI? :)

[Blackcat]

{QUOTE-> Durad, i've not tried VBA32 in a very long time......................do they still have that Windows classic/Kaspersky 3.0 lookalike GUI? :) <-QUOTE}
Don, even VBA32 is not quite as minimalistic as AVP 3/3.5 :D

[Don Pelotas]

Yes, it is IMO, but i really liked 3.0/3.5 so not a put down at all, just a nosy question from someone not having it on the pc for a very long time. :)

[likuidkewl]

Continued improvements from VirusBlokAda 3.12.2.1:

{QUOTE-> 18.07.2007 Vba32 build 3.12.2.1

* detection algorithm for encrypted polymorphous script viruses improved

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ <-QUOTE}

It will be applied via auto updates ;)

[Durad]

Just tested yesterday on infected HP machine.

It still flag a lot clean files as suspicius when using paranoid heuristic. However all these files scanned at maximum heuristic are clean.

Before even at maximum it used to find a lot of clean files.

Also Loader use less time to scan at startup.

On-demand scanner is still slow!

[n8chavez]

{QUOTE-> Just tested yesterday on infected HP machine.

It still flag a lot clean files as suspicius when using paranoid heuristic. However all these files scanned at maximum heuristic are clean. <-QUOTE}

Well what do you expect? There's a reason why the heuristic level is called paraniod. Keep it at maximum and you'll be fine.

{QUOTE-> Before even at maximum it used to find a lot of clean files. Also Loader use less time to scan at startup. <-QUOTE}

Good. That shows improvement.

[Blackcat]

{QUOTE-> On-demand scanner is still slow! <-QUOTE}
After first initial full scan; Disable "Scan Archives", make sure "Thorough" mode is not selected and use "Standard File Types Set".

The scan speed should now be comparable to other AV scanners, although not as fast as the speed merchants of Authentium/Eset. Certainly now you can carry out regular, fairly fast scans and the scan speed in the new version is considerably faster than before.

[Bob D]

{QUOTE-> Continued improvements from VirusBlokAda 3.12.2.1:
* detection algorithm for encrypted polymorphous script viruses improved <-QUOTE}

And yet again:
Vba32 Build 3.12.2.2 released.
What's new since last update of 18 Aug:
* improved metamorphic win32-viruses detection algorithms

[likuidkewl]

VBA32 3.12.2.2 installers are now available in six languages.
More information here;
http://vba32.de/wbb2/thread.php?postid=1332#post1332

[Bob D]

Vba32 build 3.12.2.3 released

What's new since last update (3.12.2.2) of 30 July:
* Support for more PE-file packers

* Improvements for generic malware detection

* Some fixes for virus signatures loading for their size reduction and
better scalability

[clambermatic]

VBA32 folks hi...

Does anyone encountered VBA32 (version as of 10.Oct.07 & later) reporting "Trojan-Spy.HTML.USBankFraud" on some mundane .txt files???

Coz my VBA popped such one on a .txt file which i had scanned from a faxCpy & converted into txt. And this .txt has been on my desktop folder for more than 6mths.

I did a scan on Spybot/AVGas/BDefender_v10/Pc-Cillin, with the latest datfiles... those returned NIL. C?

[Bob D]

{QUOTE-> ...Does anyone encountered VBA32 (version as of 10.Oct.07 & later) reporting "Trojan-Spy.HTML.USBankFraud" on some mundane .txt files??? <-QUOTE}
VBA team is aware of this and addressing the problem. Forum thread:
http://vba32.de/wbb2/thread.php?postid=1479&sid=7e9ab5fe34c6c7a424823aacfbca6b25#post1479

[likuidkewl]

{QUOTE-> VBA32 folks hi...

Does anyone encountered VBA32 (version as of 10.Oct.07 & later) reporting "Trojan-Spy.HTML.USBankFraud" on some mundane .txt files???

Coz my VBA popped such one on a .txt file which i had scanned from a faxCpy & converted into txt. And this .txt has been on my desktop folder for more than 6mths.

I did a scan on Spybot/AVGas/BDefender_v10/Pc-Cillin, with the latest datfiles... those returned NIL. C? <-QUOTE}

The mundane text file(s) in question contain the plain text address of a known phishing site according to the reps and this is why it is being flagged. For those wanting to take the jump.

:)

[bellgamin]

{QUOTE-> The mundane text file(s) in question contain the plain text address of a known phishing site according to the reps and this is why it is being flagged. <-QUOTE}Evidently VBA has now begun examining files for naughty words & unwise addresses. By so doing, VBA has gone beyond the role of an AV & is now turning into a censor. A scold. A busy-body.

I for one prefer an antivirus program to stick to its main job, & leave that other stuff to my mother-in-law. ::)

[the Tester]

{QUOTE-> The mundane text file(s) in question contain the plain text address of a known phishing site according to the reps and this is why it is being flagged. For those wanting to take the jump.

:) <-QUOTE}

Protection from a known phishing site?
Excellent idea.:thumb:
More av's should offer such protection.

[bellgamin]

{QUOTE-> Protection from a known phishing site?
Excellent idea.:thumb:
More av's should offer such protection. <-QUOTE}Many AVs have a WebSurfing module. Examples include but are not limited to Avast & Avira. Those modules are at the option of the user. They are not incorporated as part of the main antivirus program, nor should they be.

Thus, the apparent inclusion of *bad web sites* in VBA's main antivirus is a baaad idea, IMO.

[C.S.J]

i always feel a pull towards vba,

aint sure why, but i see potential and have kept my eye on it before i was even a drwebber. ;D

i will continue to do so....

[Blackcat]

{QUOTE-> i always feel a pull towards vba,

aint sure why, <-QUOTE}
Its your subconscious, Chris. If you install it you will see that it is a "scruffy" Dr Web in disguise.

It even has some of the same characteristics; cheap to buy, low footprint, good heuristics and a SLOW on-demand scanner. However, IME it has even better heuristics and its detection rates are a very pleasant surprise.

[C.S.J]

i already saw a familiarity Blackcat.

i must like these types of av's ;D

[bellgamin]

I also am a VBA *lurker-fan*. One major difference I note between DRW & VBA is that the VBA folks seem to be much more active in terms of frequent upgrades to their program, AND much more responsive to suggestions for improvement.

VBA does need a better logo, however. Its geometric box thingee lacks personality. I think the head of a bull wisent (national animal of Belarus) (http://en.wikipedia.org/wiki/List_of_national_animals) would be a good one for them (http://www.flickr.com/photos/the_big_pictures/1403629020/). 8)

[likuidkewl]

{QUOTE-> Many AVs have a WebSurfing module. Examples include but are not limited to Avast & Avira. Those modules are at the option of the user. They are not incorporated as part of the main antivirus program, nor should they be.

Thus, the apparent inclusion of *bad web sites* in VBA's main antivirus is a baaad idea, IMO. <-QUOTE}

If I am correct in my line of thinking, which I may well not be, this would be alerted normally through script checker or the email module; as a link in an email or an embedded iFrame via the script checker.
It should not "normally" happen by simply typing that into the web browser, it would have to be in some form that VBA32 normally scans, ie. emails, html(iFrame) in IE(only). HTH

{QUOTE-> I also am a VBA *lurker-fan*. One major difference I note between DRW & VBA is that the VBA folks seem to be much more active in terms of frequent upgrades to their program, AND much more responsive to suggestions for improvement.

VBA does need a better logo, however. Its geometric box thingee lacks personality. I think the head of a bull auroch (an animal native to Belarus) would be a good one for them. 8) <-QUOTE}

Keep that in mind as Mitya stated users have the say as to what the advertising logo's are in the specific countries. :)

[clambermatic]

{QUOTE-> VBA team is aware of this and addressing the problem. Forum thread:
http://vba32.de/wbb2/thread.php?postid=1479&sid=7e9ab5fe34c6c7a424823aacfbca6b25#post1479 <-QUOTE}

..bob_D: THANKS for your InstantReplay promptness in addressing, such queries! And likuidKewl too! :thumb: V appreciate that great attitudes.

As for the folks here at Wilders'...we all had a common denominator for being here, that is = in-depth Concerns for Net Security! So... It doesn't matter whether the Cat is black or white, as long as it catch/consume rodents (proverb of Chrmn Deng Xiao-ping). C?

[clambermatic]

Well, 'bellgamin' had mentioned about Vba32's logo. Me too has noticed its logo way back when it was installed (specially when it scans)... seems like a 'copycat' of Norton's...that swirling magnifier, Yikes!

Uggh... my suggestion for an improved (minimalist approach) logo in deployed real-time mode - Eliminate that swriling glass magnifier, when in monitor/scan mode; Replace magnifier by alternate-blinking of those 2 geometric triangles, 1on/shaded is off. ;)

As for the colours, whether it was red/blk or a tri-color tints... fine to me. It may look better if in tri-colour thou. Say... red/white/blue or burgundy/black/grey...whatever.

[Mitya]

{QUOTE->
VBA does need a better logo, however. Its geometric box thingee lacks personality. I think the head of a bull wisent (national animal of Belarus) (http://en.wikipedia.org/wiki/List_of_national_animals) would be a good one for them (http://www.flickr.com/photos/the_big_pictures/1403629020/). 8) <-QUOTE}

We are sorry but wisent is already used as a logo by MAZ, one of the biggest belorussian enterprises. :) Thank you for suggestion.

[Mitya]

{QUOTE->
Uggh... my suggestion for an improved (minimalist approach) logo in deployed real-time mode - Eliminate that swriling glass magnifier, when in monitor/scan mode; Replace magnifier by alternate-blinking of those 2 geometric triangles, 1on/shaded is off. ;)
<-QUOTE}

Good idea! We will keep it in mind :) Thanks.

[C.S.J]

i like the logo :)

[NAMOR]

{QUOTE-> i like the logo :) <-QUOTE}

Ditto.

[bellgamin]

{QUOTE-> i like the logo :) <-QUOTE}I am DEEEE-lighted to see Mitya visit these boards. Friendly responsiveness -- it's a major reason why VBA is a sure winner!

[the Tester]

{QUOTE-> I am DEEEE-lighted to see Mitya visit these boards. Friendly responsiveness -- it's a major reason why VBA is a sure winner! <-QUOTE}


You are 100% right about that!

FWIW I like the logo also.
Although a color change wouldn't be a bad idea.Burgundy and black may be a good start.

[clambermatic]

{QUOTE->
...FWIW I like the logo also.
Although a color change wouldn't be a bad idea.Burgundy and black may be a good start. <-QUOTE}

Tester, you got taste! :thumb:

That current colours in those duo-geometrics... the red is in light shade, with black in White background... to me, it's too generic in taste!!

My choice of using "burgundy" coz it's a heavier darker shade of red, with solid Black as outliners....IF based on a background that was very light Grey ...would be marvelous ;) And that, i termed as "vino-istically Bombastic"! A real ergo-connoisieur ;D

[Delgado]

What the hell is the use of an Anti Virus Programme that you cannot even download!

Thought I would try it, and cant even download it. Every link on the site of the Developers returns the answer "No such File" in Firefox, and page unavailable in IE.

Not a good start-dosent inspire confidence in the product!

???

[likuidkewl]

Could please provide the link you are using, and how you got to that link ie. the vba32.de site or the anti-virus.by site thanks!

This is the correct link:
ftp://anti-virus.by/pub/vba32-personal-3.12.2-english.msi

HTH

[C.S.J]

i think vba32 has potential,

however, i dont like the overall package, and the way its all put-together.

but still, i will keep my eye on it ;D

[Bob D]

Seems like Delgado may have a point, Dan.
Demo DL from http://www.anti-virus.by/en/personal.html site is apparently down. I'm sure it is only temporary.

[n8chavez]

{QUOTE-> Seems like Delgado may have a point, Dan.
Demo DL from http://www.anti-virus.by/en/personal.html site is apparently down. I'm sure it is only temporary. <-QUOTE}

It's been that way for a while. I entioned this issue at the VBA32 forums a while. I was given links to other download locations (thanks Dan), but this needs to be taken care of. It gives users a bad preception of VBA32.

[n8chavez]

{QUOTE-> i think vba32 has potential,

however, i dont like the overall package, and the way its all put-together.

but still, i will keep my eye on it ;D <-QUOTE}

I would like to see a VBA32 and Dr Web hybrid....as if that'll ever happen. I like the fact that VBA32 has varying levels of heuristics, great (and friendly) support, basic no-nosense interface. But Dr Web is also very small and has very small pattern files, which is something I'd love to see in the future from VBA32. But I agree with you Chish, definitely keep an eye on this one.

[C.S.J]

{QUOTE-> I would like to see a VBA32 and Dr Web hybrid.... <-QUOTE}
uurrrgghhh!

no thanks, i hope that will never happen, and i dont ever ever ever think it will either :D

phew! :P

[n8chavez]

{QUOTE-> uurrrgghhh!

no thanks, i hope that will never happen, and i dont ever ever ever think it will either :D

phew! :P <-QUOTE}

What's wrong with having the best of both? I think it's high time Dr Web had a quarantine feature that could deal with all their FPs, which VBA32 has.

[likuidkewl]

{QUOTE-> Seems like Delgado may have a point, Dan.
Demo DL from http://www.anti-virus.by/en/personal.html site is apparently down. I'm sure it is only temporary. <-QUOTE}

I mentioned this to Andy just a bit ago and he is going to let the web guys in Minsk know.

BTW - VBA32 needs more Vista testers, any takers? If yes, see the thread here (http://vba32.de/wbb2/thread.php?threadid=214)

_Dan

[Bob D]

{QUOTE-> ...i dont like the overall package, and the way its all put-together. <-QUOTE}
All a matter of preference, I suppose.
IMHO, I find it one of the most concise/cleanest AV GUI/program that I've encountered.
All the options I need organized in a succinct manner.
Substance over style.
I finally let my DrWeb license lapse in favor of VBA.
Personally, I love DrWeb, but I find it's multiple programs and navigation rather awkward.

Cheers

[bellgamin]

Trying to download VBA is VERY frustrating. I finally convinced my IT to give VBA a try, & then he couldn't get it to download. In his words: "It seems to be an amateurish operation." That's a bit too harsh, I think -- but they really need to get this thing fixed.

[Delgado]

{QUOTE-> Could please provide the link you are using, and how you got to that link ie. the vba32.de site or the anti-virus.by site thanks!

This is the correct link:
ftp://anti-virus.by/pub/vba32-personal-3.12.2-english.msi

HTH <-QUOTE}


This link worked! Where did you get this link from?

I tried the Demo link from the main site as quoted by other posters here.

???

[Blackcat]

{QUOTE-> Trying to download VBA is VERY frustrating. I finally convinced my IT to give VBA a try, & then he couldn't get it to download. In his words: "It seems to be an amateurish operation." That's a bit too harsh, I think -- but they really need to get this thing fixed. <-QUOTE}
Overall, they could try harder to attract new users.

1. I have also had problems occasionally over a couple of years with downloading full/beta versions from Minsk and find that the German Servers are much better; ftp://vba32.de/pub/

2. They should have a fully functional version without the need for requesting a demo-key.

3. They need to update/improve/make more attractive their main Belarus site. In contrast, the German (http://vba32.de/demo/content/view/20/38/)VBA32 site is much better.Two other small vendors, Dr Web and F-Prot have done wonders with their main sites over the last year.

[likuidkewl]

{QUOTE-> This link worked! Where did you get this link from?

I tried the Demo link from the main site as quoted by other posters here.

??? <-QUOTE}

I have my sources. ;)

In all actuality it is from the FTP site, I rarely ever go to the main site(s).

Since you are new to the whole VBA32 experience, one "trick" is to do a full scan on your system if it is questionable then tweak the monitor settings for efficiency. There are a few threads on this, but as I am quite busy at the moment they include setting the scanner for only new files, excluding things like the recycler and volume info, setting the heuristic level to your liking and tweaking the background scanner.

<!--EDIT-->
After reading BC's post before mine, I thought about it for a second and he is right until you get a "Demo" key from them you are kind in limbo. A suggestion is to use the beta key and the 3.12.3 beta it is extremely stable, I use it on a daily basis. That is one of the issues they had with the push for the Vista beta as they don't like releasing buggy code, even in beta!!!
HTH

_Dan

[Delgado]

Thanks for your interest, but with all this hassle to get the product, and then apply for key, I think I will leave it alone.
If they want people to buy the product, they must make it easier available.

This is rediculous!

:thumbd: :thumbd:

[Blackcat]

{QUOTE-> Thanks for your interest, but with all this hassle to get the product, and then apply for key, I think I will leave it alone.
If they want people to buy the product, they must make it easier available.

<-QUOTE}
I agree.

The trial/demo version should be fully functional without a relevant key-file and there should be several sites listed to download the program from.

VirusBlokAda need to attract, not deter users from trying their product.

[likuidkewl]

{QUOTE-> Thanks for your interest, but with all this hassle to get the product, and then apply for key, I think I will leave it alone.
If they want people to buy the product, they must make it easier available.

This is rediculous!
<-QUOTE}


I am sorry you feel that way, maybe sometime in the future you will reconsider. I have a feeling the way the demo works will be changing soon. ;)

[Blackcat]

{QUOTE-> I have a feeling the way the demo works will be changing soon. ;) <-QUOTE}
Me too ;)

[Delgado]

{QUOTE-> I am sorry you feel that way, maybe sometime in the future you will reconsider. I have a feeling the way the demo works will be changing soon. ;) <-QUOTE}

Well I finally gave in and e-mailed for a Demo Key. Dont know why, but my curiosity got the better of me about this prog.

I must say the response was quick, and I had a key in a couple of hours, and a download link, the same one as you gave me. The writer also said that they knew the link was broken on the main site, and it would be fixed soon.

I now intend to play with the prog, and see what it offers.

;D

[the Tester]

Delgado.
Enjoy the demo.
Hopefully they make trial versions easier to get in the near future.

[Blackcat]

{QUOTE-> The writer also said that they knew the link was broken on the main site, and it would be fixed soon. <-QUOTE}
It's working now.

{QUOTE-> I now intend to play with the prog, and see what it offers. <-QUOTE}
Good testing. Take a look over on the Forum (http://vba32.de/wbb2/board.php?boardid=19) for relevant posts, such as best settings.

{QUOTE-> Hopefully they make trial versions easier to get in the near future. <-QUOTE}
They are already working on this.

[trjam]

does the beta allow for scheduled scans. Dang, it looks like Dr.Web has some DNA in there.;)

[n8chavez]

{QUOTE-> does the beta allow for scheduled scans. Dang, it looks like Dr.Web has some DNA in there.;) <-QUOTE}

No. There is no scheduling component, as of yet, in VBA32.

[clambermatic]

{QUOTE-> I agree.

The trial/demo version should be fully functional without a relevant key-file and there should be several sites listed to download the program from.

VirusBlokAda need to attract, not deter users from trying their product. <-QUOTE}
I agree with the opinion of 'blackCat'... it should not deter, but ATTRACT as much as you can with prospective new users!

The IT section of 1 of my current client (into international logistics) has been deploying it (but not in blanket fashion) only on new laptops issued for top tier officers... due to my insistence. Apparently due to my persistence, their IT chief also tried it a few months back & later asked me its advantage against Norton/McAfee VScan. All i argued was... "U don't want a scanner that bogs you down on startup/pwr-off, do you? Check it out & report back to me later!"

LOL... He came back in 3 days time & say..." its RAM footprint was indeed miniscule!"

Darn IT guys... :P they can't make their own difference on basis of "cost-efficienciencies!"

----------------------------------
EDITED: missed highlights

[clambermatic]

Frankly speaking... vba32 is one hell of an efficient/effective anti-AVs! Not a RAM hoager with hi-speed scannings (do some object-scan tweaking just after an initial full scan from initial deployment)!

In my personal opinion :D - it ranks within the Top 5 fast scanning demons benchmarked by 'Clementi & folks'! Yes, 'scheduled-scans' hasn't been integrated yet... but my feeling was, they will - in the near-future.

The thing Mitya & the Minsk folks should tweak on was... allow demos to incorporate major features that will run on a 6mths trial basis, and without user's key; kept up with the kind of end-users' support (whether via forum or emails) that they got now and.... voila, you got such a fine example of an engineering huh! :thumb:

:blink: hmm... why do i always had a soft spots for softwares done from the Baltic areas?? ;)

[lucas1985]

The showstopper for me is the low on-demand scanning speed (highest settings) according to AV-C (haven't tried to test myself). I don't use realtime AVs.
Does VBA32 have a standalone command line scanner or it's inbuilt into VBA32 for Windows?
Clicking on console scanners shows this message:
{QUOTE-> We are sorry to inform you that there is no description of the given product in English. If you are interested in buying the product, mail us support-en[at]anti-virus.by to get all information you need.
<-QUOTE}

[likuidkewl]

{QUOTE-> The showstopper for me is the low on-demand scanning speed (highest settings) according to AV-C (haven't tried to test myself). I don't use realtime AVs.
Does VBA32 have a standalone command line scanner or it's inbuilt into VBA32 for Windows? <-QUOTE}

VBA has a CMDline scanner 'vba32w' available(included w/ the WS version), and also a program called vba32scan a "demo" of sorts.

ftp://open.by/vba/vba32w-latest.rar - cmdline with latest defs
ftp://open.by/vba/Vba32Scan.zip - "demo" scanner

HTH

[clambermatic]

Howdy, "L_1985"

Check into this vbA English forum & post your 'command line' related queries (someone should reply in a nick of time)~ http://vba32.de/wbb2/board.php?boardid=19

;)

[lucas1985]

Thanks likuidkewl :)
I'll try the demo. What are the limitations (30 day)?

[clambermatic]

Yikes ....LOL, see?? "likuid" beats my 'nick of time' quote, with regards to vbA! ;D

That's how vbA was... ain't No RAM-Hoager!!!

[likuidkewl]

{QUOTE-> Thanks likuidkewl :)
I'll try the demo. What are the limitations (30 day)? <-QUOTE}
Both restrictions, cmdline w/o license and demo scanner, are no removal if found. The VBA32 scan is not anything like the actual install it is just a stand alone to demo the technology.

In re: clambermatic last check before bed :)

[lucas1985]

{QUOTE-> Yikes ....LOL, see?? "likuid" beats my 'nick of time' quote, with regards to vbA! ;D

That's how vbA was... ain't No RAM-Hoager!!! <-QUOTE}
Thanks clambermatic :)
I'm trying to limit registering at forums LOL.
{QUOTE-> Both restrictions, cmdline w/o license and demo scanner, are no removal if found. The VBA32 scan is not anything like the actual install it is just a stand alone to demo the technology. <-QUOTE}
Thanks again :)

[clambermatic]

...shalom to you - L_1985 & Likuid, and always welcome! ;)

[Blackcat]

{QUOTE-> The showstopper for me is the low on-demand scanning speed (highest settings) according to AV-C (haven't tried to test myself). I don't use realtime AVs.
<-QUOTE}
Settings can be tweaked to increase the speed of the on-demand scanner, because if your machine is clean and you check all downloaded files, you do not need the highest settings.

[Delgado]

Well I downloaded and installed VBA32, and have it running with Look n Stop Firewall.

Seems to be running smoothly at the present (touch wood).

Ive tweaked the settings a bit-that was easy because its almost identical to Dr Web, that I used about a year ago.

How good it is at stopping things and removing viruses, I will see in due course. It certainly runs light, and is very cheap to buy!

:thumb:

[Delgado]

Well, this seems to be quite an impressive little Antivirus. Having tweaked the prog and let it settle in , the scans are fast and dont take much ram when running

Might consider buying this one.

Anyone comment on the advantage of this one over Dr Web, which also runs well.

;D

[Mitya]

{QUOTE-> Well, this seems to be quite an impressive little Antivirus. Having tweaked the prog and let it settle in , the scans are fast and dont take much ram when running

Might consider buying this one.

Anyone comment on the advantage of this one over Dr Web, which also runs well.

;D <-QUOTE}

Thank you for using Vba32 :)

[Blackcat]

{QUOTE-> Anyone comment on the advantage of this one over Dr Web, which also runs well.

;D <-QUOTE}
IME, heuristic detection is much better.

[zfactor]

hmm i may end up trying this one. how are detections rated, are there any good reviews of this anywhere online?
what does this offer / doesnt offer over avira.. feature wise?
thanks

[the Tester]

{QUOTE-> hmm i may end up trying this one. how are detections rated, are there any good reviews of this anywhere online?
what does this offer / doesnt offer over avira.. feature wise?
thanks <-QUOTE}

There may be a review at CastleCops.
It offers more configurability and more reliable updates than AntiVir free.
AntiVir detects more and probably runs lighter.

[n8chavez]

{QUOTE-> There may be a review at CastleCops.
It offers more configurability and more reliable updates than AntiVir free.
AntiVir detects more and probably runs lighter. <-QUOTE}

I would not say that is true. The VBA32 team has done a great job at getting resource usage down in the recent builds. For me, it is definitely lighter that Avira and even lighter than Dr Web.

[Blackcat]

And an Anti-RootKit (http://vba32.de/wbb2/thread.php?threadid=202)module on the way as well :thumb:

[likuidkewl]

{QUOTE-> And an Anti-RootKit (http://vba32.de/wbb2/thread.php?threadid=202)module on the way as well :thumb: <-QUOTE}
*Improved* - :)

[the Tester]

{QUOTE-> I would not say that is true. The VBA32 team has done a great job at getting resource usage down in the recent builds. For me, it is definitely lighter that Avira and even lighter than Dr Web. <-QUOTE}

Nope. Not on this box.
While they have substantially reduced resource usage,AntiVir PEC ran lighter for me.

[likuidkewl]

{QUOTE-> Nope. Not on this box.
While they have substantially reduced resource usage,AntiVir PEC ran lighter for me. <-QUOTE}
ala whatever works for you :)

[trjam]

I think it is really to close to call or worry about.:dry:

[the Tester]

{QUOTE-> ala whatever works for you :) <-QUOTE}

I am going by my own experiences with the two programs.
Currently using the Vba32 3.12.3 beta and leaning toward buying a license for Vba32.

[trjam]

{QUOTE-> I am going by my own experiences with the two programs.
Currently using the Vba32 3.12.3 beta and leaning toward buying a license for Vba32. <-QUOTE}
That makes 2 of us. I am really impressed with what they are doing and the feedback from the developers is great.;)

[trjam]

they are moving fast, today added was:

+ Vba32AntiRootkit module (load by launching Vba32arkit.exe)

+ Vba32AntiRootkit Russian Help file (vba32arkitru.chm)

[Sjoeii]

Any news on detection rate and resources?

[trjam]

Yep, great and great.;)

No, I did my own. On one computer ran scan with Avira and found nothing which I expected. Ran test again with VBA with setting at maximun and found nothing. Good no FPs. Ran again with Dr. Web and 6 FPs and yes I uploaded them.

Then there is this (http://www.anti-malware.ru/index.phtml?part=tests&test=selfprotection), which Blackcat may have already posted, but it was based on self protection and they came in second. I like where they are going. They are very focused on what they want to accomplish. I have seen this before and it worked for some;) and failed for others:( , but I have no doubts that this is going to work. I have already seen what they can do. And the kicker is their pricing. This is really a great deal and now would be the time to buy in. Especially on a 2 year license.:thumb:

[C.S.J]

{QUOTE-> Yep, great and great.;)

No, I did my own. On one computer ran scan with Avira and found nothing which I expected. Ran test again with VBA with setting at maximun and found nothing. Good no FPs. Ran again with Dr. Web and 6 FPs and yes I uploaded them.
<-QUOTE}
thanks for uploading them, but no need for the little jibe jeff.

vba32 found 1 FP on my machine when im clean with drweb, and this was only on default 'optimal'.

it is different for everyones machine regarding this.

however, i have for a long time kept my eye on vba, and will continue to do so, but i still feel they need to put all their technology into a better package.

*looks closely

:D

{QUOTE-> Any news on detection rate and resources? <-QUOTE}

resources seem to be fine (low),

av-comp: 84% (http://www.av-comparatives.org)

and then later on....

av-test: 88.59% (http://blog.chip.de/0-security-blog/microsoft-verbessert-seinen-virenscanner-20070821/)

[trjam]

No jibe Chris. I have always like Dr. Web alot. A couple of things I wished differently, and found those in this. They are both great products and even though it didnt find any FPs, that doesn not imply its detection ability is better then the Webs, well, not just yet.;)

[zfactor]

looks like a good program. my wife really wants a all in one though for her. wish they offered a suite.

[C.S.J]

well, detection rates really mean squat, all these .99%

the thing that is real, is detecting things that users will find, and removing them effectively.

but, i know results mean alot to people so here goes:

av-test:

was 80.99% (http://www.pcwelt.de/start/sicherheit/archiv/64946/index.html) (fall 2006)

now 88.59%

an improvement indeed :)

there are others that have improved too, so its all good :D

[Blackcat]

{QUOTE-> Any news on detection rate and resources? <-QUOTE}
The Guard is very light; only 1 running process taking up about 25MB VM here. Set the Monitor to "Scan only new files" and it is as light as a feather in real-time.

Detection rates, IME are good; below the likes of KAV and AntiVir but on par/higher than other better known scanners. Important to have the "paranoid" heuristics set though for the best detection.

[Banshee]

{QUOTE-> Yep, great and great.;)

No, I did my own. On one computer ran scan with Avira and found nothing which I expected. Ran test again with VBA with setting at maximun and found nothing. Good no FPs. Ran again with Dr. Web and 6 FPs and yes I uploaded them. <-QUOTE}


Only 6.Not too bad this time

[C.S.J]

{QUOTE-> Only 6.Not too bad this time <-QUOTE}
we can all bash products,

maybe i should go over to the avira threads and have a field-day!

[BlueZannetti]

OK folks,

Let's stay focused on the topic of this thread - VBA32.

Thanks in advance

Blue

[zfactor]

{QUOTE-> we can all bash products,

maybe i should go over to the avira threads and have a field-day! <-QUOTE}


yeah i actually like dr web from the times ive tried it but they dont offer a full suite and that what the wife wants. i may try it again once they release the new version and its out of beta. then ill add look n stop back n for firewall..

[trjam]

ye of little faith Chris. I said max setting not paronoid which is the highest setting in VBA and at that setting, well, lets just say Chris, you aint got nothing to worry about .;) Yet, time will tell.

[trjam]

Whats cool about it is the ability to scan only new files, and I will leave that comment right there. I like the logs set up. Now the beta has added rootkit detection. Yeah I like a product that tries to Cure before Delete.

[zfactor]

is that sorta like what kav did with its istreams? or how does it know what is new and old i assume it must you some sort of cache system then

[Bob D]

{QUOTE-> ........how does it know what is new and old i assume it must you some sort of cache system then <-QUOTE}
Assuming (as with any new AV) you've done a full system scan, thus assuring that your system is clean (and/or infected/suspicious files cured or quarantined) :
When "Process only new files" is selected, all files created / written to disc are scanned, BUT existing files can be opened and existing executables run (i.e.: program executables) without scanning.

[lucas1985]

What about modified files?

[Bob D]

{QUOTE-> What about modified files? <-QUOTE}
Any file modification (as it is saved) will be written to disc and subsequently scanned.
It works in a similar manner to DrWeb's 'smart mode' (for those familiar with it).

[lucas1985]

{QUOTE-> It works in a similar manner to DrWeb's 'smart mode' (for those familiar with it). <-QUOTE}
Understood :thumb:
IMO, security-savvy people who run real-time AVs should be using these settings in their AVs.

[trjam]

Not totally true. I realize I dont fall into that catagory, ;) but I have no prblems understanding the layout and meaning of their choices. And feel totally secure.

[bellgamin]

{QUOTE-> And feel totally secure. <-QUOTE}Don't look back -- some black hat might be gaining on you. :o

[trjam]

{QUOTE-> Don't look back -- some black hat might be gaining on you. :o <-QUOTE}

My legs are still quick.;)

[likuidkewl]

For those of you who are interested in downloading and trialling vba32 you may look at the following post for the correct download location:
http://vba32.de/wbb2/thread.php?threadid=206

A 3 month test key can be obtained by emailing jv(A-t)vba32.de
see here for more information - http://vba32.de/demo/content/view/15/31/


or look to the Official VBA32 website:
http://anti-virus.by/en/personal.html

:)

[C.S.J]

{QUOTE-> Here is a trial key for all vista users. <-QUOTE}

beta licence key here (http://www.vba32.de/wbb2/attachment.php?attachmentid=70)

[likuidkewl]

{QUOTE-> beta licence key here (http://www.vba32.de/wbb2/attachment.php?attachmentid=70) <-QUOTE}

That key is ONLY for the vista beta

:)

[C.S.J]

i know, thats why i put it in the quote :)

makes it easier for people wanting to test it though

[trjam]

{QUOTE-> That key is ONLY for the vista beta

:) <-QUOTE}
And Vista users are more then welcomed to assist in the beta.:)

[s4u]

Where can I download the b eta file?
Curious to see what piece of software is keeping trjam happy for more than three days now ;)

[trjam]

the beta is for Vista only. If you want to help, click on the support forum link in my sig and go to the beta forum and scroll down in this thread (http://vba32.de/wbb2/thread.php?threadid=215). You will see a post from Andrey with the zip file for the beta key.

The beta is here (ftp://open.by/vba/vba32vista-3.12.4-english.exe).

If you use the beta, change your update path to:
http://www.anti-virus.by/beta/update/

If you want to just trial the regular demo, you should mail them at info@anti-virus.by (subject should be Evaluation key for VBA32 Personal).

[zfactor]

tried this out last night and i actually like it. ran great .. i wish they offered a full suite though.. nice overall av though

[Banshee]

@ all who are still running XP:


You can use the windows vista beta version+ betakey.zip available on the the Vba32 forums. It works on both xp and vista.

[trjam]

{QUOTE-> tried this out last night and i actually like it. ran great .. i wish they offered a full suite though.. nice overall av though <-QUOTE}

That will come in time.

[bellgamin]

{QUOTE-> i wish they offered a full suite though.. <-QUOTE}I hope they do NOT do that. I detest the suite concept. Much prefer to pick & choose.

With all the *big guys* doing the suite thing (KAV, AVG, Avira, et al et al et al) an antivirus "specialist" would be a good niche for a smaller outfit such as VBA in my opinion. For a small team of programmers, isn't it better to concentrate on producing the best AV rather than a whole suite of fair-to-adequate modules?

Or else, VBA should consider cutting "licensing deals" -- such as DrWeb has done with Safe'n'Secure, & Kaspersky has done with OnlineArmor (OA). For example: given a choice between (a) OA with the latest FULL version of VBA and (b) OA with an OEM version of KAV, I would much prefer to buy (a).

[the Tester]

I also hope that they don't produce a suite and just concentrate on developing the antivirus.

[C.S.J]

{QUOTE-> I also hope that they don't produce a suite and just concentrate on developing the antivirus. <-QUOTE}
i think its inevitable that all will produce a suite at some stage.

by this i mean, av, firewall and antispam.

the av standalone will always be available too though. :)

[s4u]

Installing vba as we speak. let's test the damn thing

[Bob D]

{QUOTE-> That will come in time. <-QUOTE}
I doubt it.
(Unless we are talking a long long time.)
Their appeal (to me) is their spartan functionality / efficacy.
Just as well.

[JimGoo]

VBA32's Windows XP Professional SP2 version runs well on my three systems. However, I installed and then uninstalled the Vista beta on a fourth computer because, well, I guess this old Alpha male is getting weary of trying so many Betas ;D

[Delgado]

Been trying this with trial key, and now have purchased.

Do I have to remove trial key from the installed folder, or will the new key overide? Seems to be no info on this.

Thanks.

???

[zfactor]

the more i use this the more i like it....

[clambermatic]

{QUOTE-> Been trying this with trial key, and now have purchased.

Do I have to remove trial key from the installed folder, or will the new key overide? Seems to be no info on this.

Thanks.

??? <-QUOTE}
...nothing wrong if you left the 'trial key' in the installation folder thou. But you may also want to have a copy of it and archived somewhere else, that's what i do to any subscriptions i acquired.

[Mitya]

{QUOTE-> Been trying this with trial key, and now have purchased.

Do I have to remove trial key from the installed folder, or will the new key overide? Seems to be no info on this.

Thanks.

??? <-QUOTE}

Just overwrite the trial key with the purchased one.
Thank you for using Vba32 :)

[Delgado]

Thanks for replies-
Ive overwritten key as suggested-Thanks

;D

[Delgado]

Whats going on here!!!

Ive just had an update, and VBA32 has signalled MSN Messenger EX as a Trojan!!!

It recommended a complete scan which has now blocked my messenger, and removed the exe to Quarantine!!

Not happy at this!!!

:thumbd:

[dNor]

Probably just a FP - maybe let them know about it?

[Bob D]

{QUOTE-> ....has now blocked my messenger, and removed the exe to Quarantine!! <-QUOTE}
Simple fix.
Go into your Quarantine files and select "Restore".
Exclude offending file in Monitor's settings.
Submit offending file to:
feedback <AT> anti-virus.by

PS: was it flagged as infected or suspicious?
Heuristic level at Max or Excessive?

[Delgado]

{QUOTE-> Simple fix.
Go into your Quarantine files and select "Restore".
Exclude offending file in Monitor's settings.
Submit offending file to:
feedback <AT> anti-virus.by

PS: was it flagged as infected or suspicious?
Heuristic level at Max or Excessive? <-QUOTE}


Easier said than done Bob!

It was flagged as infected, and the Heuristic was set as the default. When I tried to restore, the whole PC froze and nothing would work. I had to reboot, and when Windows came back up, Windows Live Messenger was completely gone!!

Ive had to reinstal Windows messenger-the original one from the Windows prog.

Ive taken VBA32 out now. Cant be doing with too much of this.

???

[Bob D]

{QUOTE-> ...Cant be doing with too much of this.??? <-QUOTE}
I understand.
Odd though, in that I've found VBA32 to be absolutely and utterly stable (which, I'm sure, is of no consolation to you).
Can you nevertheless send the offending file(s) to VBA32 for analysis?
May I also ask which files it flagged as infected?
(I have one of my licenses on a machine with Messenger, so far without incident)

[Bob D]

{QUOTE-> ...Ive just had an update, and VBA32 has signalled MSN Messenger EX as a Trojan!!! <-QUOTE}
Not to beat the issue to death, but was your update MSN Messenger 8 Working BETA?
If so, it may well be infected.
http://www.informationweek.com/news/showArticle.jhtml?articleID=175700342
In any case, I would do a full system scan with an alternate AV to make sure there is no malware present.

[Delgado]

{QUOTE-> Not to beat the issue to death, but was your update MSN Messenger 8 Working BETA?
If so, it may well be infected.
http://www.informationweek.com/news/showArticle.jhtml?articleID=175700342
In any case, I would do a full system scan with an alternate AV to make sure there is no malware present. <-QUOTE}

I dont recall ever downloading an update to my Messenger. I am referring to the VBA update that came in. Unless my messenger was updated by Microsoft automatically, which I doubt.

The file that was referred to was Messenger exe, which was in Local disk C -Programme files-MSN Messenger. I cant send anything to be checked because it all dissapeared!

I will check with another Antivirus, and report back.

Thanks for your interest.


:thumb:

[Delgado]

Just completed a complete scan of PC with Kaspersky 7, and found nothing. I also scanned the remaining files in the MSN Messenger, and again found nothing. I cant scan the exe file because that has been deleted by VBA.

I guess its a false positive, but a dam nuisance all the same!

???

[likuidkewl]

Thank you for posting this in the VBA32 forums. It will be looked into soon.

[Mitya]

{QUOTE-> Whats going on here!!!

Ive just had an update, and VBA32 has signalled MSN Messenger EX as a Trojan!!!

It recommended a complete scan which has now blocked my messenger, and removed the exe to Quarantine!!

Not happy at this!!!

:thumbd: <-QUOTE}
Could you please recall the specific name of the trojan. As I've stated at the Vba32 forum, please send us zipped Qtn folder.

[Delgado]

{QUOTE-> Could you please recall the specific name of the trojan. As I've stated at the Vba32 forum, please send us zipped Qtn folder. <-QUOTE}

I cant recall the exact name of the Trojan, and yes Ive sent you a zipped Qtn folder, as I have said on the Vba32 forum.

[Mitya]

{QUOTE-> I cant recall the exact name of the Trojan, and yes Ive sent you a zipped Qtn folder, as I have said on the Vba32 forum. <-QUOTE}
Thanks

[the Tester]

{QUOTE-> ...nothing wrong if you left the 'trial key' in the installation folder thou. But you may also want to have a copy of it and archived somewhere else, that's what i do to any subscriptions i acquired. <-QUOTE}

It worked better for me to delete the trial key and then click on the license key which I had copied over to the program folder before that.

[C.S.J]

{QUOTE-> Been trying this with trial key, and now have purchased.

Do I have to remove trial key from the installed folder, or will the new key overide? Seems to be no info on this.

Thanks.

??? <-QUOTE}
just replace (copy & replace) the key file with the purchased one.