PDA

View Full Version : AhnLab SiteGuard: Anyone using it?


sg09
September 26th, 2010, 04:58 AM
-{ Quote: "SiteGuard protects the Internet itself which is the incoming path of malicious codes. This enables to eliminate the possibility of infection at the initial stage prior to getting infected and repaired afterwards. Also, it prevents the damage from phishing sites that were made for the purpose of deception. SiteGuard can promptly respond to new, mutated malwares by using the heuristic detection which can detect the pattern of hacking and injection of malicious scripts. It can also block the site instantly via the scanning function in real-time by getting the risk information of a web page. The risk information is periodically and rapidly updated by the automated process from the separate update server. Moreover, SiteGuard quickly finds out the PC that causes the modification in the internal network via the scanning function of the internet modification. It controls the internet of PC, so the originated place of malicious codes can be figured out. " }-

222116

Features
-{ Quote: " Scans and prevents malicious codes and other risks through real-time scanning by V3 engine Real-time scanning of web contents using exclusive heuristic detection functions.
Removes malicious elements through complex analysis of information based on the database and shows only the safe elements.
Detects and alarms PC infection and HTTP modifications
Scans and repairs malicious scripts (heuristic detection)
Detects and alarms :
- ARP Spoofing attacks that modifies the entire LAN
- Malicious scripts injected and executed by HTTP packet modifications through HOST/DNS modification/web browser modifications.
Safe downloading of Internet files
Scans malicious codes when downloading files linked to the web page. Provides multi-download function and view of detailed status for convenient downloading.
Displays safety marks on the links
Displays safety marks on the result links of major search engines in order to prevent visiting harmful websites.
Blocks phishing sites
Blocks phishing sites provided real-time by the international Anti-Phishing Working Group.
" }-

http://global.ahnlab.com/en/site/product/productSubDetail.do?prod_type=CD&prod_class=C&prod_seq=9001

Download
hxxp://siteguard.filezaru.com/ASGMaster/asg_setup.exe

-{ Quote: "MD5 : 0e013fadb99a9f2525c2c7e59bc85008
SHA1 : 4a97eb2a8c548fc7304ebd1f1d9956e9357df8db
SHA256: 60f8ef5cf5a3d6b9952a4ac6f0ad4f38fbded620cbcedd0c5aba87a880dc1e3d" }-

whitedragon551
September 26th, 2010, 08:17 AM
Sounds like a combination of Firewall, antivirus, and adblock features all thrown into one.

m00nbl00d
September 26th, 2010, 08:27 AM
Only works with Internet Explorer, not to mention the following:

-{ Quote: "
Memory: Higher than 256 MB
HDD:More than 300 MB space
" }-

That much memory and HDD space for such software? Heck! I mean, in a system with 1 GB of memory, it will consume more than 1/4 of memory. It's insane.

m00nbl00d
September 26th, 2010, 08:31 AM
-{ Quote: "Sounds like a combination of Firewall, antivirus, and adblock features all thrown into one." }-

That would make sense, considering the system requirements, which would be way too much for an application only checking links.

whitedragon551
September 26th, 2010, 08:32 AM
-{ Quote: "That would make sense, considering the system requirements, which would be way too much for an application only checking links." }-

Two of those features can easily be taken care of inside the browser without the huge overhead.

Cutting_Edgetech
September 26th, 2010, 08:46 AM
It may be something to keep an eye on for the future. Maybe some day they will lower its memory usage. It would be worth wild if someone wanted to test it against some infected sites on a VM. That would be interesting.

sg09
September 26th, 2010, 09:42 AM
Hi guys,
I guess some confusion is here. I am now trying it under RSS.
1. It is not a suite. Its merely an addon like link scanner. But no search engine integration.
2. It doesn't consume too much RAM or Space. See in the screenshots attached.
3. Its for IE only, that's the sole problem with it. No startup item.


222117

222118

222119

222120

222121

sg09
September 26th, 2010, 09:43 AM
222122

222123

222124

222125

222126

sg09
September 26th, 2010, 09:44 AM
222127

222128

222129

222130

222131

m00nbl00d
September 26th, 2010, 10:05 AM
Thank you for the screenshots.

I was, indeed, finding odd the system requirements at the web site.

It seems to be an interesting application.

sg09
September 26th, 2010, 10:12 AM
I tested with some fresh exploit pages from MDL. But many were blocked by my layered security. Other exploits were not blocked. So I am not confident with this app.
I made a mistake. It does show ratings in some web search results.
It didn't block a Fake AV which is detected by AhnLab.

222135

222136

222137

firzen771
September 26th, 2010, 10:23 AM
seems like a cool program, wish it worked with firefox