Looking for a good AT to run alongside with NOD32…

[Matt_Smi]

Hey all,

I am looking for a good anti Trojan that will run alongside NOD32 without any conflict, and I would also like that it be low on resources. From my somewhat limited research the two heavy hitter AT’s seem to be BOclean and TDS-3. Ewido also seems to be recommended, and is free! Do BOclean and TDS-3 offer much better protection than Ewido free? Will all of these run smoothly with NOD? Which one is the lightest on resources? I was also thinking of waiting until TDS-4 and see how that pans out. Thanks for any info.

[tazdevl]

Ewido free is just an on demand scanner. BOClean and TDS have process scanners. I am using BOClean, very happy with it. Didn't like TDS and Ewido's Process Guard caused slowdowns on my system. You might encounter something different.

[TopperID]

It's all opinion of course, but look at these reviews :- http://www.anti-trojan-software-reviews.com/

Also bear in mind that there have been improvements in some of them since then (notably Ewido and A2).

[mercurie]

I have always run my BoClean along with several different AVs from time to time. I can not speak to NOD except I am sure one day I will try it too. IMHO you just can not go wrong using BoClean for your trojan protection with any AV. ;)

[FanJ]

While posting this:

On W98SE :
NOD32, BOClean and TDS-3 (Execution Protection enabled) resident ;)

[Mr2cents]

I'm running Boclean with nod32. They get along great together. I strongly endorce Boclean. Tremendous product, and uses little system resources. A set it, and forget it anti trojan. Frequent updates also. As previously mentioned, I'm running nod32 with boclean now. However, I've tried out a lot of different antivirus products. Boclean has run good with all of them. No conflicts whatsoever. ;D

[controler]

I am looking for a good AT with long legs and a short skirt.
It will be ok if the AT wears those smart glasses also.
SInce the 60's look is back in again, I guess I wouldn't mind the AT having a 60's GUI. For deep scanning I would like the button to read FAROUT!!!
The tray icon could be a peace sign ;)


Bruce

[Infinity]

lol Controller ;D

-{ Quote: "I am looking for a good AT with long legs and a short skirt." }-


you allready found it, look in your closet ;)

[Matt_Smi]

After doing some research it seems that TDS-3 is the best at detecting trojans but a bit heavy on resources. While BOclean is very light yet still effective and works good with NOD32. Since Boclean does not have an on demand scanner I could always install Ewido free for that purpose, or even TDS-3 (although TDS that would probably be overkill as I browse very safely). It sounds like Boclean as resident and Ewido free as on demand would make a good combo, or if TDS-4 comes out soon I may just go for that as I have heard it is going to be much better on resources.

[Infinity]

-{ Quote: "

I hope you are covered in the mean time...cause we don't hear anything about that release ;D

ewido and boclean...I got them all four (tds-boclean-ewido-trojanhunter) and if I could pick one I would choose Ewido, honestly ...

I had Boclean as a gift...otherwise it would be ewido running in background...I kid you not!!!


cheers

[ellison64]

Whenever a poster mentions that he wants low resource programmes , i wonder whether they have an old system (like myself...w98) rather than a modern monster gigabyte computer with turbo speed and massive ram.If it is the case that you have an older operating system where resources are crucial, im not sure whther ewido supports those operating systems,as the site says for windows xp and 2000 (though someone might correct me).If thats the case then id personally choose boclean.
ellison

[TopperID]

You're right, Ewido works for XP and 2000 only.

[Matt_Smi]

-{ Quote: " I hope you are covered in the mean time...cause we don't hear anything about that release ;D" }-

I have my very safe browsing habits (which matters most) and NOD32 in the meantime, for me an AT is more of a peace of mind thing rather than a necessity.

-{ Quote: " Whenever a poster mentions that he wants low resource programmes , i wonder whether they have an old system (like myself...w9 rather than a modern monster gigabyte computer with turbo speed and massive ram." }-

I actually have a pretty powerful machine running XP, but I hate programs that suck RAM and CPU cycles, and after a while they can add up to a noticeable slowdown and problems. I like to keep background apps to a minimum and keep my system fairly simple, it seem to lessen conflicts and problems.

[gunnarj]

I don't believe that TrojanHunter is a resource hog, and it is also one of the top-rated AT's. I use it along with Nod32 with no problems, and although there is fierce competition between the top 3 or 4 AT's (TrojanHunter, TDS-3, BoClean, and Ewido) I don't think that one or two of them are superior to the others. It's more a matter of personal choice.

I also use TDS-3 as an on-demand AT, and using Ewido ( I guess from what I hear the active/running part is only temporary for the free version). I've also been told that it is perfectly fine to run Ewido alongside another AT & an AV, and indeed I've had no problem doing so, running all three together (Nod32, TH, & Ewido).

gj

[halcyon]

I can't recommend TDS-3 myself, and I'm a registered user.

They are having problems with the automatic update (which breaks down sporadically). It's been nagging for _at least_ over a year and still no fix in sight. You have to manually keep on updating up-date servers and databases. Not nice.

Also, TDS-3 starts up Agentsvr.exe which you can't disable. Developers refuse to see this as a problem, sighting memory usage on _THEIR_ machine (not on yours) as insignificant.

Combine this with the fact that they've been advertising free upgrade to the 'really soon to be released TDS-4' for quite long now and it still isn't out.

Additionally, from what I gather here, the TDS-3.21 engine is not the best in class anymore in detecting all trojan hiding techniques (I could be wrong here, as this is second hand information and I'm not an expert in anti-trojans).

Granted, TDS-4 is _supposed_ to have upgraded/improved features, but it's very hard to judge it, because it is not available. Available 'soon' could just as well mean available in 2006 or 2007. How am I supposed to know?

Finally, I have already once gotten into a situation where TDS-3 missed a trojan that Bitdefender 7.x free spotted. Again, a single incident, but I'd expect excellent trojan defense from a dedicated anti-trojan. At least on par with what a free anti-virus (with anti-trojan on the side) can muster.

So, based on all of the above, I'd recommend you consider some other options as well.

I'm not saying TDS-3 is bad, but the developer attitude against legitimate bug fix requests, upgrade path for the program and the current working of the program itself... well, let's say all of these three leave quite something to be desired.

I'm personally considering moving over to Ewido (paid) or Trojan-Hunter, unless the makers of TDS-3 pull some miraculous improvement act (it's a long time coming, imho, but that's just my personal opinion).

Has anybody done a scanning speed, detection accuracy and system resource use comparison between Ewido (paid) and Trojan Hunter (resident protection active in both)?

regards,
halcyon

[claire]

Hi,

I run Nod and Trojanhunter together without any problem

BTW TH4.2(the latest version) is available since today ;)

[Don Pelotas]

When i used Nod32, i used it together with BOClean. It makes a potent combo with not much drag on resources. It seems to me that you own choice of Nod/BOClean with ewido free is very good with this in mind:
-{ Quote: "I am looking for a good anti Trojan that will run alongside NOD32 without any conflict, and I would also like that it be low on resources. " }-
If you like to trial products before using, then Ewido (full) doesn't seem to use much (at least on my box) resources. :)

[Infinity]

same here, I would trial first and to be honest as I am licenced user of trojanhunter too: trojanhunter is of no match to Ewido, Ewido is far more better, detects a lot more.

if you want a lightweight trojanscanner: Ewido (still is very light on my system) or boclean but Ewido has everything that boclean has and has some more features too.

just my two cents.

[ReGen]

-{ Quote: "same here, I would trial first and to be honest as I am licenced user of trojanhunter too: trojanhunter is of no match to Ewido, Ewido is far more better, detects a lot more.
" }-
Would you care to show us a list of all the ‘Trojans’ Ewido has caught on your system that TrojanHunter missed?
I’m sure you‘d have submitted all of them to TH’s TDS3 and Boclean’s authors, so that us ‘none’ Ewido users, can be as well protected as you?

[Infinity]

firstly I wasn't bashing on trojanhunter nor bashing at boclean, they are both very good and all have their pro's and contra's. All of them.

but if would choose Ewido or Trojanhunter: I'd choose Ewido and if someone has a prob with that, that wouldn't be mine ;)

take my post as you want.

it has been a very long time now that some of my antitrojans had caught a nasty. (nod32 intercepts them all) and in the beginning I did send samples. To be honest I aint an active submitter anymore of malware samples, I am just glad they finds them and I am covered.

Inf.

[mercurie]

Infinity,
Dedicated BoClean user here. No offense taken by me. Just thought you might want to know. I like diverse opinions. ;) :lurking:

[snowbound]

-{ Quote: "Infinity,
Dedicated BoClean user here. " }-

Same here, along with NOD32. ;)

No problems what so ever. 8)



snowbound

[Infinity]

No prbs, I can see why everybody likes boclean (hey I like it too but I cannot have four antitrojans on access right?:))

at the moment boclean and ewido together on access and truely nice to eachother.

have a nice day

Inf;

[Firecat]

I'd recommend Ewido or TrojanHunter, as per my personal opinion. Not too good at ATs...

[Don Pelotas]

-{ Quote: "at the moment boclean and ewido together on access and truely nice to eachother." }-Yes, they do seem to like each other, don't they. ;)
-{ Quote: "have a nice day" }-You too. :)

[Thorz]

Is EWIDO better than Boclean then? I have NOD32 also running and am looking for an AT program with resident protection also that would not cripple my machine and that gives me a nice protection.
I see that ewido is more than a resident scanner, but speaking about resident protection is it better than boclean? TDS-3 appears to not cover well the resident protection needs then I will leave that one out.
Thanks, wonderful thread.

[Don Pelotas]

-{ Quote: "Is EWIDO better than Boclean then? I have NOD32 also running and am looking for an AT program with resident protection also that would not cripple my machine and that gives me a nice protection.I see that ewido is more than a resident scanner, but speaking about resident protection is it better than boclean?" }-No, i don't think Ewido is better than BOClean, Ewido is the newcomer and looks very promising and already has a big signaturebase. BOClean has been around since trojans was born, BOClean literally means Back Orifice Clean ( Back Orifice was if not the first, then one of the very first trojans) and they know their stuff.

I think that they are both really good choices, it all comes down to what you like and feel comfortable with. Both run very "light" on my computer (no crippling ;) ).
-{ Quote: " TDS-3 appears to not cover well the resident protection needs then I will leave that one out." }-TDS-3 is a very good trojan-scanner with a large database, from what i have read (and experienced) it can be a little heavy on resources, only one way to find out: pay $49, the residentprotection is unfortunately not available in the trial. :)

[Thorz]

-{ Quote: "No, i don't think Ewido is better than BOClean, Ewido is the newcomer and looks very promising and already has a big signaturebase. BOClean has been around since trojans was born, BOClean literally means Back Orifice Clean ( Back Orifice was if not the first, then one of the very first trojans) and they know their stuff.

I think that they are both really good choices, it all comes down to what you like and feel comfortable with. Both run very "light" on my computer (no crippling ;) ).
TDS-3 is a very good trojan-scanner with a large database, from what i have read (and experienced) it can be a little heavy on resources, only one way to find out: pay $49, the residentprotection is unfortunately not available in the trial. :)" }-

Thanks for your opinions. I am very attracted for the Ewido offer, it looks strong and complete. If TDS4 was already here I think I had go for it, it has a very big database as you say, but I don't want to pay for a program just to find that its resident protection was not the best (TDS3). I think that an AT must have both modules well implemented (resident + on dammand scan).

[spy1]

-{ Quote: "I am very attracted for the Ewido offer, it looks strong and complete. " }-

Can anyone point me to an anti-Trojan comparison test that shows how EWIDOSS stacks up against any of the other major players - a test that's recent , that is?

Thorz - Do you like to be able to look at logs that show what your A/T has been doing lately for you? You won't find any if you choose EWIDO (God knows why the program doesn't log anything where you can access it.

Do you like a program where you can exclude various directories from scanning for whatever reason? Then EWIDO's not for you, because it won't do that.

Is the detection of "rebased" trojans high on your "I want that" list. Because - while EWIDO had at one time conquered that particular problem - nothing in the news about the latest version out there confirms that this is still the case.

I'm sorry, I just can't (based on the above) recommend EWIDOSS as anyone's primary A/T scanner.

As a back-up scanner - sure. Even as a back-up resident scanner (that's how I run it). Pete

[Infinity]

for a test: look at the scheinsicherheit project (you'll see how ewido performs best ;))

there is a log when ewido finds something and cleans something, for the rest you won't find any log.

Ewido doesn't exclude items, true but the upcoming version will have one as Fish pointed that out allready.

that particular thing regarding rebased trojans is long time now fixed and is stated also on the scheinsicherheits project Pete...I am sure you know what I'm talking about.

it is a new program but allready outperforms the rest if you ask me. I don't know how tds-4 will look like (I am waiting too) and I surely don't know how ewido 4 will look like but if it continues like this...I will be a happy resident scanner user of Ewido (on access I mean)

cheers

[spy1]

INFINITY - The date of the test you're referring to is: ntl, 25 February 2004 (it's why I specifically specified a "recent" test result), if it's this one: http://scheinsicherheit.mirrorz.com/ .

Do you know of any other tests (recent, with ESS's most recent program version, 3.0) that have been done, comparison-wise?

I don't. If anyone does, please share the results (with links to the test) with us, please. Pete

[Infinity]

this was done in october 2004 afaik

As regards new ewido 3.0 ...
1.
Rebasing vulnerability still not solved.
2.
Unicode Support: Yes.
3.
Helios 2.4: Still not detected although the database on the webpage says ...

Backdoor.Helios
Backdoor.Helios.12
Backdoor.Helios.12.b
Backdoor.Helios.12.C
Backdoor.Helios.12.d
Backdoor.Helios.13
Backdoor.Helios.14
Backdoor.Helios.15
Backdoor.Helios.16
Backdoor.Helios.17
Backdoor.Helios.18
Backdoor.Helios.20
Backdoor.Helios.21
Backdoor.Helios.22
Backdoor.Helios.24
Backdoor.Helios.25
Backdoor.Helios.26
Backdoor.Helios.3
Backdoor.Helios.31
Backdoor.Helios.408
TrojanDropper.HeliosBinder.10.b
4.
CIA 1.22 is not detected (at least not the variant contained in our test archive).
5.
Overall detection rate: 230 out of 556 malware samples were not detected.



the rebasing vulnerability is still applicable though, you are right about that. I misinformed myself :) sorry Pete.

[spy1]

No problem. Pete

[peter.ewido]

Everything will be fixed, improved and missing features added in 4.0 ;)

[spy1]

I look forward to it. Pete

[hollywoodpc]

Keep in mind that NOD is giving alot of protection from trojans anyway . An AT is just backup for what NOD will miss . So , any of the above mentioned should be fine for you . Try them all . See what you like , interface and control wise , and what you can spend . Or NOT spend . And use that to make your decision . Any of them ALONG with NOD and you will not go wrong . I use the same as Claire but , again , it really does not matter . Good luck in your quest

[quexx88]

I strongly reccomend ewido. Fantastic program with very frequent updates!

[hollywoodpc]

And by the way . TrojanHunter with the real time protection enabled , can cause chat programs to disconnect . 4.0 and 4.1 did this . I used both on many different occasions . Each time I would try a different test . TH was the cause . If you use a chat program , could be a pain in the butt . Could be an isolated issue but , happened many times on different setups . Good luck .

[happin-in]

Nod and KAV ( as an on demand )

[Blackcat]

-{ Quote: "Nod and KAV ( as an on demand )" }-
Expensive though and difficult to run KAV 5 as an on-demand scanner ;)

A much cheaper option, if you were looking for a second AV as backup would be to use the free KAV clone, eScan AV Toolkit Utility; http://www.wilderssecurity.com/showthread.php?t=65398

IMHO, if you are looking for trojan protection to your main AV, I would always choose a dedicated AT program, rather than a second AV.

In particular, for cleaning the infection effectively and for reducing the chances of system instabilities. Two AV's on the same computer, even when one is only installed as an on-demand scanner, may cause conflicts and performance issues.