AntiMalware by Trustware

Looks like AntiMalware is out of beta now.

Also, they have updated their website www.trustware.com (first time I've visited the website for a while though)

Interesting thing I found on the website, says one of the authors of AntiMalware, is also the author of ViGuard.

Would be interesting to see the results if Kareldjag gave it a test.

Didn't see a pricing structure on their website.

 

Thanks for pointing this out, Vikorr. I had looked at this product earlier (several months back), but just felt like it was way too "underdeveloped" and not advanced to the point where I would have felt comfortable trying it (not the product as much as the web-site, because obviously I know nothing as far as the actual product goes). And as you mentioned, having NO PRICING STRUCTURE evidently seems to indicate that this is still a work in progress. The product may very well be great as is, or turn out to be great....but they still have a way to go with the development of their web-site.....

 

Anti Malware is a good program that is getting better all the time. Right now I would advise it mainly for web browsing...But in the near future I think it will be good for more untrusted software to run in it's sandbox. Please continue to look at this application every so often. I think you will hear much more about this product in the near future.

Thanks,

Chris

 

Hi Chris, why do you think it's better for the internet than for installations ?

Is that because it 'may' cause programs that you install (and don't make trusted), not to work properly ? I've been wondering if they'd eliminated that problem or not yet.

I was going to give the trial version a run, but I got some odd error message when I went to run the installation exe. Sent them and email, and will see what happens.

 

Have you tried this, Vikorr? And if so, in your opinion.....how does it compare to Online Armor, Prevx and other HIPS type programs that you are and have used?

I really can't see much more of a benefit that it would provide than OA, but I'm curious to hear your response....

 

I haven't tried it, because it wouldn't install on my machine, so I sent an email off to them...but I do believe that it's probably about midnight in israel at the moment.

The thing that interested me, was that untrusted programs aren't allowed to modify trusted programs....and there is also the option to deny untrusted programs access to the internet (which means I could rely purely on my hardware firewall).

From how it appears to work - It is possible, that I could run ShadowUser, Online Armor, and AntiMalware and not need a Realtime AV/AT/AS, or software firewall.

I also asked them to clarify their price in the email I sent them...but of course if they can't sort out the installation bug for me...

...when I try to run the installation exe, I get the message No setup present in package c:\docume~1\richar~1\locals~1\temp\aminst

Anyway, if I do get the trial running on my machine, I'll let you know how it goes.

 

Well mainly because right now when you browse the internet with AntiMalware enabled no files from the internet (virus, Trojans, Spyware) can access your real files or system.

The reason I recommend it more for browsing at the moment is some programs don't like it. I hope the next release will help things a bit. Some programs run fine in it though. For browsing and the programs that it works with currently it is really good. I'm sure it's only a matter of time.

As far as comparing it to Online Armor, Prevx and the like. There is no comparison. Anti Malware does not even give any program inside a chance or the ability to modify your files, add files or the like. So Anti Malware wins hands down when compared to these types of programs.

Hope this helps,

Chris

 

Basically we are talking about sandboxing programs by giving them restricted rights rather than a generic monitoring of all behavior. The untrusted program will have limited rights and so on. A different paradigm from Prevx,Online Armor,PG.

I use http://nonadmin.editme.com/DropMyRights for browsers and this helps to reduce the damage they can do.

 

There is on thing to realise about AM. It doesn't prevent malware from installing onto your computer...malware can load and stay on your computer...but...AM says that malware can't do anything to harm your computer ie. it can't modify trusted files, or access the internet.

This is a quote from their website :

 

Interesting software. I have to try this tomorrow and see how userfriendly it is.

 

Well, I never managed to get it working. Their support was quite prompt in replying, and tried to help, but never managed to get it going for me.

Heheh, I'll try again 6 months or so down the track I think. Hopefully someone else will have reproduced the problem and fixed it.

 

Ah, got it working.

The conflict was with a Prevx1 driver. I wasn't using Prevx at the time, but seems it was still conflicting.

Since uninstalling Prevx1, AM is working smoothly now.

Although I have noticed that Yahoo Messenger doesn't like being 'untrusted'. It stopped working straight after I did that, and I couldn't put it back in the autostart menu without making it trusted again.

 

Heh, thought so.

 

On the bright side, you can make anything created by YIM untrusted. I 'presume' this means anything I download...though I've yet to test that yet

 

This is correct.

Thanks,

Chris

 

Thanks for the info Chris.

Btw, I said in an above post that it can stop malware accessing the internet. This came in the form of a tickbox, which I couldn't find on the home version. I posted a query regarding this at their forums, and have been informed that the ability is currently only in their corporate version.

 

Your welcome. Do you think this would influence your decision to purchase? Anyone else?

Thanks,

Chris

 

Don't know yet. I rather liked the idea that untrusted programs didn't have internet access unless you gave them permission.

But if I'm right about other things, then AM renders keyloggers, and RAT's useless....but what about a spyware that uses your machine as a spam bot ? There may be other examples I havent thought of where spyware doesn't have to interact with your computer to function...one storing kiddyporn on your computer, and being used used as a server?

Now I know a software firewall 'should' catch such things, but I was thinking with AM a software firewall wouldn't be necessary (seeing I have a hardware one)

I could be off on the above guesses, but AM is a little difficult to work out just how it works (not the concept, which is easy enough to understand, but the fine detail on what it does and doesn't protect from)

Btw, apparently the name of AntiMalware is being changed to BufferZone.

 

How do you find out how much it costs.

 

Send them an email perhaps.

I did ask them in an email, but was also having installation problems. They answered to the installation problem and forgot to mention the price. I haven't bothered asking again yet <really should be in an easy to find place on their website>.

 

I have tried to find it on their web site and sofar have been unsucessful.

 

Hi Guys,

Let me introduce myself, my name is Eldad and I'm the Product Manager responsible for AntiMalware Corporate and Home versions in Trustware.

I'm very happy to see that AntiMalware is getting noticed these days, because we are very enthusiastic regarding the upcoming Home version of AntiMalware.

I would like to explain some things and hopefully I will address all the issues raised in the above posts.

AntiMalware Home version is a end point security product that allows you "the home user" to surf the net in a secure manner.

What does we mean Secure manner, first i hope that we all agree that AV and AntiSpyware solution that uses Blacklist are not the answer, Secure manner means that IE and MSN messenger and other application that connect to the internet and known to have Security issues and possess a security risk to the user are running in the BufferZone of AntiMalware.

What is the BufferZone? The BufferZone is a virtual environment that Application can function in 100% without damaging the "real" OS system, in more tech terms the BufferZone is simulator the real resources that the Application needs, like Registry and File system etc. All files that are downloaded or installed in the IE gets a Untrusted tag what means that when they will execute they will run in the BZ ... that means even all Malware .. it will be installed but in a Virtual File system and registry ...and so on ... what means it will not be able to damage nor take information from the Trusted files, for example: i'm running a Trojan horse that i downloaded or cause if a vulnerability in the IE/Firefox (politely saying )in the BZ this Trojan/Virus tries to delete some files from my "my documents" folder and also to steal information from expense folder, cause it runs in the BZ it can run but cant delete nor get any information from the trusted "world , what means that you can surf the web, chat or use any P2P software without fear .

Currently in the Home version we allow all programs installed or downloaded in the BZ access to the network interface, we do have a feature in the Corp that gives a in-depth control over the Network access in the BZ and in the upcoming weeks we will introduce this feature to the Home version.

I hope i answered your questions, please don't hesitate to post more question or to register in the AntiMalware Community in the following link: www.trustware.com/forum

You can also mail support@trustware.com ... in which i will also see your email and can answer you questions.

 

So, what`s the pricing?

 

Hi,

I live near the official french reseller, and if i remember well, AntiMalware costs about 60 Euros without taxes.

Regards

 

Please go to the following link for more info about the AntiMalware ... Removed invalid link as post linked to no longer exists - snap

Also you can get the price of the product in Trustware - BufferZone community...

Cheers ....

My the force be with HIPS systems ... i mean desktop HIPS

Painkiller