Is there any free alternative to Mamutu ?

[xperator]

Hi,

Last time I asked for security program suggestions and someone told me about Mamutu.
I installed the trial version and kinda liked it. But the price is a little high for me. paying $40 for a single PC (1year) is ok but we have about 5 windows pc in our home. The sum of price for every license goes high and unaffordable for me.

Is there any free alternative (or at least cheaper) to Mamutu ? Which comes with same features.
I assume a Behavior-based malware blocker is a more complete and better approach for detecting harmful files, right ? It shouldn't miss anything and even if the malware is hand written by a hacker to do a specific job Mamutu can detect it's behavior and report it, Am I correct ?

And the last question is, Do you think my current setup is a complete package or not ? Do I really need a firewall too ?

OS : windows 7 x64
Current setup : MSE + MalwareBytes + KeyScambler + BufferZone + Mamutu

[Amit]

BufferZone has a firewall you know. You could add HitmanPro to your setup. You need an imaging software unless you are okay using windows' own built-in backup and restore feature.

About the main topic, I think threatfire is a good contender. Anyways, most av or suite nowadays comes with a bb implemented into it. You could replace your mse with maybe avast and you would get the built in bb.

[xperator]

Isn't HitmanPro a on-demand scanner ? I want a real-time protection. Anyway I will keep it in mind incase I run into problem in future.
I do have DriveImage XML for backup purposes. Used it many times. Never had a problem with that.

By "bb", you mean Behavior Blocker right ?
So you think Avast's built-in bb can do exact same job as Mamutu ? It won't miss anything, or does it ?

[Kees1958]

Classic BB alternatives are ThreatFire and Primary Response Safe Connect (now AVG's Identity Shield shield).

Most Anti Virus have an behavioral blocker (MSE included), some developed them themselves, others purchased them (e.g. AVG's identity shield) and incorporated them in their main product.

MSE + BZ is solid enough security.

Have you looked at BZ option to guard all executables? http://www.wilderssecurity.com/showp...7&postcount=36

Have you tweaked the protection settings?
http://www.wilderssecurity.com/showp...6&postcount=35

You can use BZ also to restrict internet access of BZ-ed programs.
see picture

[xperator]

Originally Posted by Kees1958

Classic BB alternatives are ThreatFire and Primary Response Safe Connect (now AVG's Identity Shield shield).

Most Anti Virus have an behavioral blocker (MSE included), some developed them themselves, others purchased them (e.g. AVG's identity shield) and incorporated them in their main product.

MSE + BZ is solid enough security.

Have you looked at BZ option to guard all executables? http://www.wilderssecurity.com/showp...7&postcount=36

Have you tweaked the protection settings?
http://www.wilderssecurity.com/showp...6&postcount=35

You can use BZ also to restrict internet access of BZ-ed programs.
see picture

Thanks for the explanation.
It seems ThreatFire is somehow outdated. I think I will skip it.

BufferZone is causing a few problems since I started using it. it doesn't let my download manager work properly (IDM). I have firefox running and when clicking a download link the IDM returns error.
Not sure how to overcome this.

Regarding MSE's bb, I don't think MSE has such thing. At least for me it never asked me that for example some program is doing a malware-like behavior. I compared Mamutu and MSE with a few samples but only Mamutu could tell.

I am also looking for a web shield. When I installed dr.web it was blocking malware websites and exe files before the browser tried to open it.

[kupo]

I could suggest you an alternative to Bufferzone, Sandboxie (has a "freeware" mode)

As for behavior blocker being complete, I will disagree, HIPS is a lot more complete. You could use Online Armor Free for a robust HIPS.

[Dark Shadow]

Online Armor has WebGuard when used with the Hips and the Firewall can be removed leaving the Hips protection in place just in the case you want to use a different wall.You can then put your browser in saferMode and you have very strong protection.

[GakunGak]

Avast 7 free has BB and Sandbox, you can custom select it to be installed and you can set it to Auto, Ask, Allow and Deny....

[stapp]

Mamutu is $60 dollars here for 5 machines

https://shop.emsisoft.com/34/?scope=...rel=currencyId

Main page

http://www.emsisoft.com/en/order/mamutu/

[Breakfastofchumps]

xperator check your inbox

[Amit]

Originally Posted by xperator

Isn't HitmanPro a on-demand scanner ? I want a real-time protection. Anyway I will keep it in mind incase I run into problem in future.

Yes it is a scanner. It's one of the best second opinion scanners out there. Most members here in this forum use it. I was referring to your question 'Do you think my current setup is a complete package or not ? Do I really need a firewall too ?' You could really use some second opinion scanner as nothing will catch everything. Nothing will protect you 100%. And I don't think anyone would disagree with installing the non resource eating, lighting fast and light HitmanPro.

[Amit]

Originally Posted by xperator

I do have DriveImage XML for backup purposes. Used it many times. Never had a problem with that.

Good for you.

[Amit]

Originally Posted by xperator

By "bb", you mean Behavior Blocker right ?
So you think Avast's built-in bb can do exact same job as Mamutu ? It won't miss anything, or does it ?

Yup I meant Behavior Blocker by bb. Avast's built-in bb would do similar job as Mamutu as they are both bb.

I think you should go for sbie, another av with built-in bb and a firewall with hips(Comodo fw/d+ or OA).

You could also go for Privatefirewall from privacyware.com as it has built-in bb.

[xperator]

Originally Posted by djohn

Online Armor has WebGuard when used with the Hips and the Firewall can be removed leaving the Hips protection in place just in the case you want to use a different wall.You can then put your browser in saferMode and you have very strong protection.

I disabled Mamutu and installed Online Armor with disabled Firewall. Tried a few checks to see if it's protection can match up with Mamutu.
It did catch them just like Mamutu but it doesn't give any info what the file is trying to do. And it doesn't suggest what option should be chosen. Also there was a few false positive and innocent programs reported.

Originally Posted by ams963

Yup I meant Behavior Blocker by bb. Avast's built-in bb would do similar job as Mamutu as they are both bb.

I think you should go for sbie, another av with built-in bb and a firewall with hips(Comodo fw/d+ or OA).

You could also go for Privatefirewall from privacyware.com as it has built-in bb.

I will try Avast now. What is "sbie" ? what about "OA" ?
I did try PrivateFirewall and Comodo, Didn't liked them.

btw, I was trying Avira for the last few hours. it's bb wasn't picking up any malwares samples. And there is a problem with it's repair process. Most of the time it get stuck at %30 and hangs. Uninstalled...

[Breakfastofchumps]

You could try AVG I hear that's got a really good bb

[xperator]

Originally Posted by Breakfastofchumps

You could try AVG I hear that's got a really good bb

I will give it a try. But I heard AVG has the most false positive reports.
Also a friend of mine had AVG installed and I remember most of the time his pc was infected and AVG couldn't manage to clean it for him. He had to install a fresh everytime...

[Ranget]

aaah i would change the AV To avast

it has a Free Behavior Blocker feature it's not the same as Mamutu but change it to "ask " because it's by default on auto decide

if you don't want to Change you av there is Threatfire but it's not being updated or i don't know what is the Problem

[JoeBlack40]

What is "sbie" ?

SBIE is a short form for Sandboxie.

Also a friend of mine had AVG installed and I remember most of the time his pc was infected and AVG couldn't manage to clean it for him

This sound like a person who click anywhere,anytime and everything.No AV can protect you by these kind of habits.

[aladdin]

Originally Posted by xperator

What is "sbie" ?

Sandboxie!

It is free on all computers, but only allows for one Sandbox.

However, lifetime license for € 29 Euros, for all your home computers is very cheap and allows for multiple Sandboxes on each computer.

Best regards,

KOR!

http://www.sandboxie.com/

http://www.sandboxie.com/index.php?RegisterSandboxie

[Amit]

Originally Posted by xperator

I disabled Mamutu and installed Online Armor with disabled Firewall. Tried a few checks to see if it's protection can match up with Mamutu.
It did catch them just like Mamutu but it doesn't give any info what the file is trying to do. And it doesn't suggest what option should be chosen.

Of course it wouldn't. OA has hips not bb. EAM from emsisoft has mamutu implemented. And EAM + OA are used together as a suite. Hips would give you more detailed alerts and more control.

[Breakfastofchumps]

Originally Posted by xperator

I will give it a try. But I heard AVG has the most false positive reports.
Also a friend of mine had AVG installed and I remember most of the time his pc was infected and AVG couldn't manage to clean it for him. He had to install a fresh everytime...

AVG 2012 has come a long way, from what I've read about it it's actually really strong now with an exellent bb.

[Ranget]

guys guys

AVAST has a Behavior blocker did you forget about that

[xperator]

Ok as for now Avast has passed my little checks. It has a great web shield just like dr.web (maybe better?). Also the detection rate seems to be ok. It can catch things that MSE could and couldn't. Didn't have any false positive yet.
But I haven't yet check if Avast's bb works well or not. Same thing for it's Sandbox.

A question about the new reported virus called The Flame. According to the news it seems this virus is active since 2010 ! Then why does Behavior Blockers couldn't detect it all this time ?
I know it is the most complex malware ever created . We buy all these security products and we believe that we are secure if the AV is kept updated. How is that such malware can stay hidden for 2 years ?

[xperator]

I have a good and bad news about Avast. The good news is that I launched a malware inside SandBox and checked with malwarebytes to see if it has spread on system or not. And it didn't. The infected file was kept under c:\avast sandbox\....

And the bad news is that avast's BB didn't show anything when the malware was launched.

[Kees1958]

Originally Posted by xperator

I have a good and bad news about Avast. The good news is that I launched a malware inside SandBox and checked with malwarebytes to see if it has spread on system or not. And it didn't. The infected file was kept under c:\avast sandbox\....

And the bad news is that avast's BB didn't show anything when the malware was launched.

When something is in the sandbox the BB won't trigger. When you manage to get your hands on the old V6 sandbox testing thingie of Avast and disable the sandbox, you will see the BB will be triggered.