Norton Antibot

[Perman]

Originally Posted by tsilo

Thanks, but before tryng I am interesting which one is using less memory

Hi,

For PRSC; PRSC.exe 8,848 k
SanaAgent.exe 11,000 k
SanaSCWatcher.exe 3,020 k

For TF : TFTray.exe 3,400 k
TFService.exe 5,400 k

These are collected on Intel DUO 2 CORE T-5500 processor, with 1 gb RAM.

Hope these helpful. Take care.

[midway40]

Here are AntiBot's stats:

[tsilo]

What's about CPU usage and boot time ?

[Kerodo]

Originally Posted by tsilo

What's about CPU usage and boot time ?

CPU usage is nil, boot time is acceptable IMO.. not especially slow or anything..

[midway40]

Only thing I have noticed is that in booting up I do not have net connection until AB loads. The network systray icon shows a "X" until AB loads and then the "globe" appears.

[demoneye]

hi all

does NAB protect against low level disk axx like killdisk and robodog ?

10x

[Cloudcroft]

Originally Posted by midway40

Only thing I have noticed is that in booting up I do not have net connection until AB loads. The network systray icon shows a "X" until AB loads and then the "globe" appears.

Aaahh!......so that's why my connection takes longer now. Not a big deal, but I've wondered what was going on.

[CogitoErgoSum]

Hello demoneye,

Unfortunately, both Primary Response SafeConnect(PRSC)/Norton AntiBot(NAB) do not protect against low level disk access intrusions at this time. For this reason alone, applications such as sandboxes, virtualization programs or HIPS that protect against low level disk access should be paired with intelligent behavioral heuristic anti-malware's such as PRSC/NAB.


Peace & Gratitude,

CogitoErgoSum

[demoneye]

Originally Posted by CogitoErgoSum

Hello demoneye,

Unfortunately, both Primary Response SafeConnect(PRSC)/Norton AntiBot(NAB) do not protect against low level disk access intrusions at this time. For this reason alone, applications such as sandboxes, virtualization programs or HIPS that protect against low level disk access should be paired with intelligent behavioral heuristic anti-malware's such as PRSC/NAB.


Peace & Gratitude,

CogitoErgoSum

10x alot for the reply...shame on them no TOTALY give little support to this kind isue... this leave us to use AV

cheers

[grumbleduke]

Memory usage for prsc/nab are affected by two things, how many processes are currently running and how long the prsc/nab service has been up. The more processes are running, the more characteristics and behaviors it needs to keep track of, and therefore more memory used. In a basic way, this is true of any real time monitoring application. Second, you will notice that memory usage of prsc/nab will decrease generally between ten minutes and an hour after the service starts (at least in my case).

cheers!

[Wordward]

What if any other HIPS can be run with Norton Antibot, or is this program really even needed?

[trjam]

try Antibot with Sandboxie. I am amazed at my speed and really like this for a light combo. Of course Chris, Cureit for weekly scans.

[CogitoErgoSum]

Hello Wordward,

I have run Primary Response SafeConnect(PRSC)/Norton AntiBot(NAB) alongside DefenseWall and GesWall Pro which are both policy restriction sandboxes in separate instances without any conflicts.


Peace & Gratitude,

CogitoErgoSum

[Perman]

Hi,

PRSC/AntiBot + Mamutu + DW + SBIE = no conflict, but

adding TF to that equation = BSOD occasionally.

[Wordward]

Thanks everyone. I was going to use Comodo Firewall Pro 3.0 with Mamutu, but I'm still a little leery of it. NAB with Mamutu seems like a good combination, but I don't know for sure if they would compliment each other or overlap. Any opinions on this?

[trjam]

I agree. I think Sandboxie would be a better alternative.

[dja2k]

Originally Posted by Perman

PRSC/AntiBot + Mamutu + DW + SBIE = no conflict, but

adding TF to that equation = BSOD occasionally.

Wow just the first line is good, but adding TF is insane! - Thats 3 behavioral blockers!

dja2k

[Wordward]

I think out of TF, Mamutu, and NAB that Mamutu is the most polished and well rounded of the three. However, as for their behavioral detection capabilities I wonder how they might compare? here are two fairly decent reviews of NAB.

http://www.biztechmagazine.com/article.asp?item_id=297

http://www.geek.com/review-norton-antibot/

[SecOmnius]

-What does Norton Antibot has to offer -in addition-
to ThreatFire?

ThreatFire Free is very close to ThreatFire Pro!

-Then, why will someone be willing to buy Norton Antibot?

[trjam]

Originally Posted by SecOmnius

-What does Norton Antibot has to offer -in addition-
to ThreatFire?

ThreatFire Free is very close to ThreatFire Pro!

-Then, why will someone be willing to buy Norton Antibot?

who bought it?

[Perman]

Originally Posted by dja2k

Wow just the first line is good, but adding TF is insane! - Thats 3 behavioral blockers!

dja2k

Hi, I know.

IMO. among these four (actually, three, PRSC=NAB), PRSC/NAB is more or less a lay back behaviour blocker-not very aggressive.

While TH and Mamutu are like dog eats dog, carving the very same part of your box. That is where conflict originates.

In the past I have PRFC and TF together, no problems at all.

Take care.

[SecOmnius]

Originally Posted by trjam

who bought it?

Hypothetically speaking. On a -future- basis...

Apart from this offer,
ThreatFire is free, whereas, Norton AntiBot is not.
After I tried both, I did not see where and how
Norton AntiBot is better than ThreatFire.
Let's not forget that ThreatFire is highly
configurable, whereas, Norton AntiBot is not.

[lucas1985]

Originally Posted by SecOmnius

After I tried both, I did not see where and how
Norton AntiBot is better than ThreatFire.

NAB is less prone to FPs than Threatfire. Obviously, the "geek appeal" of NAB is close to zero.

[solcroft]

Originally Posted by lucas1985

NAB is less prone to FPs than Threatfire. Obviously, the "geek appeal" of NAB is close to zero.

If forum reports are anything to go by, AntiBot also has less conflicts and miscellaneous system quirks than ThreatFire.

[lucas1985]

Thanks solcroft. So, depending on what you priorize, choosing between NAB and Threatfire is rather easy:
- Less FPs, less quirks, OS support (full x64 support, right?) = NAB/PRSC.
- Slightly higher detection, "geekiness" (custom rules), free = Threatfire.