Norton Antibot

Hi,

For PRSC; PRSC.exe 8,848 k
SanaAgent.exe 11,000 k
SanaSCWatcher.exe 3,020 k

For TF : TFTray.exe 3,400 k
TFService.exe 5,400 k

These are collected on Intel DUO 2 CORE T-5500 processor, with 1 gb RAM.

Hope these helpful. Take care.

 

Here are AntiBot's stats:

 

What's about CPU usage and boot time ?

 

CPU usage is nil, boot time is acceptable IMO.. not especially slow or anything..

 

Only thing I have noticed is that in booting up I do not have net connection until AB loads. The network systray icon shows a "X" until AB loads and then the "globe" appears.

 

hi all

does NAB protect against low level disk axx like killdisk and robodog ?

10x

 

Aaahh!......so that's why my connection takes longer now. Not a big deal, but I've wondered what was going on.

 

Hello demoneye,

Unfortunately, both Primary Response SafeConnect(PRSC)/Norton AntiBot(NAB) do not protect against low level disk access intrusions at this time. For this reason alone, applications such as sandboxes, virtualization programs or HIPS that protect against low level disk access should be paired with intelligent behavioral heuristic anti-malware's such as PRSC/NAB.


Peace & Gratitude,

CogitoErgoSum

 

10x alot for the reply...shame on them no TOTALY give little support to this kind isue... this leave us to use AV

cheers

 

Memory usage for prsc/nab are affected by two things, how many processes are currently running and how long the prsc/nab service has been up. The more processes are running, the more characteristics and behaviors it needs to keep track of, and therefore more memory used. In a basic way, this is true of any real time monitoring application. Second, you will notice that memory usage of prsc/nab will decrease generally between ten minutes and an hour after the service starts (at least in my case).

cheers!

 

What if any other HIPS can be run with Norton Antibot, or is this program really even needed?

 

try Antibot with Sandboxie. I am amazed at my speed and really like this for a light combo. Of course Chris, Cureit for weekly scans.

 

Hello Wordward,

I have run Primary Response SafeConnect(PRSC)/Norton AntiBot(NAB) alongside DefenseWall and GesWall Pro which are both policy restriction sandboxes in separate instances without any conflicts.


Peace & Gratitude,

CogitoErgoSum

 

Hi,

PRSC/AntiBot + Mamutu + DW + SBIE = no conflict, but

adding TF to that equation = BSOD occasionally.

 

Thanks everyone. I was going to use Comodo Firewall Pro 3.0 with Mamutu, but I'm still a little leery of it. NAB with Mamutu seems like a good combination, but I don't know for sure if they would compliment each other or overlap. Any opinions on this?

 

I agree. I think Sandboxie would be a better alternative.

 

Wow just the first line is good, but adding TF is insane! - Thats 3 behavioral blockers!

dja2k

 

I think out of TF, Mamutu, and NAB that Mamutu is the most polished and well rounded of the three. However, as for their behavioral detection capabilities I wonder how they might compare? here are two fairly decent reviews of NAB.

http://www.biztechmagazine.com/article.asp?item_id=297

http://www.geek.com/review-norton-antibot/

 

-What does Norton Antibot has to offer -in addition-
to ThreatFire?

ThreatFire Free is very close to ThreatFire Pro!

-Then, why will someone be willing to buy Norton Antibot?

 

who bought it?

 

Hi, I know.

IMO. among these four (actually, three, PRSC=NAB), PRSC/NAB is more or less a lay back behaviour blocker-not very aggressive.

While TH and Mamutu are like dog eats dog, carving the very same part of your box. That is where conflict originates.

In the past I have PRFC and TF together, no problems at all.

Take care.

 

Hypothetically speaking. On a -future- basis...

Apart from this offer,
ThreatFire is free, whereas, Norton AntiBot is not.
After I tried both, I did not see where and how
Norton AntiBot is better than ThreatFire.
Let's not forget that ThreatFire is highly
configurable, whereas, Norton AntiBot is not.

 

NAB is less prone to FPs than Threatfire. Obviously, the "geek appeal" of NAB is close to zero.

 

If forum reports are anything to go by, AntiBot also has less conflicts and miscellaneous system quirks than ThreatFire.

 

Thanks solcroft. So, depending on what you priorize, choosing between NAB and Threatfire is rather easy:
- Less FPs, less quirks, OS support (full x64 support, right?) = NAB/PRSC.
- Slightly higher detection, "geekiness" (custom rules), free = Threatfire.