Xyvos freeware

http://www.xyvos.com/free-antivirus.htm
http://www.xyvos.com/whitelist-antivirus.htm

Anyone willing to try these new ones out? I'm especially interested in how exactly the second program works.

 

Sounds interesting. I'm going to give it a whirl.

 

Yes...it's looks ineteresting and I have installed it and I think is similar to Emmunize by using of white list. Is hard to say how is effective because it has option "allow all signed executables" and "allow all Microsoft signed executables" and many applications are allowed by definition.
Xyvos WL works smooth and enough light



Below are some snapshots



White list manager


alert popup

 

Please be careful.

They have anonymized their WHOIS data.

For the AV, Virustotal flags 5/44.

For that whitelist thing, Virustotal flags 6/44.

Edit: my Avira WebGuard blocked the second program. I had to disable the Webguard to upload it to Virustotal.

 

Is it an Anti-executable?

 

Difference between the two:
Free Antivirus provides only two more features.
• Provides anti-rootkit protection
• High level of USB Protection

 

Yes...it looks like anti-exe.
@Fly...it's already deinstalled/removed...I use Shadow Mode in SD BTW...thanks for the info
I tried also Xyvox AV Free...there are two main deferences: in tab "Home" and "Settings"
XAV detects also keyloggers

 

It's true - both programms are flaged but I have another results...today's analysis

Xyvox WL 4/44:
eSafe 7.0.17.0 2011.08.29 Win32.TRRootkit
F-Prot 4.6.2.117 2011.08.30 File is damaged
PCTools 8.0.0.5 2011.08.30 Trojan.ADH
Symantec 20111.2.0.82 2011.08.30 Trojan.ADH.2

Xyvox AV 1/44
F-Prot 4.6.2.117 2011.08.30 File is damaged

I don't know what should I think
----------------------
edit:
Next indication...now from Emsisoft Emergency Kit
E:\...\XyvosWhiteListAntivirus-1.5.0.0.exe/$INSTDIR\XyvosWListAVDrv.sys detected: Trojan.Rootkit!IK

 

Oh, boy! Another...

 

The product is not new, I have known about it since last year (found it on download.com).

 

I've downloaded it but haven't had a chance to install it yet. How is its effectiveness?

 

How does it determine its white list? By path, md5 hash or something else?

Has anyone tried to white list a program then update that program to see if it remains automatically white listed or needs added back to the white list once the md5 changes?

 

Intercepts procexp.exe - "Terminate and mark as untrusted" chosen. procexp.exe was added to the whitelist, which is surprising, but with "Type" as "Blocked" instead of "Whitelist".
Renamed procexp to a sequence of A's, ending with a big filename "aaaaaa(...)".exe (*). Process Explorer ran without problems or prompts.
Flaw number 1.

Renamed to something.exe, and execution was intercepted with a prompt. Remember that this was already added to the 'whitelist' as a blocked process.
This means it only checks filename/path.
Flaw number 2.

(*)Chris, that trick still works

 

No dll loading interception.

 

ntvdm.exe is caught when executing, but the 16-bit program is not. So, no 16-bit program blocking.

*ty Bellgamin for that reminder on another thread.

 

Cannot say if it's a safe application or not, i don't know how to and i didn't look into it.
But imo it's not very useful, if at all, so it doesn't really matter at this point. Unless you're an AV guy of course. *shrug*

 

Latest results from VT scanning...only 2 indications

~Removed virus total results per Policy~

 

Both programs form Xyvos Technologies are listed in "Probably the Best Free Security List in the World" on Techsupportalert.com

Are they so realy good?