SpyShelter 12

Discussion in 'other anti-malware software' started by guest, Oct 21, 2019.

  1. Quassar

    Quassar Registered Member

    Joined:
    Oct 19, 2011
    Posts:
    260
    Location:
    Poland
    Yup im just testing software lack of some functions but they will add soon them, a bit new gui make me a bit miss understand options.. i liked old one.. was more technic new one is for kid visual i dont like it..
     
  2. Surt

    Surt Registered Member

    Joined:
    Jan 23, 2019
    Posts:
    489
    Location:
    USA
    UH-OH. A new page. Everyone, start over!!
     
  3. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    18,178
    Location:
    The Netherlands
    I actually kinda like the new GUI, the problem is that SpyShelter 15 doesn't seem to be as advanced as SpyShelter 12 when it comes to pure behavior blocking. I haven't got a clue if MS has changed certain API's in Win 11, which perhaps makes it difficult to build a strong HIPS/behavior blocker. But AFAIK, Comodo and HMPA work just fine in Win 11? Perhaps Cruelsister can comment about this. Also, another problem is that SS 15 doesn't work on older versions of Win 10.

    If this is true, then what about KeyScrambler, doesn't it work just fine with Win 11?
     
  4. Quassar

    Quassar Registered Member

    Joined:
    Oct 19, 2011
    Posts:
    260
    Location:
    Poland
    @Rasheed187
    Well its beta and its was wrote somewheere its lack of half features which will come soon.
    If you work and sit i prefer stay on lates clasis version 14.0 til they complete finish to stable version with all features.
     
  5. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    18,178
    Location:
    The Netherlands
    Yes, it's better to stay with SS 14, I suppose it works on Win 11 too? SS 15 is cool and exciting, but it needs to be improved a lot. I mean, I'm not interested in the anti-executable (with AV) feature, I already have Windows Defender to spot malware. SpyShelter's job is to give me full control over app behavior, no matter if they are trusted or not.

    And I'm disappointed it won't work with older Win 10 versions, I mean just about all other advanced security tools work just fine, think of OSArmor, AppCheck, GlassWire and HMPA. So there really is no excuse, but on Win 11 I will definitely give it a spin and hopefully by then, they have improved the behavior blocker. And it really should have a network monitor!
     
  6. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    18,178
    Location:
    The Netherlands
    You probably mean we need a new thread for SS 15, right? Good idea. :)
     
  7. cruelsister

    cruelsister Registered Member

    Joined:
    Nov 6, 2007
    Posts:
    1,692
    Location:
    Paris
    SS15 at its core is an anti-exe application which will alert to executables that are not recognized, both malicious or benign(like 7-zip, for instance). Other than exe's the results are less than stellar and closely parallel that seen in my last video about Malwarebytes.
     
  8. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    18,178
    Location:
    The Netherlands
    But doesn't SS 15 alert about suspicious behavior anymore? And isn't it true that SpyShelter 14, Comodo AV and HMPA all work on Win 11? If so, then I don't understand why the SpyShelter team say they have difficulties implementing certain features.

    Or isn't Comodo capable of alerting about suspicious behavior anymore, did you test this on Win 11? I know you are a big Comodo fan, that's why I ask. On the other hand, I also know you use the Comodo sandbox feature a lot. And yes, I saw the video of Malwarebytes, weird that it couldn't spot the malware you tested.
     
  9. cruelsister

    cruelsister Registered Member

    Joined:
    Nov 6, 2007
    Posts:
    1,692
    Location:
    Paris
    The test was done on Win11, and although I can't answer what it did in the past, nor any current claims by the developers, but as I noted it will allow the same malware that MB did in my last video (oh, and not at all weird that MB failed against the malware that I used as it has NEVER been able to detect or stop Worms or Trojans of this type, and as it has no intrinsic mechanism to detect encryption behavior from ransomware, it, along with SS15, is prone to being trashed by such attacks.

    As for Comodo, it is currently what it always has been- keep it simple and not be infected (if I could bypass it I would not use it)..
     
  10. blacknight

    blacknight Registered Member

    Joined:
    Sep 25, 2007
    Posts:
    3,383
    Location:
    Europe, UE citizen
    Does Comodo Defense+ work with Windows 11 ?
     
  11. Moose World

    Moose World Registered Member

    Joined:
    Dec 19, 2013
    Posts:
    921
    Location:
    U.S. Citizen
    Greetings/Salutations,
    Also, do you have the current link for Comodo Firewall:)?

    Always the best, and kind regards!
     
  12. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    18,178
    Location:
    The Netherlands
    I assume you are talking about SS 15? But SS 15 should at least be able to stop protected folders from being modified by ransomware right?

    Well, I do know that Malwarebytes actually acquired this tech from some company can't remember its name anymore. So you would hope that it's at least as good in detecting ransomware as HMPA and AppCheck.

    Yes, but you are always using the sandbox, which autoblocks stuff via isolation, similar to Sandboxie. What I meant is that does Defense+ also alert about suspicious behavior like registry modification and code injection, or isn't this stuff available on Win 11 anymore? Did you check this?

    https://help.comodo.com/topic-72-1-522-6297-Defense -Settings.html
     
  13. Surt

    Surt Registered Member

    Joined:
    Jan 23, 2019
    Posts:
    489
    Location:
    USA
    What test?
    Can't find on your yootoob /videos page or in MTips SpyShelter v15 Beta discussion or a global search there on your member name.
    Thanks.
     
  14. Surt

    Surt Registered Member

    Joined:
    Jan 23, 2019
    Posts:
    489
    Location:
    USA
    The Activity module at work.

    https://forum.spyshelter.com/t/the-activity-module-at-work/85
     
  15. cruelsister

    cruelsister Registered Member

    Joined:
    Nov 6, 2007
    Posts:
    1,692
    Location:
    Paris
    My channel is: cruelsister1 on Youtube. The last video is on Malwarebytes.There is no SS15 video as the interest just wouldn't be there.
     
  16. blacknight

    blacknight Registered Member

    Joined:
    Sep 25, 2007
    Posts:
    3,383
    Location:
    Europe, UE citizen
    May be I was not very clearly. I never used Comodo in Windows 11 because I have many problems with Comodo in !0, so I asked if it works fine in Windows 11.
     
  17. Surt

    Surt Registered Member

    Joined:
    Jan 23, 2019
    Posts:
    489
    Location:
    USA
    Thanks for the reply! So, there is no "the test was done" done.
    I know that's your channel as that's why I posted I couldn't find the vid on, well, your /videos page. I figured I didn't have to post the full path. This is Wilders Security, of course, home to the most knowledgeable expert in-the-know geeks in teh webbuhnetz and anywhere. Post a full path? I don't think so! :)

    Cheers.
     
    Last edited: Mar 9, 2024
  18. Surt

    Surt Registered Member

    Joined:
    Jan 23, 2019
    Posts:
    489
    Location:
    USA
    My current Pro v15.0.1.485b Beta drifted into Free mode yesterday which allowed for poking around in the "Limited" tag under the Free version listed on the SpyShelter web site.

    While rules can be modified, creation is no longer available.

    Application Security Control is the only active Protection module, but can be toggled on/off.

    Protection mode is locked as Free Mode where upon selecting either of the six Pro modes opens a modal window inviting the upgrade, as it does when selecting any of the other Pro features.

    The Alerts and Events screens' information and discovery features seem to be fully functional. Features shared with Rules and Application Security Control open the modal window.
     
  19. blacknight

    blacknight Registered Member

    Joined:
    Sep 25, 2007
    Posts:
    3,383
    Location:
    Europe, UE citizen
    I'm using 15.00.480b trial, in three days it will expire and I'll see better which features will work again.
     
  20. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    18,178
    Location:
    The Netherlands
    You misunderstood. My comment was meant for Cruelsister, but you had the exact same question as me, so that's why I also quoted you. Weird that she didn't reply, perhaps she's not using Comodo anymore.

    Are you on Win 11 or Win 10? I can't get it to run correctly on Win 10 Home 1909, I've tried everything and it does install normally, but it refuses to connect to the driver.
     
  21. blacknight

    blacknight Registered Member

    Joined:
    Sep 25, 2007
    Posts:
    3,383
    Location:
    Europe, UE citizen
    Sorry for the misunderstanding. Now I'm runnning Spy Shelter on 11, but last year I tried it on Windows 10 and I had the same problems than you.
     
  22. blacknight

    blacknight Registered Member

    Joined:
    Sep 25, 2007
    Posts:
    3,383
    Location:
    Europe, UE citizen
    Hope Cruelsister answer to your question, I'm interested too, precisely.
     
  23. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    18,178
    Location:
    The Netherlands
    I assume you had problems with SS 14 on Win 10? I'm still using SS 12 because this is the only version that still works correctly on Win 10 1909. And to be honest, it's also better than SS 15 in terms of protection.

    Yes, because if HIPS can not offer the same level as protection on Win 11, it would be a huge problem. I do know that HMPA, OSArmor and AppCheck should work on Win 11. I'm not sure about Comodo, which has lots of different versions, it's a bit confusing.

    But apparently SS 15 can not offer certain features yet, like keyboard, clipboard, webcam and mic monitoring. Also, no keyboard encryption and no protection against DLL/code injection (and global hooking). I'm not sure if it monitors service/driver loading and interprocess communication, which most of the time warns about apps trying to communicate with the task scheduler.
     
  24. cruelsister

    cruelsister Registered Member

    Joined:
    Nov 6, 2007
    Posts:
    1,692
    Location:
    Paris
    Comodo, both the current released version (8012) as well as the Beta run just fine on Windows 11. Also I continue use CF and will do so until I can get it to fail, which in spite of my best efforts has so far yielded no joy.
     
  25. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    18,178
    Location:
    The Netherlands
    OK I see, but I wondered if it can actually alert about stuff like code injection (DLL injection, remote thread creation, global hooking)? So I'm specifically talking about Defense+, not about the Auto Sandbox technology. And I assume you are using Comodo AV Free?

    https://antivirus.comodo.com
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.