Threatfire - Yes or No?

Is it worth using something like:

http://www.threatfire.com/

It says it's free, can something that is free be of any value to detect unknown virus, malware, keyloggers etc?

And can I run Threatfire as a standalone application without having an AV installed?

Or does it need a current AV installed? If so, which AV must be installed?

 

It is worth using if you know how to deal with its popups when it detects a suspicious behavior and it runs good on your system. As far as it being free, free vs paid does not a good app make, but only real world tests which it seems to perform well on. How long it will exist and/or be free is up in the air since it has been bought up by Symantec. And far as AV vs no AV, it is somewhat of an AV itself (or so it says), however, I personally have and still would run it alongside another known AV.

 

If an av doesn't have behaviour blocking functions Threatfire is for sure needed. And it's quite good for being free.

 

YES YES YES YES!!

 

Threatfire was never intended by it's developers to be run alone.

 

TF does a black list check (data from virusbuster) when an intrusion occurs.

So I would say YES

 

When I had it together with a top-notch AV (Avira Premium, KAV, Dr.Web etc.),
it never found something that my AV had missed to detect.
So, like many users, decided to remove it.
I wonder what will be the future of TF now that Symantec bought PC Tools...

Cheers,

 

Ok thanks everyone.

I am running it now I like it, it asks permission for anything trying to connect out.

I assume this is good for stopping any keyloggers, spyware etc.

 

-Why don't you try GeSWall or Sandboxie?
Both are Free Sandboxes-HIPS, while TF is a Behavioral Blocker-HIPS.

-Also, give a try to DriveSentry another Free HIPS.

Cheers,

 

Hi

Actually I think that keyloggers is one of TF's weaker areas.

 

But doesn't TF warn if anything is trying to access the internet? if so, how do keyloggers bypass that and report back the keystrokes to the creator?

 

I installed DriveSentry, but it crashes everytime I load my TrueCrypt container and try to load a program that's installed in my TrueCrypt container.

 

It does not do so on default settings.

 

yes ,it surely good.the only pity is can't support the chinese language.!
i expect that it come soon!

 

If it runs without any problems or doesn't annoy in any way, definently yes.

 

Yeah, it seems to run fine here so I will keep ThreatFire installed.

Btw, what's Rootkit Unhooker all about?

 

I'm trying to make mine bigger than Aigles,but I cant

yes.

 

No. I installed Threatfire, rebooted, no keyboard. Had to use the on-screen keyboard to do a system restore. I tried a couple different times and always had no keyboard recognition after reboot.

 

I removed Threatfire.

 

Why? Did it throw up errors or FPs?

 

I installed Threatfire again. I thought it was the problem, but it was DriveSentry. So I removed DriveSentry as it doesn't like my Truecrypt container.

 

BTW I want that ThreatFire doesn't run in startup (I want it delayed).

I don't see ThreatFire'settings a option to disable it in startup.

How can I do that?

 

But why would you want to do that? If it isn't running in real time it will not offer any protection.

 

rebooted? i haven't reboot the machine ,and it can run normally.
is it right?

 

Rootkit unhooker is what I would call somewhat "advanced" rootkit scanner/remover. Very informative and shows more detailed info that I've seen with some basic anti-rootkit programs. I wouldn't recommend this for those who are "beginners" tech wise.