Twister Antivirus

Ok,after reading this growing thread it peaked my curiosity enough to try it.So far It is as light as a feather which is very deceiving considering it looks bloated.A problem as noted by others,If I disable protection from the gui its greyed out but icon status does not show disabled,also No security Warning from security Center because its still running.If I disable protection From System tray,the try Icon goes grey with red a slash and security center displays a Warning.So I think attention Is needed in this area.A full system scan over 1 Hr on a 250 Gig HD with Only a little under 50 gigs used of the 250.My god, I thought the scanner wouldn't End.No other Findings yet other then mentioned thus far.

 

The Chinese language website has some expert editors, so they can create more messages, but I have no time to translate it because I already have the very heavy job. However we will keep to make some changes.

 

It will no reply if you use the online false positive summission, we only correct the virus definition. You may directly send it to me if you want to get the reply, my email address is service-global@filseclab.com.

 

1. Sure, FDD System is a behavior blocker, it traces the behaviors of the process like thread injection, hidden process, process taken etc, so it can detect unknown malware even rootkits.

2. Sure, they use the heuristics, but only for on-damand scan, the realtime protection will not use the heuristics. and the heuristic scanner is independent on FDD System.

 

I wonder whether theres some crosswires with filseclab regarding the gui and stopping protection.If you actually click "stop realtime protection" which is also on the gui area then it does grey out and system tray icon has the red cross through it.Clicking the icons does not stop realtime protection even though it says disabled as many of us can see.In fact ,on the g/fs machine it behaves the same.Does it actually work for any users here?
ellison

 

Ive found what appears to be a possible bug in twister.On two occasions ive started my machine ,opened twister GUI,and and navigated to "scan computer" on the left of the gui.When opened the explorer tree for scanning files on my computer has disappeared and only my administrator user name appears (you can just make out the user icon on the file).Anyone else noticed this happening on vista 32 premium?.Usually a reboot "fixes" it ,but its quite disconcerting why this happens as i wonder what else may not be working quite correctly.
ellison

 

Yes you right,Something crossed up indeed.I assume this Is a minor bug and give it some Time to see if its is corrected.Overall I like it, very Light and running great so far and the updating has been excellent.I also noted the way it handles when adding other software it props a behavior screen with option of what is being added,like example one can answer temp trust the install then it summits a online scan first with return results.I think thats a great idea.

 

@Filsecab, Hi I am on the Trial and just noticed It will Expire In july for a one month trial.I though it was a ninety day trial?

 

No problems here........but I'm on XP
Windows XP Home SP3
Twister
SAS Pro
AdMuncher
WinPatrol Plus 2008

 

I had the same thing.Just user name but when I went back latter It showed my comp and the local drives,all seems fine now.

 

To get the 90-day trial, you need to register with the 90-day free trial license code:

8BB5-F475-576B-41D1-1881

P.S. To MODS- This key is no secret. It is openly posted on Twister's website. djohn just overlooked it.

 

Thanks bellgamin.I sure didEdit. I got now for the ninety days, If it earns its way that long.

 

I had the same problem when installed Twister... Sent an e-mail to Twister about it and received the response:

---
~Private correspondence removed per TOS. Please explain the response in your own words....Bubba~
---
The problem solves itself... I don't know why and how... :|
Always I start Twister in Vista I need to approve administration rights but I don't remeber if when I had the problem I used administrator rights or not...
Try to "run ad admin" if you use Vista...

 

Ive just reinstalled as an administrator so ill monitor it to see if it changes anything.May be a vista thing.So far im pretty much happy with twister though.
ellison

 

Im not sure if i originally installed twister as administrator although ive never had any start problems with it.Ive just reinstalled as administrator to see if that makes a differnece.Thanks for the tip.
ellison

 

today i found something wierd going on in my pc. take a look at the below pic.
someone is calling internet explorer hidden.and twister is giving me notice that it has been killed. but i dont think that C:\WINDOWS\Explorer.EXE is virus or malware as i checked everything.
one thing which annoys me is it is giving this notice every 2 seconds or so how to stop that?
another thing i found today was something called driveguard.exe is running in process explorer. i went to that folder and checked it ,i think its a malware because in its signature the company name was macrosoft corporation
now its a trick by which it can be seen by the user as microsoft corporation, so i felt somthing fishy here.so i submit it to virustotal but found nothing.
anyway i killed that process but still someone is calling internet explorer which is being killed by twister every 2 seconds or so.

 

If its name is "Macrosoft", i would think that there is something fishy too.

Have you submitted the files to Filseclab? I would suggest to do so. You can email them as attachments to the mail that the Filseclab Representative uses in this forum.

This goes beyond my knowledge. Theoretically, you could have some malware that has code injected your legitimate processes and Twister "sees" that and that's why he tries to kill them...

 

Hello Forum,
Twister AV and Filseclab PF are working very well together, Can't beleave how light they both are on my computer.These are the lightest AV and FW I have ever used. Even FireFox loads faster.
Badcompany.

 

Very nice. Filseclab firewall is nice, but the last time i used it with p2p, the CPU spikes were not nice at all. I suppose you don't use p2p, so all is good.

 

I do use p2p but not tried it with Filseclab FW.( Installed Filseclab FW this morning.) I will try p2p later and see how the CPU spikes are.
Badcompany.

 

This may be what driveguard is
http://www.akngo.com/drive-guard/

As for the rest it's kinda cryptic. The only thing that's bothered me so far with this program is the poor translations in help files etc

 

Decided to test Twister against AKLT.exe from http://firewallleaktester.com/aklt.htm

Scanning raised no alerts (A-squared free tagged it as a suspicious)
On the keylogging test it went 0/7 :-(
I know some will criticize me because it's not a "real" piece of malware, but yet other HIPS programs like Online Armor do alert on these tests.
Makes me wonder how good the behavioural defenses of Twister are.

 

Personally i think that Online Armor isn't comparable to Twister, just like Comodo isn't. Twister isn't traditional HIPS. It's an antivirus, so i don't expect it to perform on par with programs that are designed to be specialized. I would be interested more in a test with a real keylogger and see that Twister doesn't detect it, while antivirus X does.

 

At times, I've noticed that the website is unavailable. Do you?

 

Yes same here in firefox however,
http://www.filseclab.com/eng/products/twister.htm
works.
ellison