SecureAnywhere!

An email from Firetrust gave a little info regarding a new AV, SecureAnywhere.

Anyone know anything about it?

Jerry

 

http://www.firetrust.com/en/node/612

 

Webroot SecureAnywhere...

https://www.wilderssecurity.com/forumdisplay.php?f=105

 

Thanks. I did not know that it was WSA. Don't think I will try it.
Jerry

 

I would. You might like what you experience. Many have.

 

Smart

 

I did not perform well on AV-C. I am pleased with the AVs I am using and the one I previously used. All have much higher detection rates per AV-C so I don't need to go down instead of up when it comes to security.
Thanks for the suggestions and comments.

Jerry

 

Maybe you should read this: http://blog.webroot.com/2012/07/19/webroot-bulletin-regarding-av-comparatives-results/ and watch this: -http://www.youtube.com/watch?v=uKMZ1Ukw_7I

Then think about it and then make a comment!

TH

 

I should re-state, my comment was not a slight at WSA itself, but cloud AV's in general. I have lost faith in the technology. For example, even if WSA can roll-back after detection if a zero-day slips past, the zero-day can block your connection straight away to the new cloud detections using firewall rules in windows firewall alone. Its the same problem with other cloud AV software, with programs that are not cloud in this scenario you can just download the off-line updates manually.

 

Doesn't change a thing. I have most confidence in AV-C than any testing organization. It doesn't make a difference if others like it or not.

I still have no thought of testing it. Let it show in the high 90%, and I'll give it a look.

Regards,
Jerry

 

Again I have to say that most people don't understand how WSA works and they don't care to I'm not here to change your minds as you both have already made your judgment and that's fine to each there own I just wanted to show you some info!

Regards,

TH

 

Yes TH, we are all entitled to our own opinions. However, I have:

1) Worked with and programmed computers since 1972.
2) Worked as a networking and security specialist for over 20 years.
3) Worked with mainframes, minis and mid-sized computers.
4) Worked for the one one the largest companies in the world securing systems worldwide.
5) Provided security consulting services to some VERY large corporations.

I think this kind of experience makes some opionions about security more valuable than others. Right now I happen to think that WSA is one of the best security products available for home and small businesses.

But, then again, that is just my opinion.

 

I don't know how WSA works because WSA has some magic way to get online when being blocked by a firewall, also don't say “because we limit unknown programs“ because, I'm sure you not silly enough to assume there is not way to change windows firewall settings other then the standard.

 

Why would you block WSA with another firewall that does not make sense?

TH

 

http://www.pcmag.com/article2/0,2817,2393893,00.asp

Pretty good write up...little older. RR

 

Malware + firewall = change firewall setting (block all)-(webroot)

 

Unknown Malware + firewall = change firewall setting (block all)-(AVG) What's the difference?

TH

 

WSA will circumvent malware blocking its connectivity by connecting out directly through kernelmode if needed. Normal AVs are just as susceptible and generally don't have the engineering in place to avoid being blocked. If you are technical enough to know how to manually update your AV signatures while offline, I don't think these types of issues apply to you

 

i will never understand the distrust/hatred directed against wsa at wilders.I have it installed on 2 of my machines and also have now done over 2 dozen installs for people,several of which are what i would consider high risk users,all of which at last check are malware free.Can't argue with results

 

what i have found with wsa is real world use gets better results than testing does

 

Very true Z, very true.

 

IDP files not in Cloud, Offline Update. Run AVG scan new detection in offline update, delete malware = Restore Connection.

Its the fact that cloud software rely on an active internet connection from the host machine that is the difference.

 

depends on the av. some are cloud based primarily yes but some of those also keep a signature set on the drive so if there is a temporary disconnection it still can scan with. but just like any av out today if you do not have internet connection and your av does not update you are not fully protected. so saying a av is not good because of it requiring a internet connection is kinda wrong. ALL av's require internet connection or they cant update its just cloud based ones do rely on it a bit more than others.

 

EDIT: Still unknown Malware to AVG what do you do now? Me I would open WSA and look under Active Processes and look at the list for the malware that is being Monitored I set it to block and scan with WSA and it removes malware everything reverted back to before infection without the need of cloud connection! Even if it did happen but as Joe said:

So play time is over as you will never understand!

Cheers,

TH