WinPatrol WAR (formerly WinAntiRansom)

Discussion in 'other anti-malware software' started by haakon, Dec 17, 2015.

  1. NiteRanger

    NiteRanger Registered Member

    Joined:
    Nov 15, 2016
    Posts:
    651
    Location:
    Far East
    It still not shown on website yet and no changelog.......anyway got it

    Thanks
     
  2. SIR****TMG

    SIR****TMG Registered Member

    Joined:
    May 31, 2004
    Posts:
    833
    I also got it
     
  3. haakon

    haakon Guest

    As it has been and should be.

    All final releases are published without a version number in the exe at
    https://www.winpatrol.com/downloads/winantiransom-setup.exe
    with the version number and changelog detailed in the body of the page.

    Those with version numbers published at
    https://data.winpatrol.com
    are distributed privately at the discretion of WinPatrol for various purposes - experimental, preview, pre-release.

    For all those I posted up here in the past with relevant detail, I always got the OK from Bret to do so. Some I got were to troubleshoot issues. Which I did not post up here.

    Without provenance, numbered executables should be installed and used with your usual Plan B in mind.
     
    Last edited by a moderator: Dec 1, 2016
  4. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,559
    Location:
    The Netherlands
    This doesn't sound too good. The point of a behavior blocker with true AI, is to minimize false positives. So it looks like it's way too sensitive, so no wonder it will block just about all ransomware and a lot of other malware. I now understand why competing developers criticized WAR, because tools like HMPA and MBARW try to look at specific behavior related to the file-system, but of course they sometimes also produce false positives.
     
  5. boredog

    boredog Registered Member

    Joined:
    Feb 1, 2015
    Posts:
    2,499
    Rasheed

    do you remember cruel sister saying it has become more like an anti exe? that would explain warning on all new installs. voodooshield does the same thing on new installs and that is why you have to exit that one before an install.
     
  6. haakon

    haakon Guest

    Competitors criticizing the competition?

    OH NO! :eek:

    What are we gonna do now??!! :eek::eek:

    Well, after 8,000 posts you finally think you understand something. :argh:
     
  7. haakon

    haakon Guest

    It's also an anti-DLL.

    WARdllDetect.jpg
     
  8. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,559
    Location:
    The Netherlands
    So are you saying that WAR had less alerts when it was focused on ransomware only? And you can't compare VS with WAR, VS doesn't claim to be a behavior blocker.

    Haakon, these personal attacks are getting old, what are you like 12? And as you have read in this thread, it's not only PC Magazine and competitors that criticize WAR, but even current users are a bit disappointed. Like I said, there is nothing special about a tool that will flag let's say 50% of legitimate software as ransomware (or malware), this tells me that the AI isn't actually that smart after all. But this is probably too complex for you to understand. Or you refuse to understand this, as big-time WAR fan-boy. :argh:
     
  9. FleischmannTV

    FleischmannTV Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    1,094
    Location:
    Germany
    I usually don't agree with Rasheed, but in this case I support what he says 100%.
     
  10. boredog

    boredog Registered Member

    Joined:
    Feb 1, 2015
    Posts:
    2,499
    Rasheed

    I was not really trying to compare
    war with voodoo, I was only stating both programs block everything, especially when voodoo is set to always on and paranoid like mine is.

    what is your choice for the best behavior blocker?
     
  11. Tomin2009

    Tomin2009 Registered Member

    Joined:
    Sep 13, 2012
    Posts:
    94



    https://data.winpatrol.com/downloads/winantiransom-setup-2016.12.611.exe


    It's not a release version. Use at your own risk.
     
  12. marciano222

    marciano222 Registered Member

    Joined:
    Nov 10, 2016
    Posts:
    32
    Location:
    Poland
    you just one program
    Yet MBAM 3 b. The real-time protection
    and two is always bounce you on the computer resources
    Regards
     
  13. haakon

    haakon Guest

    Thanks for post up! As well the risk caveat.

    Earlier 2016.11.598. Now 2016.12.611. The WinPatrol crew rocks on.

    Looking forward to the next public release. :thumb:
     
  14. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,559
    Location:
    The Netherlands
    The point is, you can't blame VS that it blocks everything, because it's anti-exe. But I'm not saying that WAR is not worth it, let's say that it has a 30 to 50% false positives rate, it still might have a 95 to 100% ransomware/trojan detection rate. The problem is that it doesn't let you know why some app is blocked, while this info is crucial for expert users, to determine if it's really a false positive or not. But to answer your question, I prefer HIPS over behavior blockers, but AFAIK the one from Emsisoft is pretty good.
     
  15. haakon

    haakon Guest

    This post is all the effort I will expend on this nonsense.
    "let's say" At least an admission of sorts you squeezed those absurd values out your ordure port.
    WAR doesn't block anything. The user quarantines or allows. The UI does allow for experts to examine data for that determination. Savvy customers of the program know that. Forum posers will not. Hint: right click.

    What is legitimate is there is absolutely nothing special about your tediously redundant 1000's of forum saturating concocted chaff, self-important judgements, preferences and AKAIKs which ride the coat tails of other members' valid and precise discussions. Which is not to say you don't come up with the rare, extremely rare, "I think" post of interest. 0.0159% of the time.

    WAR is not as perfect as you think you are.

    The WinPatrol team is not deserving of your fabricated misinformation and daydreaming. As no one else calls you out on it, I will.

    Well, as I have you ignored under my login here, whenever I bump into it on the occasions I open my RSS reader to a subscribed feed for the products I actually own, use or used (over long terms, years and in some cases decades), betas and sundry industry newsworthy threads.

    For visitors to and the casual readers of this thread, WAR's overly cautious behavior as reported by its users, myself included, is an annoyance subject to some sniveling, some of which is exaggerated by a frustrating learning curve. But it has never presented itself as destructive. Experts eventually deal with it.
    https://www.wilderssecurity.com/threads/winantiransom-plus-thread.382364/page-21#post-2633050

    However, as demonstrated by their ongoing private pre-releases and experimentals (some made available in this thread), improvements progress for WAR's relatively new technology.

    It is unlikely it will ever be everyone's zero-learning, set-it-forget it, automatic, silent companion layer.

    There is no doubt the PC Mag review got their attention.

    As for that, in case you missed it, IMHO...
    https://www.wilderssecurity.com/threads/winantiransom-plus-thread.382364/page-21#post-2632697
    And the expert,
    https://www.wilderssecurity.com/threads/winantiransom-plus-thread.382364/page-21#post-2632700
     
    Last edited by a moderator: Dec 8, 2016
  16. haakon

    haakon Guest

    WinPatrol Holiday Challenge
    https://www.winpatrol.com/give/
     
  17. chrcol

    chrcol Registered Member

    Joined:
    Apr 19, 2006
    Posts:
    982
    Location:
    UK
    The security market is pretty broken, is shocking the price of most security products these days. A market booming thanks to mostly fear.
     
  18. Jerry666

    Jerry666 Registered Member

    Joined:
    May 28, 2002
    Posts:
    176
    I sure would like a better explanation with more info , not just performed a ransomware like action . Maybe name or type of infection that was trying to load , like virus apps name the infection .
    Other than that , the false positives seem to be fewer as maybe the program is "learning " . It is geting better .
     
  19. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,296
    I wonder what is going on here:

    WAR_AccessHistory_01.JPG
     
  20. clubhouse1

    clubhouse1 Registered Member

    Joined:
    Sep 26, 2013
    Posts:
    1,124
    Location:
    UK
    There is this on the product page, perhaps a email will get a response on this supposed AI?

    Support from a company that actually answers emails and support requests in a timely and personal manner.
     
  21. boredog

    boredog Registered Member

    Joined:
    Feb 1, 2015
    Posts:
    2,499
    tarnak

    I don't know about the others but I can not read your screen shot.
     
  22. clubhouse1

    clubhouse1 Registered Member

    Joined:
    Sep 26, 2013
    Posts:
    1,124
    Location:
    UK
    WinPatrol WinAntiRansom 2016.12.626.0...No details, changes etc available...





    http://www.winpatrol.com/downloads/winantiransom-setup.exe
     

    Attached Files:

    Last edited by a moderator: Dec 14, 2016
  23. james246

    james246 Registered Member

    Joined:
    Nov 5, 2005
    Posts:
    139
    Is this a final release or still in Beta

     
    Last edited by a moderator: Dec 14, 2016
  24. boredog

    boredog Registered Member

    Joined:
    Feb 1, 2015
    Posts:
    2,499
    I see this new build has an extra button :D

    Dashboard.
     

    Attached Files:

  25. guest

    guest Guest

    Changelog for WinPatrol WAR (formerly WinAntiRansom) 2016.12.626:
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.