WiseVector Stop-X

Discussion in 'other anti-malware software' started by bellgamin, Aug 10, 2020.

  1. WiseVector

    WiseVector Registered Member

    Joined:
    Aug 16, 2020
    Posts:
    543
    Location:
    China
    Thank you as well! Any question, please don't hesitate to contact me.
     
  2. paulderdash

    paulderdash Registered Member

    Joined:
    Dec 27, 2013
    Posts:
    4,644
    Location:
    Under a bushel ...
    :thumb: Thank you for taking the time to give us this detailed information.

    Your engagement on these forums is a major reason why I will use and support WiseVector StopX.
     
  3. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,559
    Location:
    The Netherlands
    OK thanks, I didn't know this. BTW, since WV is based on AI, do you still need to update the signatures database? I suppose WV can detect and block malware both pre and post execution without using the cloud? Also, why is WV using APC injection itself? Does it inject code into every process?

    And I like that you can disable realtime protection, but you can still scan files on demand I assume? And can you also give some info about "Memory Inspection", "Advanced Malware Protection" and "Instruction Tracer", is this related to behavior blocking, and can you give an example of what type of behaviors it's monitoring?

    I indeed hope it doesn't become too bloated and too complex, because eventually it will create problems, especially if combined with other security tools.
     
  4. tutman

    tutman Registered Member

    Joined:
    Aug 23, 2019
    Posts:
    44
    Location:
    usa
    Would be nice if you did add firewall features to enable outbound notification but also play nicely with the program that is trying to connect out and pause the
    process instead of breaking the connection to allow user to allow or deny connection. (Pet peeve of mine!)
     
  5. bellgamin

    bellgamin Registered Member

    Joined:
    Aug 1, 2002
    Posts:
    8,102
    Location:
    Hawaii
    You are correct in assuming that "experienced users" will like features such as "Advanced Features Customization." However, average users are NOT usually interested in security apps that need a lot of complicated tweaks and adjustments. Instead, they tend to prefer security apps that are "set it & forget it" -- which is what WiseVector already is.

    Generally speaking, it is average users who comprise the majority of the mass market. And -- by the way -- the majority of posting members here are NOT average users.
     
    Last edited: Aug 31, 2020
  6. roger_m

    roger_m Registered Member

    Joined:
    Jan 25, 2009
    Posts:
    8,626
    Surely it can have options which advanced users can tweak, but average users don't need to worry about.
     
  7. bellgamin

    bellgamin Registered Member

    Joined:
    Aug 1, 2002
    Posts:
    8,102
    Location:
    Hawaii
    I was inferring that the existing WV should be the one for selling to mass-market average users. Then there should be a second version -- the "Pro"version if you will -- which has all that WV now has PLUS Advanced Features Customization, Network Protection, SHA256 protected whitelist, etc.

    By the way, I am NOT sure that WV should include any free version in their lineup at this point in time. For a new entrant into the highly competitive field of security apps, occasional give-aways to a few helpful friends is okay, but offering a free version to the world-at-large is not a sound business model -- in my opinion.
     
    Last edited: Sep 1, 2020
  8. amico81

    amico81 Registered Member

    Joined:
    Oct 18, 2017
    Posts:
    100
    Location:
    Germany
    you cannot earn money with any free av (without selling personal data).
    So I think the free WV -version could be a "just signature based" av without AI or behavior blocker...so probably not better than
    the mainstream free av's
     
  9. WiseVector

    WiseVector Registered Member

    Joined:
    Aug 16, 2020
    Posts:
    543
    Location:
    China
    It could be personalized rules based special events. For example,
    . A VMP packed driver is loading.
    . Powershell.exe is sending data to a suspicious server.
    . A program is trying to read your private files.

    Users will get an alert and can select what WiseVector StopX should do next. With the advanced feature customization, users are able to know everything happens in their sytem and get totally control.
     
  10. WiseVector

    WiseVector Registered Member

    Joined:
    Aug 16, 2020
    Posts:
    543
    Location:
    China
    Yes.
    Yes.
    No, WVSX doesn't load DLL to every process, just loads a DLL to some user mode processes but not critical system processes.
    Yes.
    Memory Detection: It detects malware that uses the following techniques: Reflective Dll Injection, Process Hollowing, Manually PE loading (Exe and Dll), DotnetToJS, Sharpshooter, Net code in PowerShell, Process Doppelgänging, Process Reimaging Mimikatz, and remote threads in system processes. WVSX detects memory threats as the name of "MEMRAY.XXX".
    Advanced Malware Detection:In general, it's AI based behavior detection. WVSX detects this type threats as the name of "WIBD.XXX".
    Instruction Tracer: It can effectively detect hidden threats such as DLL Side-Loading, thread hijacking. WVSX detects this type theats as the name of "InsTracer.XXX".
    Please visit our page " History":https://www.wisevector.com/en/en-history/.There has the info that you might be interested in.
     
    Last edited: Sep 1, 2020
  11. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,295
    I wonder what is going on here:

    WiseVector_Document Protection_alert_01.JPG

    WiseVector_Document Protection_alert_02.JPG
     
  12. Less

    Less Registered Member

    Joined:
    Dec 24, 2008
    Posts:
    288
    I am only able to browse their site and update app with VPN.

    Sorry to ask this.
    This app is from China, is it app safe?
     
    Last edited: Sep 1, 2020
  13. Krusty

    Krusty Registered Member

    Joined:
    Feb 3, 2012
    Posts:
    10,241
    Location:
    Among the gum trees
    @WiseVector ,

    Do you have any plans to allow WVSX to register in Windows Security Centre?

    Thanks.
     
  14. WiseVector

    WiseVector Registered Member

    Joined:
    Aug 16, 2020
    Posts:
    543
    Location:
    China
    We would like to add stand alone firewall features, without relying on Windows firewall and there will be no connection breaking.
     
  15. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,295
    I just got updated to Version 2.6.7 :)
     
  16. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    24,093
    Location:
    UK
    Win 10 2004. WV 2.6.6
    Opened GUI via taskbar icon.
    Selected menu..check for updates.
    After a few seconds GUI closed and disappeared from taskbar. All normal really except the GUI didn't come back up on screen after the update, I had to open it from the taskbar. I would have thought that expected behaviour would be to re-open GUI after manual update ?
    Now on 2.6.7
     
  17. pb1

    pb1 Registered Member

    Joined:
    Apr 4, 2014
    Posts:
    1,278
    Location:
    sweden
    I just got, automaticly, updated to 2.67. I dont like that!
    I use a monitoring installer/uninstaller because i want control.

    Updating components, whatever that is, automaticly is good but updating the program without me having control is not.

    I am shure that i am not alone about this thinking. There should be an alternative about this as it is in all other security programs.
     
  18. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    24,093
    Location:
    UK
    Try menu (top right of GUI) then Settings.
     
  19. pb1

    pb1 Registered Member

    Joined:
    Apr 4, 2014
    Posts:
    1,278
    Location:
    sweden
    I guess you mean the updating components.

    I`ll have to wait for WV response to this because i do not think anyone else besides them really know what that is. I do not want to untick that because it may interfer with something other then just updating the program itself.
     
  20. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,295
    Found another:

    151.139.128.14 < ocsp.sectigo.com [Comodo] > USA
     
  21. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    5,295
  22. WiseVector

    WiseVector Registered Member

    Joined:
    Aug 16, 2020
    Posts:
    543
    Location:
    China
    Hi,

    Please don't worry. WiseVector StopX doesn't interfer with something other when updating the program itself. It's desinged to work with less disruption to our users.
    If the update needs to restart your PC, there will be an alert " Restart your computer now?"
    I think your advice is reasonable however, since you want to get control of this. We already have discussed about adding an alternative in case some users don't want automatic update to a new version. We would like to hear from more other users about this.
    Thanks!
     
    Last edited: Sep 2, 2020
  23. paulderdash

    paulderdash Registered Member

    Joined:
    Dec 27, 2013
    Posts:
    4,644
    Location:
    Under a bushel ...
    I also always prefer control.

    Perhaps auto-update could be default, but with option to disable that, then new version notification with manual update instead would be best (for me!).
     
  24. WiseVector

    WiseVector Registered Member

    Joined:
    Aug 16, 2020
    Posts:
    543
    Location:
    China
    When V2.66 is running, the new files of V2.67 cann't replace the old files. The updater quits WVSX first and then it can complete the updates, that's why you saw GUI closed and disappeared from taskbar, which will not re-open automatically.
     
  25. WiseVector

    WiseVector Registered Member

    Joined:
    Aug 16, 2020
    Posts:
    543
    Location:
    China
    Thanks for your feedback!
    It already has an option to disable the auto-update in the settings. We are thinking about the new version notification.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.