Has anyone tried Primary Response by Sana Security?

Hi folks,

just wondering if anyone has got around to trying out this program? It is supposed to be great with detecting Rootkits. I know a lot of you guys like trying out different programs, can you tell us how this one fares

Here is a link http://www.sanasecurity.com

 

heres one previous thread. i thought it was ok. but it lacks info detailing how it works, and theres not much to configure.

 

Thanks Fuser!

from what I understand it works like Pre-Empt, but I still find mystery myself in it's actual workings.

 

Not at all, Pre-Empt is a hardening tool (changes your system configuration), and Primary Response is more of a heuristic malware detector along the lines of Panda TruPrevent. It's alright, but I wasn't overly impressed. It attempts to cut down on prompts by not just alerting on singular events, but rather on combinations of actions that a given program takes. Problem is that it still alerts on just about every program. For that kind of program, I would rather go with a2, personally. With that said, though, it's not a bad program, just not my personal taste.

 

I spoke witha rep from Sana Security about six months ago and he told me this program was going to be offered for home users and explained that when ever there would be vulnerabilities it would automatically plug any holes.

 

Ah, that makes sense, I think they just mean that they do so behaviorally. Until now they've pretty much just marketed to businesses, and it's not uncommon to hear that term used for just about any security solution. They try to do things like thwart buffer overflows, but like most solutions isn't very good and can cause problems.. that's most likely what they were referring to, though.

 

Hi Notok,

the fellow at Sana said when there is any kind of security flaw in the windows (even old ones that Microsoft never addressed) OS and as the new one's are discovered this program will secure your computer.

If you go to site there are some interesting statistics of comparison of Sana and the other products.For example Spysweeper vs. Primary Response:

49 instances of malicious code remained in the system for Spysweeper

12 non-functional remants of malicious code remained in the system

About a month after I talk to the rep there was a article in PC World about how they gave it thumbs up, but then they mentioned the program was going to be $40.00. When I seen it at their site for $24.95 I was surprised.

Is it real low on resources?

 

Like I say, buffer overflow protection and other behavior blocking would fit into that. You can try out the program and see for yourself, it doesn't do any hardening the way PreEmpt does, but I do see your reasoning.. it's just a difference in the terminology used by us around here and business IT folks.

Like I say, when I tried it, it alerted on nearly every program on my computer, so I'm sure it alerted on everything but I don't see it as resolving the problems that other pure behavior blockers face.

If I remember right it was something like 15-20mb RAM, but that was fairly early on in the beta, so it may be different now.

Like I say, it's not really a bad program, but doesn't really suit my tastes.

 

Very well put. Spysweeper is a wiley ole veteran at anti-spyware and i'm sure this is simply another new marketing approach to attract additional interest to their product line.
That's not to suggest anything in opposition to SpySweeper, it's been dependable enough for many including being one of the very first anti-spyware apps that i depended on when i first got involved in this work.

 

Heuristics, AFAIK, are simply a way of broadening a given pattern to include variations such as might be produced by a polymorphic virus.

Truprevent seems to be more of an activity-blocker or generic protection. (Although it gets a lot of pattern updates, so it obviously is doing something else too.)