Malware Defender - New HIPS from China

Avira picks it up here also on med setting. but without the pipeline site appearing.

 

Re: Malware Defender 1.2.0 beta3

Thank you for the prompt reply.

#1- What is link for Chinese forum, please?

#2- IMO, registered users should be informed of ALL public issuances including public betas. The existence of betas is an encouragement to registered users since it lets them know that progress is being made.

#3- Of course, notices about betas should contain a warning such as the following...

"Please be aware that beta versions are issued in order to detect and fix any possible problem areas, before issuing a final version. A beta version may not be as stable as a final version. Beta versions should only be used by those who are comfortable with testing new or revised software. NOTE: It is always wise to back-up your system hard drive before installing any beta software."

 

if your system is clean for sure is a false positive by avira.

 

Re: Malware Defender 1.2.0 beta3

#1. http://bbs.kafan.cn/forum-80-1.html

 

Re: Malware Defender 1.2.0 beta3

Thanks for the link. Google translates that forum pretty good. There are some excellent posts by well-informed users.

 

V1.2 beta4 is released.

http://www.torchsoft.com/download/md_setup_1.2.0_b4.exe

what's new?
- Fixed a bug when detecting actions of reading folder.
- Fixed a bug when detecting actions of accessing process memory.

 

Is there a beta time-limit on this MD beta? Or can we use it indefinitely as-is in it's current beta form? It would be a very welcome and generous jesture on the developer's part if this even at a beta would offer no time constraints

Thanks

 

The beta version will expire after 30 days, same like the official trail version. I am sorry about that.

 

V1.2 beta5 is released.

http://www.torchsoft.com/download/md_setup_1.2.0_b5.exe

what's new?
- Fixed a bug that may cause BSOD when restarting Windows. (this bug is in beta4 only)
- Fixed a bug when creating registry rules in learning mode.

 

Pretty good program. It has some really nice things
What kind of features do you plan on adding, dll loading control?

BTW, i tried adding a rule for *; *.vbs , read and write to ask. It works fine on the local disk, but it seems (as with EQSecure 3.4) it won't block it if the vbs is on the VirtualBox shared folder. Should i also try a cd with autorun.inf + vbs or do you already know the answer?

 

MD search rules from high priority to low priority. The priority number is bigger, the priority is higher.

MD can not block accessing share folder from other computers yet.

The next big feature will be simple network access control.

 

No apologies espected or needed. Very comprehensive work this HIPS and a unique creation in it's own right.

Thanks xiaolin

EASTER

 

Hello.

I am not prone to often setup changes and I pretty much keep the same setup on my systems for years. But this here is one very nice piece of software. I even uninstalled my faithfull SSM to trial this MalwareDefender. I may be arriving late on the scene, given that this thread already has 11 pages, but nevertheless, I must say I'm impressed. While network control is not such a bad idea, I would also like to see some hash-checking in the future. But let me refrain from further comments as I have just installed MalwareDefender and need some time to get acquainted. Good job xiaolin, very good. Thanks for developing this very serious contender in a classical HIPS market.

Cheers,

 

If this continues, you're going to forget SSM
I mean, take a good look around!

 

Hi Pedro

LOL

Well, I am looking. Just give me few more days.

Cheers,

 

Anyone using MD with OPFW 2009 which as Host Protection,are there any conflicts.Is it overkill to us both.
Badcompany.

 

Has anyone tested MD with the new Comodo Leak Test Suite?

http://www.testmypcsecurity.com/securitytests/firewall_test_suite.html

 

Malware Defender alone, against CLT........



EDIT.....
I've tried retesting three more times with MD only, once got a lower score, once got an error with the test and once got 450 out of 340

 

I am running Malware Defender with Outpost Firewall Pro 2009, so far there is no conflict.

Overkill? Not too sure.

By the way, I also have DefenseWall on my computer.

 

That's not bad. The "firewall" leak test is more a hips than a pure firewall test anyway.

 

Yesssss -- THAT's the one I'm eager to get!!! With a router (in) and MD network control (out), a software firewall will no longer be essential to have.

When MD gets network control, the following 4-component set-up will be bloody near bullet-proof . . .

MD + SPI-router + Sandboxie + Imaging software (This 4-way set-up is my current security wall - but see NOTE below. I image often & retain 4 or 5 of the most recent images.)

Ergo, Antivirus & Firewall programs are not "essential." Nice to have? Yes. A useful extra layer for the deeply paranoid? Yes. Essential to adequate security? No.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

NOTE: I also run Twister AV in real time because -- what the heck -- I bought a lifetime license (just to give them $$ support) so I might as well use it, right? By the way, Twister includes a fairly competent real-time behavior-blocker-HIPS AND registry protection. These 2 components 90%+ of the time raise pretty much the same flags as does MD. Pssst -- Twister's system tray icon looks a bit like an advertisement for Viagra.

THANKS for that data, Wolfie. Good boy! Sit. Stay.

 

It's probably overkill with OPFW's Host Protection enabled, unless you "dummy down" its settings or MD's settings to avoid potential conflicts. I'm also currently running MD with OPFW 2009, Host protection disabled, and no issues yet. So far I'm impressed with MD, trialling it for the first time tonight.

 

Thanks, I will keep that in mind.

Will run OPFW (with Host protection disabled) if there are conflicts.

 

hi all,

seems like MD not running upon windows startup or it my setup wrong?

have check the box to allow upon windows statrup....