New Russian Kid - AVZ antivirus -

http://img161.imageshack.us/img161/9874/screen1ye5.png

http://img211.imageshack.us/img211/8899/screen2bh9.png

http://img158.imageshack.us/img158/8912/screen3lc6.png

http://img158.imageshack.us/img158/7645/screen4hc4.png​

This version is freely distributed and intended for non-commercial use.
Website
Download AVZ Antivirus 4.21 (eng) no install required

 

Why this utility is named 'antivirus'? Anyway I'll definately check it when I have the time.

 

Interesting that the malware categorizing is very similar to KAV (AdvWare, PornWare, RiskWare etc.).....But it seems to not have extensive packer support, which is bad

How should one update the malware database with this utility?

 

It has a built-in updater too.

http://img285.imageshack.us/img285/9396/untitled1lk5.png​

 

so this isnt a antivirus what exactly?

 

The screenshot shows wilderssecurity.com
Is this developed by the security experts here at the forum?

 

I think it's similer to the MWAV AV toolkit that was offered by eScan which asome of us used to use.

This is waht it say's on it's about page,

It seems to offer a host of AS features and you can seem to enable it's guard (AVZGuard).

 

No is not, is just a watermark, that's all.

 

Don't thinks so, the images have been uploaded and attached to the posts. Maybe PaulBB's edited it. It's just like a watermark so no other site can take the credit for the images.

 

ooops PaulBB you beat me to it.

Have you enabled the Guard?

Where do the updates download to, the temp file?

Do you know if it's using own signatures or 2nd party (like MWAV did with Kaspersky's)?

It downloads the following files http://avz.virusinfo.info/avz_up/ when updating.

 

So anyone tried it so far?

 

Yup I tried it. It is a promising tool but not mature yet.
I got a BSOD when disabling AVZGuard.

Frank

 

PaulBB, do you read/translate the Cyrillic, or is there an English language version of the web page/s?
Just downloaded the zip file to a folder. Would like to find support pages in the language I can read b4 trying it out.

 

No, it's not, but the included help file from the av package is in English.

 

When i start cleaning the house at fridays it looks also promising.
Usually it ends with the fact that my wife appears right behind my back and says: "Just get lost and do something useful at the computer, check for new worms or something".

 

ROFL

So what's your take on it (Inspector)?

 

I said it already many times: There isn't and there will be no tool overnight which can give the water to existing solutions. It takes years to establish a proper Antivirus/Antispyware Solution. And honestly, all the add-on tools which are claiming you have to have them together with your current AV/AS - do you really think it's worth to have them installed? The chance that it traps something what your primary AV misses is close to zero. That's why a lot of such companies riding on "questionable" detections which are not even dangerous enough to get included in AV software. Of course it looks "dangerous" if something is detected and your AV misses this. But to the hell with a tracking cookie - there are much more important tasks to deal with.

 

I love software that doesnt need installation. Just download and run

I ran it in a Vmware snapshot and it seems very light.
On my first scan it found: Trojan-Downloader.JS.Psyme.c in my IE cache wich is good (I surfed alot of sites that should have some bad things)

 

Inspector docet

 

This utility is kinda old, I downloaded it because on KAV forums I saw this one mentioned, it is developed by someone over there (I think) , but now it seems that is translated fully to english, or not?

 

Again, thats the KAV name for the malware. Hmmm....

 

From Kaspersky forums:
http://forum.kaspersky.com/index.php?showtopic=20480&hl=avz antivirus

 

Hey guys, just run the system investigation(File->System Investigation), save the log, and then analize it, and u will see power of this utility...

 

This is the System Analyze and Cleaner Toolkit. It provides set of utilities to perform manual system check and find malware unknown that is not in AVZ (and any other) antivirus base.

The most powerful features of the AVZ is anti-rootkit, startup analyzer, keylogger detector and database of the clean system files.

Anti-rootkit automatically detects processes and files hidden with several technics. It warn user abou thу rootkit activity.

Startup analyzer allows to view many places in the system where malware can be registered for autorun. Also warnings issued if AVZ discovered software used exotic auto-load (like APPInit_Dlls key often used by malware).

Keylogger detector uses special technics to detect trojan and keylogger dlls active in the system. From the author words it can detect all typical keylogger (no misses on the author's ITW collection).

Database of the clean system files significally reduce number of object that need to be analyzed by hand. You need to try this feature to once and you will love it

And finially signature- and heuristic-based antivirus engine. It's just an addon for any other tools. It allows you to remove from the system well-know malware before manual system analyze.

All these features are integrated and it makes AVZ very, very helpful in the malware discovering.

 

HIPS systems are claiming that people need use them togehter with AV's. So, according your words, HIPS are usesell?