About Behaviour Blockers :)

Discussion in 'other anti-malware software' started by jmonge, Nov 5, 2009.

Thread Status:
Not open for further replies.
  1. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    hi,i have DefenseWall which is a policy base sandbox and i am having a hard time finding a good security supplement for DW;) i tried other aproaches like antivirus which only hog down my system,try Hips but :D too much pop ups,i like clasical hips for the reaon that they are very imformative:thumb: but i dont like the pop ups at all:D now i heard good things about behaviour blockers:)
    will it be a good complament/supplement for DefenSeWall?thanks
     
  2. IceCube1010

    IceCube1010 Registered Member

    Joined:
    Apr 26, 2008
    Posts:
    963
    Location:
    Earth
    Once they have it fully implemented, Avast 5 and DW will give you great protection. Avast 5 doesn't slow any of my PC's down. Extremely light on cpu and memory.

    Ice
     
  3. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    cool:thumb: is it going to be free?and does it fully protects againts spywares?thanks
     
  4. IceCube1010

    IceCube1010 Registered Member

    Joined:
    Apr 26, 2008
    Posts:
    963
    Location:
    Earth
    Yes, they have a freeware version which runs great. The paidware will include a firewall and spamware module. The updating of definitions is a bit different but you really don't need that stuff since you have DW. Avast 5 would be a good compliment.

    Ice
     
  5. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    I am running Avast 5 beta with DWv3 beta, only in LUA under XP Pro

    I only run the file and behavior blocker (the last is empty by the way until final release)

    When you configure Avast file shield to check only at execution and write, it is fast, also has a nice feature to remember safe applications (not check them, both transient and persistent caching (enebaled by default).

    See image of this post how effective the cache is https://www.wilderssecurity.com/showpost.php?p=1567752&postcount=211

    The disk I/O of Avast is also remarkably low (often the slowest part in modern PC's now)

    Regards Kees
     
  6. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    that is the beta v5?
     
  7. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    free;) like it
     
  8. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Si monsieur Avast beta 5, c'est la meme que beta v5 :D
     
  9. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    got it:thumb: cool:D
     
  10. Creer

    Creer Registered Member

    Joined:
    Jun 29, 2008
    Posts:
    1,345
    Not really Jmonge, there is one simple reason why - BB mostly based-on blacklists like AV software you still need to download signatures from BB vendors... also BB are very susceptible on FP.
     
  11. Ed_H

    Ed_H Registered Member

    Joined:
    Nov 10, 2004
    Posts:
    662
    Location:
    Chicago, IL
    I would offer 2 suggestions:

    A2 Antimalware, which includes Mamutu behavior blocker will be free for 1 year on November 11. I have used this in the past and it gets along fine with DW. You can disable any of the protection features you don't want or need so it very flexible in that regard.

    Online Armor free version works well with DW and once OA learns what is on your PC, which is a pretty quick process, you will rarely see a popup. I never see popups unless I am installing something new.
     
  12. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    hey i forgot about this promotion for the 11 of november:thumb:
     
  13. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    i have a free giveaway licence for Online armor:D
     
  14. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Good old ThreatFire is a good pure Behavioral blocker.

    Point is why waist CPU cycles on another security application when you have DWv3 on board.

    Only reason I have is: to prevent forwarding e-mails with maleare and occasional fun stuff which is downloaded and which links are sent to friends.

    So a behavioral blocker constantly monitors everything (like a HIPS). Mamutu uses surprisingly little CPU time and disk I/O. Threat Fire uses little disk I/O and a little more CPU time (although latest 4.6 is much improved, in the past Mamutu was a lot more CPU efficient than TF).

    Regards
     
  15. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    i know but to add alitle extra blanket to protect againts the flue is a warm good feeling:D
     
  16. Creer

    Creer Registered Member

    Joined:
    Jun 29, 2008
    Posts:
    1,345
    Yeah but don't forget that it can be placebo :D
     
  17. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    i know:)
    by the way this DW FireWall is very cool.i tested and it is very good;)
     
  18. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    ok fellows DW is a policy base sandbox,do you thing that by adding a behaviour blocker will add extra-peace of mind?
     
  19. Hugger

    Hugger Registered Member

    Joined:
    Oct 27, 2007
    Posts:
    1,003
    Location:
    Hackensack, USA
    I guess part of the answer depends on what OS you're using.
    I've use the combination of DW and Prevx with no slowdown at all.
    Enjoy.
    Hugger
     
  20. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    i have DefenSeWall and MalWareBytes but i am thinking of adding a behaviour blocker,but if i dont need it i will not use it:D please advise
     
  21. Hugger

    Hugger Registered Member

    Joined:
    Oct 27, 2007
    Posts:
    1,003
    Location:
    Hackensack, USA
    I'm not as knowledgeable as the rest of you but as far as I know I haven't had anything get past my signature.
    Other than DW and Prevx, everything else is on demand.
    You could also throw Hitman Pro in there for an occasional scan for for &^%^$ and giggles.
    Hugger
     
  22. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    Hugger i know that DefenseWall is hard to be bypassed but i still have some space for another security application :D i was thinking of a behabiour blocker but not sure if i really need it,i tried couple of hips but the only disadvantage of too many pop up alerts:D
     
  23. Hugger

    Hugger Registered Member

    Joined:
    Oct 27, 2007
    Posts:
    1,003
    Location:
    Hackensack, USA
    You need to go with what will give you peace of mind. Anything else and you will continue down the well traveled road to insanity brought on by security anxiety.
    Good luck.
    Hugger
     
  24. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    DefenseWall gives peace of mind;) :D
     
  25. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    ok i tried ThreatFire and my system was slowed down,so it was not a good experience then disable malwarebytes for a while and it was ok:) then i remember i have a Online armor premium licence some where and decided to try it and it when very smooth:thumb: will i benefits from a pure hips rather than having a behaviour blocker?thanks any advises
     
Thread Status:
Not open for further replies.