How powerful is the antivirus software in RSS 2011 Home?

Will anyone please give some decription or even a hint of how powerfull the antivirus software in RSS 2011 Home is ?

Thank you!

 

Hello Vwv101 and welcome to the forums

You can see where we placed in the last VB100 round of testing here:

http://www.virusbtn.com/vb100/latest_comparative/index

The the Virus Guard can and does function as a traditional on-demand scan/detect/remove & quarantine solution, it is designed as team player with the other component features of the software in a layered approach. With this design, it is actually compatible with most 1st and 2nd tier AVs which means that you do not have to make a choice and can continue to use out your current licensing for these alternate solutions while using RSS.

The strategy is one in which each feature in RSS uses its core competence to back up the other features. Though the VG takes advantage of both the Frisk AV engine and our own AI/Machine learning technology, there is still the potential (as with all detection tech) that some content could go undetected.

This is where the Virtual Mode and System Restore features come into prominence:

1. If something DOES go undetected, at worst, the Virtual System would be infected while the Real System remains unaffected; simply restart the computer and all changes are lost at restart leaving your system clean and reducing the time to removal of that content to a bare minimum (Ref: at the end of the day when the computer or workstation is shut down).

2. System Restore: should the VM protection be off and an infection occur that is:

a. Undetected: The authorized user notes strange issues or poor performance of their computer, restore to an earlier time when the computer was working as expected.

b. Detected: Use the Virus Guard as a traditional AV and have it remove/quarantine the content with the ability to restore to an earlier time to "be sure" the content is gone.

The next feature is the Anti-Execute (Virtual Mode > Settings > Additional Protection Options). This works hand-in-hand with the Virtual Mode and is default deny based on your settings. If it is unknown, it is blocked - period. This feature cannot be updated with user choices or custom rules and includes a white list that is updated through our AI technology after something suspicious has been analyzed and found to be benign which reduces false positives and provides a better user experience.

So the way this works is:

1. Is something malicious detected by the VG? If yes, block and/or quarantine so the Virtual System remains clean.

2. Not detected but outside of the A-E allowances: Simply block it. If it can't execute, it can't infect which results in the Virtual System remaining clean.

Mike

 

please have an option to choose if I want to use AI Technology on Anti-executable whitelisting or User will decide which to whitelist

I don't want to have a huge whitelist even if the apps are verified to be benign by Returnil.