Is there any free alternative to Mamutu ?

Discussion in 'other anti-malware software' started by xperator, May 29, 2012.

Thread Status:
Not open for further replies.
  1. xperator

    xperator Registered Member

    Joined:
    May 28, 2012
    Posts:
    38
    Hi,

    Last time I asked for security program suggestions and someone told me about Mamutu.
    I installed the trial version and kinda liked it. But the price is a little high for me. paying $40 for a single PC (1year) is ok but we have about 5 windows pc in our home. The sum of price for every license goes high and unaffordable for me.

    Is there any free alternative (or at least cheaper) to Mamutu ? Which comes with same features.
    I assume a Behavior-based malware blocker is a more complete and better approach for detecting harmful files, right ? It shouldn't miss anything and even if the malware is hand written by a hacker to do a specific job Mamutu can detect it's behavior and report it, Am I correct ?

    And the last question is, Do you think my current setup is a complete package or not ? Do I really need a firewall too ?

    OS : windows 7 x64
    Current setup : MSE + MalwareBytes + KeyScambler + BufferZone + Mamutu
     
  2. ams963

    ams963 Registered Member

    Joined:
    May 3, 2011
    Posts:
    5,965
    Location:
    Parallel Universe
    BufferZone has a firewall you know. :) You could add HitmanPro to your setup. You need an imaging software unless you are okay using windows' own built-in backup and restore feature.

    About the main topic, I think threatfire is a good contender. Anyways, most av or suite nowadays comes with a bb implemented into it. You could replace your mse with maybe avast and you would get the built in bb.
     
  3. xperator

    xperator Registered Member

    Joined:
    May 28, 2012
    Posts:
    38
    Isn't HitmanPro a on-demand scanner ? I want a real-time protection. Anyway I will keep it in mind incase I run into problem in future.
    I do have DriveImage XML for backup purposes. Used it many times. Never had a problem with that.

    By "bb", you mean Behavior Blocker right ?
    So you think Avast's built-in bb can do exact same job as Mamutu ? It won't miss anything, or does it ?
     
  4. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Classic BB alternatives are ThreatFire and Primary Response Safe Connect (now AVG's Identity Shield shield).

    Most Anti Virus have an behavioral blocker (MSE included), some developed them themselves, others purchased them (e.g. AVG's identity shield) and incorporated them in their main product.

    MSE + BZ is solid enough security.

    Have you looked at BZ option to guard all executables? https://www.wilderssecurity.com/showpost.php?p=1792527&postcount=36

    Have you tweaked the protection settings?
    https://www.wilderssecurity.com/showpost.php?p=1792526&postcount=35

    You can use BZ also to restrict internet access of BZ-ed programs.
    see picture
     

    Attached Files:

    • 2.png
      2.png
      File size:
      112.4 KB
      Views:
      1,410
  5. xperator

    xperator Registered Member

    Joined:
    May 28, 2012
    Posts:
    38
    Thanks for the explanation.
    It seems ThreatFire is somehow outdated. I think I will skip it.

    BufferZone is causing a few problems since I started using it. it doesn't let my download manager work properly (IDM). I have firefox running and when clicking a download link the IDM returns error.
    Not sure how to overcome this.

    Regarding MSE's bb, I don't think MSE has such thing. At least for me it never asked me that for example some program is doing a malware-like behavior. I compared Mamutu and MSE with a few samples but only Mamutu could tell.

    I am also looking for a web shield. When I installed dr.web it was blocking malware websites and exe files before the browser tried to open it.
     
  6. kupo

    kupo Registered Member

    Joined:
    Jan 25, 2011
    Posts:
    1,122
    I could suggest you an alternative to Bufferzone, Sandboxie (has a "freeware" mode)

    As for behavior blocker being complete, I will disagree, HIPS is a lot more complete. You could use Online Armor Free for a robust HIPS.
     
  7. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    Online Armor has WebGuard when used with the Hips and the Firewall can be removed leaving the Hips protection in place just in the case you want to use a different wall.You can then put your browser in saferMode and you have very strong protection.
     
  8. GakunGak

    GakunGak Registered Member

    Joined:
    Mar 24, 2009
    Posts:
    953
    Avast 7 free has BB and Sandbox, you can custom select it to be installed and you can set it to Auto, Ask, Allow and Deny....
     
  9. stapp

    stapp Global Moderator

    Joined:
    Jan 12, 2006
    Posts:
    7,307
    Location:
    England
  10. ZeroDay

    ZeroDay Registered Member

    Joined:
    Jul 9, 2011
    Posts:
    693
    Location:
    Hogwarts.
    xperator check your inbox
     
  11. ams963

    ams963 Registered Member

    Joined:
    May 3, 2011
    Posts:
    5,965
    Location:
    Parallel Universe
    Yes it is a scanner. It's one of the best second opinion scanners out there. Most members here in this forum use it. I was referring to your question 'Do you think my current setup is a complete package or not ? Do I really need a firewall too ?' You could really use some second opinion scanner as nothing will catch everything. Nothing will protect you 100%. And I don't think anyone would disagree with installing the non resource eating, lighting fast and light HitmanPro. :)
     
  12. ams963

    ams963 Registered Member

    Joined:
    May 3, 2011
    Posts:
    5,965
    Location:
    Parallel Universe
    Good for you. :)
     
  13. ams963

    ams963 Registered Member

    Joined:
    May 3, 2011
    Posts:
    5,965
    Location:
    Parallel Universe
    Yup I meant Behavior Blocker by bb. Avast's built-in bb would do similar job as Mamutu as they are both bb.

    I think you should go for sbie, another av with built-in bb and a firewall with hips(Comodo fw/d+ or OA).

    You could also go for Privatefirewall from privacyware.com as it has built-in bb.
     
  14. xperator

    xperator Registered Member

    Joined:
    May 28, 2012
    Posts:
    38
    I disabled Mamutu and installed Online Armor with disabled Firewall. Tried a few checks to see if it's protection can match up with Mamutu.
    It did catch them just like Mamutu but it doesn't give any info what the file is trying to do. And it doesn't suggest what option should be chosen. Also there was a few false positive and innocent programs reported.

    I will try Avast now. What is "sbie" ? what about "OA" ?
    I did try PrivateFirewall and Comodo, Didn't liked them.

    btw, I was trying Avira for the last few hours. it's bb wasn't picking up any malwares samples. And there is a problem with it's repair process. Most of the time it get stuck at %30 and hangs. Uninstalled...
     
  15. ZeroDay

    ZeroDay Registered Member

    Joined:
    Jul 9, 2011
    Posts:
    693
    Location:
    Hogwarts.
    You could try AVG I hear that's got a really good bb
     
  16. xperator

    xperator Registered Member

    Joined:
    May 28, 2012
    Posts:
    38
    I will give it a try. But I heard AVG has the most false positive reports.
    Also a friend of mine had AVG installed and I remember most of the time his pc was infected and AVG couldn't manage to clean it for him. He had to install a fresh everytime...
     
  17. Ranget

    Ranget Registered Member

    Joined:
    Mar 24, 2011
    Posts:
    846
    Location:
    Not Really Sure :/
    aaah i would change the AV To avast

    it has a Free Behavior Blocker feature it's not the same as Mamutu but change it to "ask " because it's by default on auto decide

    if you don't want to Change you av there is Threatfire but it's not being updated or i don't know what is the Problem
     
  18. JoeBlack40

    JoeBlack40 Registered Member

    Joined:
    Apr 1, 2009
    Posts:
    1,572
    Location:
    Romania
    SBIE is a short form for Sandboxie.

    This sound like a person who click anywhere,anytime and everything.No AV can protect you by these kind of habits.
     
  19. aladdin

    aladdin Registered Member

    Joined:
    Jan 9, 2006
    Posts:
    2,986
    Location:
    Oman
  20. ams963

    ams963 Registered Member

    Joined:
    May 3, 2011
    Posts:
    5,965
    Location:
    Parallel Universe
    Of course it wouldn't. OA has hips not bb. EAM from emsisoft has mamutu implemented. And EAM + OA are used together as a suite. Hips would give you more detailed alerts and more control.
     
  21. ZeroDay

    ZeroDay Registered Member

    Joined:
    Jul 9, 2011
    Posts:
    693
    Location:
    Hogwarts.
    AVG 2012 has come a long way, from what I've read about it it's actually really strong now with an exellent bb.
     
  22. Ranget

    Ranget Registered Member

    Joined:
    Mar 24, 2011
    Posts:
    846
    Location:
    Not Really Sure :/
    guys guys

    AVAST has a Behavior blocker did you forget about that :)
     
  23. xperator

    xperator Registered Member

    Joined:
    May 28, 2012
    Posts:
    38
    Ok as for now Avast has passed my little checks. It has a great web shield just like dr.web (maybe better?). Also the detection rate seems to be ok. It can catch things that MSE could and couldn't. Didn't have any false positive yet.
    But I haven't yet check if Avast's bb works well or not. Same thing for it's Sandbox.

    A question about the new reported virus called The Flame. According to the news it seems this virus is active since 2010 ! Then why does Behavior Blockers couldn't detect it all this time ?
    I know it is the most complex malware ever created . We buy all these security products and we believe that we are secure if the AV is kept updated. How is that such malware can stay hidden for 2 years ?
     
  24. xperator

    xperator Registered Member

    Joined:
    May 28, 2012
    Posts:
    38
    I have a good and bad news about Avast. The good news is that I launched a malware inside SandBox and checked with malwarebytes to see if it has spread on system or not. And it didn't. The infected file was kept under c:\avast sandbox\....

    And the bad news is that avast's BB didn't show anything when the malware was launched.
     
  25. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    When something is in the sandbox the BB won't trigger. When you manage to get your hands on the old V6 sandbox testing thingie of Avast and disable the sandbox, you will see the BB will be triggered.
     
Loading...
Thread Status:
Not open for further replies.