KAV 6.0 Prototpye Released!

Anybody use the Script-checking? I noticed that when I went on bestbuy.com, it was really really slow (with the KAV script-checking), before KAV gave a message that it timed out scanning the site. Which by this time IE took up almost 700MB of Virtual memory.

 

Thanx, VikingStorm

This is a first such bugreport.
Forwarded to developer as issue.

 

Hi!

Heuristics?
AFAIK
In scan engine - they are the same (at the moment of prototype
But KAV 6.0 have advanced behaviour heuristics - Proactive Defence.
In our tests it catched and recovered from about 95% cases of ITW trojans and viruses with AV switched off.

 

Just installed now on one of my computers. So far so good. no problems on install, boot-up.

Very impressed so far. If they can keep to this low resource/memory usage in the full version it will be a real winner.

 

...In our tests... ?? ?? ??

Who's us??

 

i decided to try and disable file anti virus too, and leave just proactive defense running, then threw my collection of malware at it, about 500 samples. it found nothing at all

 

Hehe kids. Behaviour Blocking is not the same as standard heuristics (code analysis).
And then you wonder why they call it Behaviour Blocking...
Program must be executed in order to perform it's actions. As soon as AV detects any malware suspicious behaviour,it stops or terminates the application and notifies the user.

 

ah so id actually have to run one of the virus.exe's to see if it stops it. too risky for me i think

 

Hmmm...so it has something like PrevX...but I hate the old code analyser, its really not that good. Lets hope we have code analyser 2 soon...

 

No. It's far from PrevX (there is no popups or anything,except on detection). It's more like Norman Sandbox without virtual PC.
Thats the point of Behaviour Blocking. Norman is doing it in secure environment (very slow) while standard Behaviour Blocking is done on current PC (the one you're using which is way faster).

 

Behaviour Blocking will only work with real-time monitor right?

 

Well... Say - "insider".

 

Not exactly. BB == Proactive Defevnce uses the same drivers and interception layers as RT AV monitor, but it does not "scan" content of files, doesn't use threat signature database. It can be controlled separately from "File Anti-Virus"==AV Monitor

 

Yes, but in case of new virus outbreak it helps alot.
The main feature - "rollback of changes"

 

For sure (AFAIK development in progress). But when - this is a question...

 

So I cant use this feature in On-Demand Scanning?

 

I can say, that there was no serious resource profiling performed before prototype...
Beta has a real chance to be lighter

 

No. This is a separate technology.

 

Darn...Schouw, tell me when the next generation of code analyser is coming please.

 

me too.

 

Early testing; http://illusivesecurity.il.funpic.de/viewtopic.php?t=66

 

dont know if this has been mentioned before, but theres a big problem with kis (first discovered and reported by me it seems), so severe that kaspersky people are now advicing against installing kis. this has nothing to do with detection, but disk security descriptors. its best explained by going here: http://forums.useice.com/cgi-bin/ikonboard.cgi?;act=ST;f=1;t=2043

 

Confirms usual advice. "Take care when using beta software".

Therefore, take even greater care with KIS 6 which has not even reached that stage !!!!

Thanks for heads up, tahoma.

 

Bugs aside, it does seem to have a great deal of potential.

 

It certainly does! It will be a big step forwards to (IMO) the ultimate AV. (No flame intended )