Discussion in 'other anti-malware software' started by Ibrad, Mar 15, 2010.
Only if you have Pro (or above) versions of Windows.
Yes MD is very handy at blocking many Unwanted activities and behaviors on your PC, another example is I use it to block my game connection client from Terminating my game. Like my sig says "COMMAND AND CONTROL"
Yes if running the test.exe poc in Sandboxie, Sandboxie stops it from terminating other processors. Sandboxie was 1 of very few apps which passed I believe.
MD 2.6 version runs on W7 and the author isn't as active anymore.
LOL, practical uses for security software other than prevent malware
Hello everyone. Now I couldn't understand from all the postings - is the last Torchsoft version 2.6 free or it still remains shareware as written in the license agreement. Has someone without a license installed it to tell?
I prefer it to 2.7.1 but if it is shareware, I'll have to put up with waiting for the new stable free release.
2.6 is not free when u d/l it from the web.
2.7.1 is protection less and set as free
in short which is the version more tough?
Thank you for replying. But what do you mean by "when u d/l it from the web". Is there somewhere else I can download it from?
Only place I know of for ver. 2.7.1 beta is here: -http://dl.360safe.com/md_setup_en.exe-
It is very stable on my machine.
demoneye - Could you explain why you think 2.7.1 is less protection than 2.6.0 or did you mean something else?
Yes, I am interested to hear why you think this, especially since 2.7.1 has not been released yet and 2.7.0 was never released at all.
I think maybe demoneye is referring to the bugs in the 2.7 which is what is making the 2.7 less secure?
If you read back a bit in this thread and read a technical explanation from our friend Nick about the bugs.
Anyway I'm still using the 2.6
He is talking about trial protection, not security protection.
Xiaolin posted the following today at the Chinese forum when asked about the next release...
I've had no problems with 2.7.1 on Windows 7. The reported XP bugs appear to be fixed here. Since this build was released one day before Matousec's KHOBE advisory, I assume the vulnerability will remain an open issue.
Download link for 2.7.1: -http://dl.360safe.com/md_setup_en.exe-
MD5 = 5EF13742DC16424DC3F90D023FBB92FC
So, it seems that xiaolin won't even honor his promess to sent notification emails for his fellow customers that earlier bought MD and Registry Workshop... it's probably too much to ask him from now on!
It does not surprise me that much, as he did not even adress us lifetime customers about what was/is happening about his "migration" and the signification of it on his products' futur lifecycle!
2.7.1 is still beta. I am hoping we will here back officially when it is a final public release.
Lets not complain about xiaolin yet...I PMed him right before and in the process of this migration on he responded very quicky. Give him some time, he probably has tons of requests asking about whats going on.
I also have a high feeling he is watching this topic
I have a big faith in xiaolin skills as a coder (there can't a better example than Registry Workshop, imho) and there won't be anyone happier than me if/when he ever proves me wrong on my gut feeling about his present lack in customers' caring...
If the current 2.7.1 is the final build, it also ignores the vulnerability mentioned here:
Malware Defender 2.7.0, EQ 4.1 the process of access control vulnerability demo
I believe the POC uses a CreateJobObject routine (12 ways to terminate a process) to terminate other processes without Malware Defender "noticing". The POC usage is: type in a process ID to terminate and press Enter. Works on XP, Vista, and 7.
Its a shame how this vulnerability was made known just after Xiaolin went to 360.
I certainly hope that this vulnerability is fixed in the next build.
Personally, I don't use MD, but I think this Xiaolin guy flat out owes his paying customers a fix for this exploit before he stops updating for good. The exploit in it's current form may or may not be critical, but the method used may evolve into something far more dangerous.
I know if I paid for MD I'd be upset over Xiaolin's recent comments about 2.7.1 being the final version. However, he was reported to have said:
IMO, the current exploit does qualify as a "big problem," so perhaps there's hope for you guys yet.
i meant 2.7.1 without protection (30 days trial) not that he is less good than 2.6
Here is the video of review done by languy99
yep , malware defender did block one!
Actually I am not satisfied with the review as he hasn't configured MD, he tested with default config(except the change done in the option part)
I think he should constraint himself in reviewing AVs only
Separate names with a comma.