Need a free AV for mom's computer.

Discussion in 'other anti-virus software' started by innerpeace, Nov 25, 2013.

Thread Status:
Not open for further replies.
  1. dansorin

    dansorin Registered Member

    Joined:
    Feb 27, 2009
    Posts:
    236
    Location:
    EU
    having Sandboxie paid, almost every decent AV will be enough, no need to pay for one.
     
  2. RejZoR

    RejZoR Lurker

    Joined:
    May 31, 2004
    Posts:
    6,426
    Because you used Moderate instead of Aggressive. People don't seem to understand modes correctly (though i have to admit that it's not exactly clear from the settings directly either).

    Moderate
    This means that every event that would otherwise result in the DeepScreen analysis popup gets automatically blocked without even analyzing a file. If avast! finds it suspicious enough to throw it into the DeepScreen analyzer, Hardened Mode set to Moderate will simply block it and not even care if the later file analysis by DeepScreen would show it as a clean file.

    Aggressive
    Basically this mode skips DeepScreen functionality altogether and goes by the whitelisting database only. Meaning that stuff that gets blocked by Moderate mode most likely wouldn't get blocked by Aggressive mode at all.

    Basically, in a nut shell, Moderate mode is actually more aggressive than the actual Aggressive mode. Moderate mode relies more on suspicious stuff detection with local detection capabilities and then blocks it dead right there, where Aggressive mode mostly relies on cloud whitelist database and doesn't rely on local suspicious detection as much as Moderate mode does.

    I know because i've extensively tested Hardened Mode and come to these conclusions. When i was using Moderate mode, a lot of quite usual stuff got blocked (stuff that otherwise just gets analyzed by DeepScreen and is found clean and automatically excluded). Moderate mode will ALWAYS block such events without even bother with analyzing what the file really is. I also had some problems with one game on Steam which refused to work even though i excluded it (and still had Hardened Mode set to Moderate). But then i switched to Aggressive and all the stuff that got blocked by Moderate now worked perfectly fine. It only blocked stuff that hasn't got whitelisted yet (some very new app that just got released and had no digital signature). But it got whitelisted very quickly, i think it took like 1 or 2 days.

    Also as another test, i have setup my sisters laptop with avast! 2014 to Hardened Mode (Aggressive) since the avast! 2014 BETA test and locked the whole program with password and since then till now, she never complained over anything getting blocked. Meaning it's working without any issues. But she's not a heavy downloader of apps and drivers, she only installs certain apps to work with photos and hangs on social networks a lot. I've used CIS before on her system and it wasn't as silent and transparent as avast! though. Not that it was constantly blocking stuff but i did get 2 complaints from her about CIS blocking something...
     
  3. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    Thanks, buddy! :thumb:
    "Basically, in a nut shell, Moderate mode is actually more aggressive than the actual Aggressive mode."

    See....that is very confusing....:D
    OK...I'll switch to Aggressive mode later today....
     
  4. RejZoR

    RejZoR Lurker

    Joined:
    May 31, 2004
    Posts:
    6,426
    I've used Aggressive mode for a while and considering how often i download new drivers and install new apps, it was very silent. I did get few blocking popups, but i expected a lot more considering my constant activity not exactly common to casual users. So for them, Aggressive Mode should hardly ever block anything other than actual malware for those users.

    Granted, CIS and avas! in Hardened Mode (Aggressive) do work in a similar way, both using whitelisting, but CIS seems to be more permissive locally by allowing to run stuff that's not whitelisted in virtual environment, but doesn't seem to have as extensive whitelisting database as avast! for some reason (even though it exists a lot longer). Where avast! only knows allow or block based on whitelist, the whitelist seems to be more extensive. Not sure how they do it, but apparently they have a more efficient way of doing it, if they manage to be more effective in a shorter time of existence than CIS did/is.
     
  5. innerpeace

    innerpeace Registered Member

    Joined:
    Jan 15, 2007
    Posts:
    2,121
    Location:
    Mountaineer Country
    Wow! Thanks for all your input. It should make my decision easier. All of the mentioned products seem great and they do well on tests.

    Drew said Bitdefender free can't be configured to ask what to do when something is detected. Can someone confirm this? What about Avast?
     
  6. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    From my experience:
    1) You can not configure actions in BD Free
    2) You can configure them in avast
    ;)
     
  7. Two questions

    @Innerpeace,

    You will be setting up as limited user, meaning she will probably won't install software herself. Is that a correct assumption?


    @Rezjor
    I thought Avast in hardened mode throws a pop-up at the user when something is blocked with the option to allow. Is it possible to change this pop-up to allways deny? IMO implementing a whitelist without a default deny (or default auto-sandbox) kind of defeats the purpose to develop it for security illiterates.
     
  8. innerpeace

    innerpeace Registered Member

    Joined:
    Jan 15, 2007
    Posts:
    2,121
    Location:
    Mountaineer Country
    Thank you siketa :thumb:.
     
  9. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    NP, buddy! :)
     
  10. innerpeace

    innerpeace Registered Member

    Joined:
    Jan 15, 2007
    Posts:
    2,121
    Location:
    Mountaineer Country
    I will set her up with a lua for daily use. If she would install software it would be rare. She lives nearby so I can help with installs and updates.

    Am I right in thinking that I shouldn't need to use the admin account unless I'm installing security software? That is what I have been doing on this machine. I've been meaning to ask. There have been a couple of instances on my machine where I needed to run an installer as admin for it to work correctly.
     
  11. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    There is a link for File Exclusion (auto-allow) at the bottom of a popup but not for auto-deny.
    Also, no custom settings are currently available for Hardened mode.
    Let's hope they will include them in future versions.
     
  12. Disney

    Disney Registered Member

    Joined:
    Oct 15, 2012
    Posts:
    131
    Location:
    USA
    Is there really any question here ? Not a big fan of Avast but , their free version is very good for what you are looking for .
     
  13. RejZoR

    RejZoR Lurker

    Joined:
    May 31, 2004
    Posts:
    6,426
    Why would you need a deny button on a popup that already denied the activity? The button for exclusion can be blocked by password protection.
     
  14. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    I was just replying to Kees.
    Guess he has his own reason to ask for it.
    :doubt:
     
  15. No you would not need a deny button, you would not want to show an allow button for novice users when hardened mode was intended for users who could not be trusted to make their own decisions (at least this is how they advertise it). When the button for exclusion can be locked with password protection it would serve that purpose (of a deny by default without user overrule).

    I still would prefer the auto-sandbox option of CIS though using this setup (strictly controlling what publishers are allowed to update) https://www.wilderssecurity.com/showthread.php?t=339661 This would also take away the need to run as LUA.
     
    Last edited by a moderator: Nov 26, 2013
  16. :argh: Rezjor is a polymorphic wolf in sheeps clothes when it comes to defending Avast :D
     
  17. trjam

    trjam Registered Member

    Joined:
    Aug 18, 2006
    Posts:
    9,102
    Location:
    North Carolina USA
    do your Mom a favor and get that Eset Black Friday deal, set it up and forget it. She will love her little boy for a very long time.:rolleyes:
     
  18. Legendkiller

    Legendkiller Registered Member

    Joined:
    Jun 29, 2006
    Posts:
    1,053
    that's a big lol comment for me. Avast free = a full-blown security suite?:eek:

    I personally do not find comodo making too much noice, in fact very little.

    Avast is having False-positives problems and i had a experience of it blocking panda cloud av .

    With hardened mode god knows what will happen.
    **********************************************************************************************************************

    To Topic Maker,
    Previous 2 versions, 7&8, were a complete disaster as far as stability was concerned and every 15 days a new build came to fix "BSOD" issue. I personally couldn't even complete the installation process, while other security software worked flawlessly.

    Version-9 is stable but one has to keep in mind that until quite recently, avast had lagged behind in tests from it's previous scores and other free alternatives.

    I suggest you to try AVG Free or Avira based on your taste.
     
    Last edited: Nov 27, 2013
  19. Austerity

    Austerity Registered Member

    Joined:
    Jun 21, 2013
    Posts:
    372
    Location:
    Georgia / USA
    I would highly recommend WRSA. If you must have a free solution (I just bought another year of WRSA on 3pc's for $4.99) - then I would recommend Avira or Avast. I think with a few tweaks that Avira will be quieter.
     
  20. The Hammer

    The Hammer Registered Member

    Joined:
    May 12, 2005
    Posts:
    5,751
    Location:
    Toronto Canada
    Panda Cloud is not meant to be used with another Av so You should not be surprised Avast blocked it..
     
  21. ginzon

    ginzon Registered Member

    Joined:
    Sep 6, 2009
    Posts:
    80
    Use Panda Cloud Free else Avira else Avast else MSE...
     
  22. Legendkiller

    Legendkiller Registered Member

    Joined:
    Jun 29, 2006
    Posts:
    1,053
    it flagged it as a possible malware dude, not as un-compatible software:D
     
  23. Lucy

    Lucy Registered Member

    Joined:
    Apr 25, 2006
    Posts:
    401
    Location:
    France
    With Win 7 64 set up with a limited user account, Microsoft security essentials IS the way to go.
    It really is good enough with the least false positive risk associated, and a good enough detection rate for the most common threat found in the wild.
     
  24. Dundertaker

    Dundertaker Registered Member

    Joined:
    Oct 17, 2009
    Posts:
    385
    Location:
    Land of the Mer Lion
    I'd go with the guys who recommended Avira Free/Avast Free :)
     
  25. With LUA the risk of installing something nasty and risk of false positives is minimal. I would opt for an AV that:

    - is available in Mom's native language (Mountaineering Country :D )
    - does well against webbased, USB, mail and social engineering threats

    Bitdefender is top notch, but its cloud based free version has mixed reviews here on Wilders (and only Available in two languages). I have tried Ad-Aware (with Bitdefender engine). For OEM-BD engines applies the same they seem to have lower scores as the real thing.

    When you collect leading available tests the ones really doing well on the aspects mentioned are in order of results:

    1. Panda
    2. Avast
    3. Fortinet (is less tested as Avast, also scoring often better as Avast)
    4. Avira (is less tested of all, also scoring often better as Avast)

    Pick any of those and she will be fine
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.