Winsonar 2010 9.01.03 Released

Discussion in 'other anti-malware software' started by Reimer, Nov 7, 2009.

Thread Status:
Not open for further replies.
  1. Reimer

    Reimer Registered Member

    Joined:
    Apr 6, 2008
    Posts:
    217
    http://www.fewbyte.com/winsonar.html


    It seems FewByte has taken over the Winsonar project. Thought there would be some users here who would be interested.

    I've tried the 2008 version before and it wasn't bad but I figured I could just use SRP. What does everyone else think?
     
  2. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    thanks alot,:) winsonar 2010 cool:thumb: yay finally:)
     
  3. acr1965

    acr1965 Registered Member

    Joined:
    Oct 12, 2006
    Posts:
    4,954
    Looks interesting, thanks for the info. One concern from the WinSonar description page-

    "From version 7.xx an automatic "learning "feature is present: on first 5 program-startup all unknown programs will be accepted as safe, avoiding several initial alerts by Winsonar for all the programs normally in use during work sessions."

    Is that such a great idea? Comments? I suspect you could just make the first 5 start up programs safe if you wanted to without having them made safe automatically. Doesn't rogue programs try to load early? Maybe it's not a substantial issue, I am just wondering.
     
  4. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    3,731
    Location:
    New York City
    I believe this means the first five times Winsonar is run.
     
  5. acr1965

    acr1965 Registered Member

    Joined:
    Oct 12, 2006
    Posts:
    4,954
    I see. Thanks.
     
  6. MICRO

    MICRO Registered Member

    Joined:
    Jun 8, 2004
    Posts:
    1,020
    Jmonge - If you installed it already can you say if it's any quicker at notifying
    re. something trying to access whatever on your machine ?

    I have to laugh at how long the 2008 version takes to notify that
    whatever it might be wants access, whereas the little PE Guard App.
    is instantaneous - Maybe slightly different jobs they do so I shall continue
    to run both.
    Hope you can mention if it runs well, then I can switch to the 2010.
     
  7. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    i will try it as soon as posible:thumb:
     
  8. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    just install it and it is fast at notifying:thumb:
     
  9. Dark Star 72

    Dark Star 72 Registered Member

    Joined:
    May 27, 2007
    Posts:
    703
    Does it need a reboot to install it?
     
  10. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    no at all:D
     
  11. Dark Star 72

    Dark Star 72 Registered Member

    Joined:
    May 27, 2007
    Posts:
    703
    Thanks for that, will have a play under Deep Freeze.
     
  12. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    cool:D it looks same thing to tell you nothing impresive added:)
     
  13. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    just tested drivesentry and winsonar 2010 and this two has alot of work to do "not impress":D
     
  14. Night_Raven

    Night_Raven Registered Member

    Joined:
    Apr 2, 2006
    Posts:
    388
    Is it just me or does the default installation path lead to Local Settings\Application Data?
    Is it a new fad to install programs there instead of Program Files? :D
     
  15. MICRO

    MICRO Registered Member

    Joined:
    Jun 8, 2004
    Posts:
    1,020
    The time diff. has slowed my reply, thanks very much Jmonge - Looks like
    I shall switch over because you don't refer to anything as being untoward
    with the 2010 even though someone else took it over or whatever.
     
  16. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    i think it is same developer with a new page change:)
     
  17. Fuzzfas

    Fuzzfas Registered Member

    Joined:
    Jun 24, 2007
    Posts:
    2,753
    Does any of you guys wants to run system shut down simulator against WinSonar?

    http://zeroday-software.110mb.com/

    Maybe i 've always done something wrong, but i tried it again under shadow defender and as always it put Win7 to sleep (i presume this has to do with not having Win7 compatibility).

    Just put Winsonar to its active mode (not learning) unzip the SSS , run it and click "shutdown computer". To me it has put Win7 to sleep after showing me "log off".

    The problem, if confirmed by you, is that Winsonar is a poller, it doesn't hook to intercept. So any malware that runs "fast" and falls between the polling time, will always bypass WinSonar. It's a bit like WinPatrol. I don't remember how many times with WinPatrol Plus active, i have managed to install Comodo, restart and WinPatrol only alerted me of the new startup key, AFTER i had rebooted. Because it's a poller too, even in the plus version. It just polls "very quickly".

    WinSonar is fine for less elaborate malware that runs and then stays running. Eventually the polling will get it.

    My other problem with it, is that uses too much CPU to do a quite simple job. But polling programs usually use more CPU than the ones with hooks.
     
  18. Windchild

    Windchild Registered Member

    Joined:
    Jun 16, 2009
    Posts:
    571
    I think any "security software" that polls for running processes instead of intercepting process creation is only providing a false sense of security. If a malicious process is allowed to execute, what is stopping it from just killing the polling "security software" before it can do anything, or doing other, still worse damage like replacing system files with trojaned versions? I don't think anyone should use software like this, except perhaps for just playing around when there's nothing more interesting to do. Now, I haven't even touched Winsonar so I wouldn't know if it's simply polling for running processes instead of intercepting their creation, but from what their site says it sure sounds like it's just polling. Bad, bad.

    Unless the malware just kills Winsonar, in which case... But then, malware is less likely to target something that is obscure and not widely used, so Winsonar may work against a lot of malware simply because malware doesn't bother to kill it.
     
  19. Fuzzfas

    Fuzzfas Registered Member

    Joined:
    Jun 24, 2007
    Posts:
    2,753
    I agree. In fact in my case, although it was under Shadow Defender, so there might be a problem there or in the fact that i couldn't reboot, the sss.exe could have killed winsonar too (unless it has some protection).

    Well, when you install it, there is an option checked "scan ever 6 seconds" (default is 6). There is also a progress bar which is "filled up" every 6 seconds. Even the GUI seems to be refreshing itself in that period (blinking). So i take that as a poller.

    For XP, if i wanted a simple anti-executable i would prefer Process Guard Free hands down. It also eats way less CPU.

    But for Vista or 7...
     
  20. Fuzzfas

    Fuzzfas Registered Member

    Joined:
    Jun 24, 2007
    Posts:
    2,753
    The other thing that i don't like is that once you activate the guard, you don't get a pop up with an option to allow a new executable. You must manually open the GUI and put learning mode. Otherwise it just kills the exe and you get a baloon notification about it. And if it's a process that keeps trying and trying (i had a windows delayed process doing this), you get a gazilion of baloons which almost impede you from opening the GUI to allow it.

    For me this is very "old" HIPS technology. Even the "dead" HIPS like PG and SSM are light years ahead it usability, resource usage and protection.

    Plus i find the GUI really ugly. It's like a windows 98 primitve game in colours (submarine game? :) ).
     
  21. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
     
  22. inka

    inka Registered Member

    Joined:
    Oct 21, 2009
    Posts:
    406
    Amen.

    Out of curiosity, I did check out the 2010 version of the app, though.
    Beyond useless (for my needs), I found it to be quite BUGGY -- interface glitches; context menu orphaned & continually displayed onscreen; rules established during learning mode NOT respected later, in normal mode. The most ridiculous, and immediately intolerable, behavior it presented was this: clicking "Offline Shield" while the sonar app was running in "normal mode" immediately (repeatable) killed the running TextPad instance that I was using to take notes.
     
  23. MICRO

    MICRO Registered Member

    Joined:
    Jun 8, 2004
    Posts:
    1,020
    I too got balloons in the new version until I used 'Advanced Options' and
    it's 'Trust Installed Software on my PC', then they stopped.
     
  24. Toby75

    Toby75 Registered Member

    Joined:
    Mar 10, 2006
    Posts:
    480
    So then it's decisive? It's a poller type software?
     
  25. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    it is like anti-executable;)
     
Loading...
Thread Status:
Not open for further replies.