Battle A lightweight Antivirus for running beside to Voodooshield?

[Nagisa]

I'm normally using KSC but today I installed voodooshield free, and I liked this product. I think I may select a ligther combo now.


The most important thing is the product should be free of any serious exploit. I wouldn't want to let to malware run something at a kernel level.

 

[Arequire]

I'd suggest Immunet Immunet AntiVirus
Why?
First, it's very light (if you set it correctly).
Second, Cisco is not on VirusTotal, so it will give you a plus over Voodoo Shield

Third, it includes a dedicated anti-exploit module and in-memory process protection, neither of which VoodooShield protects against.

 

[blueblackwow65]

NAV

 

[oldschool]

Third, it includes a dedicated anti-exploit module and in-memory process protection, neither of which VoodooShield protects against.

Good point to add with @imuade @Nestor Immunet suggestions.

 

[AtlBo]

KSC sounds like a great option, but I can't say. Never have taken the leap into Kaspersky.

Using F-C with the hardening tweaks. The web filtering is something I wouldn't want to be without anymore. For me, that's enough, but signature-wise, it's amazing too. It's a matched pair for Comodo firewall. This combination for home (without the F-C hardware) is probably about as close to the actual FortiClient endpoint system as is possible. The endpoint system uses the network level hardware firewall and sandbox.

KSC will give you the rollback protection and I believe it has good web filtering too. I can see why that would be a great choice with VoodooShield.

 

[Ink]

hardened windows defender

Can you explain this further?

 

[spaceoctopus]

ESET NOD32 antivirus + voodooshield.

 

[stefanos]

Good point to add with @imuade @Nestor Immunet suggestions.

long away from this antivirus. Is useless. I tested immunet with one virus one week old from malcode database the 1 exe. Detected from immunet, write alert virus carantined but the pc infected. Every 10 seconds alert from immunet the 1exe try to conect to internet. Hitman pro found the infection and my laptop cleaned. I tested the same virus with Avast , Avira free, 360TS, Panda free and bloked from all. Another one test with immunet with the same virus and other two old virus again infected.

 

[inuyasha]

Can you explain this further?

ConfigureDefender is used to harden WD. It's a program by Andy Ful. It's also included in Hard_Configurator

 

[stefanos]

ConfigureDefender is used to harden WD. It's a program by Andy Ful. It's also included in Hard_Configurator

Read it pleace.

GitHub - AndyFul/Hard_Configurator: GUI to Manage Software Restriction Policies and harden Windows Home OS

GUI to Manage Software Restriction Policies and harden Windows Home OS - AndyFul/Hard_Configurator

github.com

 

[oldschool]

long away from this antivirus. Is useless. I tested immunet with one virus one week old from malcode database the 1 exe. Detected from immunet, write alert virus carantined but the pc infected. Every 10 seconds alert from immunet the 1exe try to conect to internet. Hitman pro found the infection and my laptop cleaned. I tested the same virus with Avast , Avira free, 360TS, Panda free and bloked from all. Another one test with immunet with the same virus and other two old virus again infected.

Good to know because I had no prior experience with Immunet.

 

[imuade]

long away from this antivirus. Is useless. I tested immunet with one virus one week old from malcode database the 1 exe. Detected from immunet, write alert virus carantined but the pc infected. Every 10 seconds alert from immunet the 1exe try to conect to internet. Hitman pro found the infection and my laptop cleaned. I tested the same virus with Avast , Avira free, 360TS, Panda free and bloked from all. Another one test with immunet with the same virus and other two old virus again infected.

Strange, Cisco Talos recognizes it as malicious since Feb. 27th
SHA256
8B33C39A0C46DFEDF9B7D22D7FF0BA9BBD37F8AD66BEEDEF21089A038A0DC463

Talos File Reputation Lookup || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence

Use Talos' File Reputation lookup to find the reputation, file name, weighted reputation score, and detection information available for a given SHA256.

www.talosintelligence.com

 

[stefanos]

Strange, Cisco Talos recognizes it as malicious since Feb. 27th

Talos File Reputation Lookup || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence

Use Talos' File Reputation lookup to find the reputation, file name, weighted reputation score, and detection information available for a given SHA256.

www.talosintelligence.com

And??

 

[imuade]

And??

Immunet gets its information from Cisco Talos repository, so it should quarantine it

 

[stefanos]

Strange, Cisco Talos recognizes it as malicious since Feb. 27th

Talos File Reputation Lookup || Cisco Talos Intelligence Group - Comprehensive Threat Intelligence

Use Talos' File Reputation lookup to find the reputation, file name, weighted reputation score, and detection information available for a given SHA256.

www.talosintelligence.com

My English is not good. But i tell you the immunet found the file is virus. Write me message the Virus quarantined. but the system was infected. Is not the first time to see this with immunet.

 

[stefanos]

Immunet can t isolate the virus.

 

[imuade]

My English is not good. But i tell you the immunet found the file is virus. Write me message the Virus quarantined. but the system was infected. Is not the first time to see this with immunet.

Ah ok sorry, I missed that part.
Did you check if 1.exe was active in memory (for example by sysinternals) ?

EDIT
Was "Blocking mode" enabled or disabled?

 

[stefanos]

Enabled .And registry protection enabled and this give me the alerts every 10 sec the 1exe try to conect. Yes active one memory

 

[imuade]

Enabled .And registry protection enabled and this give me the alerts every 10 sec the 1exe try to conect. Yes active one memory

Ok thanks for the answer. Then it's indeed an issue

 

[stefanos]

Enabled .And registry protection enabled and this give me the alerts every 10 sec the 1exe try to conect. Yes active one memory

Realy is the only antivirus it can infected from malcode database. Many times i test it because i like the light protections

 

[stefanos]

Ok thanks for the answer. Then it's indeed an issue

Yes it is. Because i execute the virus and immunet give me alert virus detected and quarantined. But the virus run on system. I had see this and before 6 months again. If you search to immunetcommunity you will see comments with the same problem.