Battle Can you help me to choose a good behavioral blocker?

[WinAndLinuxTutorials]

Welcome!
I want you to help me choose a good behavioral blocker.
Thanks

 

[Deleted member 178]

you have only 2 in the market :

Emsisoft Mamutu : the best for me, with cloud feature. this is the standalone, but it is included in EAM

Threatfire: reputed to be a resource hog, dont know for the latest release.

 

[win7holic]

I will choose Mamutu.
Good behavior blocker at the moment.
but, mamutu not free.

 

[jamescv7]

Most of the modern AV's it was bundled with Behavior Blocker, however only two products exist to be two standalone Behavior Blocker. Mamutu and Threatfire.

Like umbrapolaris said, isn't sure when a latest version of threatfire release as its barely to be updated.

 

[darkelixa]

Almost all avs have behaviour blockers

 

[WinAndLinuxTutorials]

MrXidus's Test proves that both are good, but when he was testing threatfire, the CPU usage stuck at 100%! And no one knows about the performance of the latest version. But why these are the standalone behavioral blockers available currently???

---

Almost all avs have behaviour blockers

Many of the antivirus programs have, but MSE and Avira don't have one.

 

[Ink]

Microsoft Security Essentials 2.1 does have behaviour monitoring.

• http://www.winmatrix.com/forums/index.php?/topic/32352-mse-21-detects-uac-killing-malware-via-behavior-monitoring/]MSE 2.1 detects UAC-Killing Malware via Behavior Monitoring

 

[WinAndLinuxTutorials]

Microsoft Security Essentials 2.1 does have behaviour monitoring.

• http://www.winmatrix.com/forums/index.php?/topic/32352-mse-21-detects-uac-killing-malware-via-behavior-monitoring/]MSE 2.1 detects UAC-Killing Malware via Behavior Monitoring

Do you mean that UAC is a behavioral blocker?

 

[Ink]

Simple answer, no.

Recommended:
http://malwaretips.com/Thread-Emsisoft-Mamutu-vs-PC-Tools-ThreatFire

 

[Deleted member 178]

not at all, it work "more" like an anti-executable (if set at max)

 

[WinAndLinuxTutorials]

not at all, it work "more" like an anti-executable (if set at max)

So Microsoft introduced a new anti-executable

 

[Deleted member 178]

we can grossly say that

 

[WinAndLinuxTutorials]

Currently, I am using Avira Free 2012. Do you think that a behavioral blocker conflicts with it?

 

[Deleted member 178]

you can use a BB with Avira free (only the premium and suite has a proactive component)

 

[WinAndLinuxTutorials]

we can grossly say that

UAC blocked ntoskrnl.exe and hal.dll present in the system32 folder because they are malicious files created by Microsoft Corporation

 

[Ink]

*facepalm*

You might want to read up on what UAC actually does for/in Windows Vista/7.

---

There shouldn't be any conflicts, since Avira Free has no Behavioural monitoring/blocking. So which one are you looking to install?

 

[WinAndLinuxTutorials]

There shouldn't be any conflicts, since Avira Free has no Behavioural monitoring/blocking. So which one are you looking to install?

Now testing Threatfire in VMware

 

[Deleted member 178]

UAC blocked ntoskrnl.exe and hal.dll present in the system32 folder because they are malicious files created by Microsoft Corporation

UAC set at max prevent anything that can modify your system and windows settings.

threatfire is free so actually he has not the choice