Reply to thread

Message

<blockquote data-quote="Penguin" data-source="post: 812717" data-attributes="member: 79476">Thank you for your explanation. Given the case my favorite program is compromised on it&#039;s legit installer, I doubt anything, signature or signatureless will catch it. Maybe an HIPS would block certain actions that infected installer wants to do, but highlight it as malware? Please confirm, I really don&#039;t know.Thank you too for the explanation and for taking the time of sharing the definition for this module. I know it&#039;s not an antivirus, I just meant that the given module + automatic sandbox would leave very few covered areas for signatures. Of course there are others areas CFW wouldn&#039;t protect. Anyways, if such case occurs and somebody needs signatures, he either installs a lot of programs (for which CFW wouldn&#039;t be suitable) or just got unlucky and got hit by some malware like CCleaner case, for which no signature could have helped.Stated this, I still must say I&#039;m not against signatures, I just wouldn&#039;t use them paired with CFW if configured with automatic sandbox. I do used them at Defender with VS and WFC.Thank you for sharing these advice!</blockquote>

[QUOTE="Penguin, post: 812717, member: 79476"] Thank you for your explanation. Given the case my favorite program is compromised on it's legit installer, I doubt anything, signature or signatureless will catch it. Maybe an HIPS would block certain actions that infected installer wants to do, but highlight it as malware? Please confirm, I really don't know. Thank you too for the explanation and for taking the time of sharing the definition for this module. I know it's not an antivirus, I just meant that the given module + automatic sandbox would leave very few covered areas for signatures. Of course there are others areas CFW wouldn't protect. Anyways, if such case occurs and somebody needs signatures, he either installs a lot of programs (for which CFW wouldn't be suitable) or just got unlucky and got hit by some malware like CCleaner case, for which no signature could have helped. Stated this, I still must say I'm not against signatures, I just wouldn't use them paired with CFW if configured with automatic sandbox. I do used them at Defender with VS and WFC. Thank you for sharing these advice! [/QUOTE]

Verification