Advanced Plus Security Evjl's Rain's Security Config 2019

[Evjl's Rain]

Have you read the news about SecureAPlus?

SecureAPlus Freemium - Updates

Hi all SecureAPlus 5.3.7 is out now https://secureaplusforum.secureage.com/index.php/topic,445.0.html Here are the details for the changes. Bugs fixed: - Clicked on hold on "Extend Freemium" and "Purchase Premium" will caused the button background turned into transparent. - Hang when...

malwaretips.com

They are making a Lite version that will be free forever and without nags

I used secureAplus in the past and didn't like it for several reasons. It felt kinda slow and buggy
it used Everything search engine for indexing files. When I disabled Everything, SAP stopped working
the scanning speed was super slow and the same for upload speed
there was no way I could disable Application Whitelisting. I don't like whitelisting

The APEX engine was useless at that time. Now it is improved but still can't compete with cylance and WiseVector's engines

I might give it a try but I don't expect much from it
Wisevector and Virustotal might be a better combo

 

[imuade]

I used secureAplus in the past and didn't like it for several reasons. It felt kinda slow and buggy
it used Everything search engine for indexing files. When I disabled Everything, SAP stopped working
the scanning speed was super slow and the same for upload speed
there was no way I could disable Application Whitelisting. I don't like whitelisting

The APEX engine was useless at that time. Now it is improved but still can't compete with cylance and WiseVector's engines

I might give it a try but I don't expect much from it
Wisevector and Virustotal might be a better combo

When I tried it (something like a couple of years ago, before APEX was implemented), I found it very light, but with too many FP.
Once Lite version is launched, I'll give it another try

 

[harlan4096]

APEX still only detects malware in exe files and agree with @Evjl's Rain still is far compared to WV...

 

[imuade]

APEX still only detects malware in exe files and agree with @Evjl's Rain still is far compared to WV...

I think you are right, but SecureAPlus is not just APEX, it also uses application control & whitelisting and a cloud-based multi-engine scanner
If you use them all, you get great results from both users and testing labs

 

[Andy Ful]

I tested Bandizip. It does a good job with transferring MOTW from ZIP archive to compressed EXE files.
Most compressed EXE files will trigger SmartScreen, except when the EXE with MOTW is run indirectly via non-EXE loader, for example:

• shortcut with script interpreter,
• script file (.bat, .vbs, .js)
• document with macro, etc.

any of these also included in the same archive as the EXE payload.

The above methods were already used in the wild. The EXE payload usually has a hidden file attribute or changed file extension. When the EXE payload is in the archive together with non-EXE loader, then the loader does not have to download it from the Internet.