F-Secure 17.5 beta 10 (now with Avira signatures)

[upnorth]

https://malwaretips.com/threads/gandcrab-ransomware-v5-04.87810/#post-774509

Not too shabby so far.

 

[upnorth]

https://malwaretips.com/threads/double-team-04-11-2018.87822/#post-774683

 

[Nightwalker]

Considering that Avira Anti-Malware SDK (SAVAPI) allows access to real-time classification of unknown files using the Avira Protection Cloud and is complemented by the Avira URL Cloud that delivers URL threat classifications, it should be much better than the standard Bitdefender SDK (no cloud) in protection.

Avira NightVision is a very interesting piece of technology and combined with F-Secure behavior blocker (DeepGuard) it has everything to be a superb solution.

More info about Avira SDK (it has a False Positive Control powered by the Cloud):
https://oem.avira.com/resources/datasheet_SAVAPI_EN_20180904.pdf

NightVision:
https://oem.avira.com/resources/whitepaper_NightVision_EN_20180306.pdf


Ps: Maybe its time to Emsisoft changes its engine too, Bitdefender standard SDK isnt cutting anymore ...

 

[upnorth]

Great information @Nightwalker . Much appreciated.

 

[ChemicalB]

Yes I was saying the same, very useful addition thank you very much.

 

[Mariihh]

Ps: Maybe its time to Emsisoft changes its engine too, Bitdefender standard SDK isnt cutting anymore ...

I do not think that emsisoft do the same, I will try to find an article where it says that the value to use the engine of Avira is much more expensive than Bitdefender, and from what I know, F-Secure has much more customers and money to acquire an expensive engine , different from Emsisoft

 

[Lord Ami]

I do not think that emsisoft do the same, I will try to find an article where it says that the value to use the engine of Avira is much more expensive than Bitdefender, and from what I know, F-Secure has much more customers and money to acquire an expensive engine , different from Emsisoft

It may very well be lot more expensive.

Then again, I do not see what is the bigger plan here. I mean, according to all sorts of tests, FS was doing just fine with BD signatures. Perhaps we will soon see new beta for 2019. But knowing FS - they do release small incremental updates as opposed to "our tech for 2019 - better X, improved Y and....". So I guess changing the engine is just one of these improvements to make the product better.

 

[Nightwalker]

I do not think that emsisoft do the same, I will try to find an article where it says that the value to use the engine of Avira is much more expensive than Bitdefender, and from what I know, F-Secure has much more customers and money to acquire an expensive engine , different from Emsisoft

I see, if it is the case it wont be viable from a business perspective.

Anyway I think Bitdefender standard SDK isnt nearly enough in the current malware scenario, maybe Emsisoft can mitigate its limitatitions with an in-house cloud infrastructure.

About F-Secure, this move will help with detection and maybe with False Positives (with the help of Avira cloud).

 

[Deleted member 178]

Anyway I think Bitdefender standard SDK isnt nearly enough in the current malware scenario, maybe Emsisoft can mitigate its limitatitions with an in-house cloud infrastructure.

It is exactly what Emsi own engine is made for, it focuses on new threats, then when the said threats are included in BD engine, they are removed from the Emsi one.

The cloud of emsi is used by the BB.

 

[ForgottenSeer 58943]

I noticed Emsisofts cost of entry has gone way down. They added a 5+5 Device Package. Also they seem to be running some promos and package deals now like the last one on the Shareware On Sale site. Hopefully they will keep this up and it will grow.

BD SDK seems to be falling out of favor lately. I was shocked when Heimdal elected Avira over BD, but now I see FS moving away from BD. Also Untangle may be moving to Avira as well. Watchguard is in the process of moving to Cylance and dropping BD from the looks of it.

 

[Nightwalker]

It is exactly what Emsi own engine is made for, it focuses on new threats, then when the said threats are included in BD engine, they are removed from the Emsi one.

The cloud of emsi is used by the BB.

Yeah, I know, I was a long time Emsisoft user (since 2010).

Emsisoft engine is very effective against PUPs , but it isn't powerful enough to compensate Bitdefender standard SDK in the current malware scenario.

Avira SAVAPI seems to be a better alternative ...

Emsisoft cloud at the moment is more about false positive reduction than protection.

 

[Mahesh Sudula]

The reason F-Secure would transition to Avira's scanner is due to the high false positives of the F-Secure scan technology.

F secure Fp's originate from Deep guard due to rare files and mediocore whitelisting database in cloud. however they have fixed it.
Regarding Avira cloud(APC) - as per the analyst at F secure Labs to whom i send samples frequently at least from his words,
they seem to get a name like excess dependent on Signatures from other AV Vendor at back end whilst fp's are high on side , as known BD against Keygens, Cracks.
So they have moved up with Avira Cloud(APC) to cope up with their cloud along side..however AVIRA is the major part here as F secure
at the early hours not detect much by their own signatures. Good move !

 

[tsunami]

is their web protection/filter their own or do they use 3rd party?

 

[upnorth]

F-Secure SAFE 17.5 stable version will be released in January 2019 and also include the brand new Capricorn ( Avira ) engine. I will update more on this in another thread as soon it happened.

The beta version is still doing remarkable well in the HUB. Thanks for the tests @Lord Ami

 

[ChemicalB]

Thanks @upnorth and @Lord Ami for the tests, waiting for the release and I am sure it will be a good upgrade

 

[Cortex]

Thanks @upnorth and @Lord Ami for the tests, waiting for the release and I am sure it will be a good upgrade

Likewise thank you

 

[Mahesh Sudula]

Seems like AVIRA engine update rolled out officially.
Since morning it was BD SDK..few hrs latter new SDK kicked in.
Version : 17.4

 

[upnorth]

Still don't have it but it's probably close even for me. Thanks for the update.

 

[upnorth]

Capricorn engine installed today on my machine with SAFE stable version 17.4 and now just waiting on the automatic update to version 17.5.

Update - Page 2 - F-Secure Community - 113776

Thanks for the link @Lord Ami

 

[silversurfer]

What's new in F-Secure SAFE for PC/Internet Security - F-Secure Community

What's new in F-Secure SAFE for PC/Internet Security
Version 17.5
Released Jan/2019

Dialog and notification enhancements

• 'Recent events' has a Clear all button.
• The Advanced network protection toast message for potentially unwanted application (riskware) has a Trust button.
• The DeepGuard toast message for potentially unwanted application (riskware) has a Remove button.

Family Rules enhancements

• The main user interface displays a warning if a child's account has administrative rights and parental control/family rules is turned on.
• The Allow/deny web sites feature works for individual web pages; not just web sites.

Product architecture changed

• Instead of three separate modules that combined to make the product, there is now just a single package.
• The product is installed first, and the license is entered/acquired after installation.
• The new architecture makes the installation and updates more reliable.
• Smaller disk space required.
• Reduced the memory footprint (excluding Ultralight processes).

Subscription/licensing subsystem redesign

• A subscription reminder is first shown as a toast message and only closer to expiration date, as a dialog.
• The subscription expiration date is shown in the local timezone with hour accuracy.
• The main user interface has a Manage subscription link, which turns into a Renew link when the subscription is about to expire.
• A subscription update is shown as a toast message with the new end date (if available).
• The subscription status updates faster and in all places of the product at the same time.
• The new virus signature databases are not downloaded when the product has expired.

Other improvements

• When you report a website from the browsing protection block page, the URL is pre-filled in the submit form.
• Support for the Korean language was added.
• The F-Secure Support tool has been improved:
  • The F-Secure Support tool supports high resolution and accessibility features.
  • The F-Secure Support tool uses zlib for compression instead of 7-zip. You can now inspect more easily what has been collected before you send it to F-Secure. This helps with privacy and transparency.

The following features were removed:

• The Installation complete page, as it did not bring additional value.
• A warning indicating the Firewall is off. Windows shows the warning already.
• Browsing time lock mode. Now the whole device is always locked.
• The Installed applications page from Common settings.
• The Subscription keys page from Common settings.