Battle KES 10 v/s WD + WFW + VS (Scan & Allow Mode)

[Deleted member 2913]

On my Win 10 64...its a shared family laptop...currently I am running Kaspersky Endpoint Security 10.

I am thinking of uninstalling KES... And running Windows Defender + Windows FW + Voodoo Shield (Scan & Allow Mode)

Comparing for Protection (excluding Web protection i.e Malicious URL/Anti-Phishing) & Usability.

What you guys say?

KES v/s WD + WFW + VS (Scan & Allow Mode)

Win 10 64

For comparison, here are the details of both (Plzz check the comparison details below & especially read Voodoo Shield "Scan & Allow Mode" info)

Kaspersky Endpoint Security 10
Anti-Malware
Firewall
Network Attack Blocker
System Watcher
Application Control

Windows Defender + Windows Firewall + Voodoo Shield (Scan & Allow Mode)
Anti-Malware
Firewall
Scan & Allow Mode (Voodoo Shield)

In Scan & Allow Mode...Voodoo Shield automatically allows programs not detected as threats by any of the 57 engines. Programs detected as threats by any of the 57 engines gives alert. Programs not found in the 57 engines databases or programs unknown to 57 engines gives alert.

Plzz choose 1, Plzz Vote, mention the Voted setup in your post & mention Why you Voted for the setup?

IMPORTANT - I have not mentioned Voodoo Shield but Voodoo Shield "Scan & Allow Mode" - This is the Mode I am thinking of running & not the default "Smart Mode" or kinda maximum protection "Always ON". So I have explained Voodoo Shield "Scan & Allow Mode" above for you guys to keep in mind on comparing the setups.

 

[8-Bit Ghetto]

WD + WFW + VS is more superior than Kaspersky.

 

[Alkajak]

WD + WFW + VS is more superior than Kaspersky.

When replying to threads listed in this section of the forums, please ensure you list why you chose your answer. By giving your opinion, it will greatly allow other members and guests to understand the reasoning behind your choice. Any response which does not have it's reasoning/opinion behind, will be deleted and the user notified, so that a new response can be made.

How is it superior?

 

[8-Bit Ghetto]

How is it superior?

VoodooShield is an anti-executable + VirusTotal.com assist. So when you put VoodooShield into lock down mode, any executable applications that are not on VoodooShield whitelist will get your permission to run and they also display VirusTotal.com result as well, so you can make a better decision. In other word, its work similar to NVT EXE Radar Pro, AppGuard, and SecureAPlus.

 

[hjlbx]

VooDooShield in Scan & Allow mode would be fine, except that VS 2 has bugs, and VS 3 has been in development now for over a year - with no end in sight.

 

[Deleted member 2913]

VooDooShield in Scan & Allow mode would be fine, except that VS 2 has bugs, and VS 3 has been in development now for over a year - with no end in sight.

V2 runs fine for me on Win 10 64. Had some prob but guess was due to KES. May be KES put files in restricted. Tried after uninstalling KES & no probs.
V3 beta too runs fine but decided to run V2.

Tried latest 3.10 beta too. I must say they may be taking little time but they do try to improve little but important things too like alert messages, good defaults, etc... This version has VoodooAi. Devs talk very confidently about it. And it does seems good & quick on verdict. Hope a good stable version is not too far.

I have requested safe1st to test Voodoo latest beta to see the effectiveness of VoodooAi. Lets see if he says yes to the request.

 

[_CyberGhosT_]

VooDoo Shield config over Kaspersky any day , lighter on resources and in any mode thats not the off position. Remember even Kaspersky is as only as good as its current sig database, whereas VooDoo does not rely on a data base of sig''s that it must update.
But your comparing an "Anti-Virus" to a "Anti-Exe", which are two dif software classes altogether, as more start to comprehend this difference I think these questions will become less commonplace. PeAcE
PS awesome answers Jamescv7

 

[frogboy]

The second option gets my vote, it is simple to set up and Voodooshield can block like a champ it is a great addition to most systems.

 

[enaph]

If it is shared family laptop then KES should be less confusing for everyday use because it is a easy to configure and maintain.
VS is a very good tool but for a person which have a little bit more knowlege and KES is a "set and forget" app.

 

[Deleted Member 333v73x]

Windows Defender:

• Works at kernel-level
• Knows where files go
• Intergrated into Windows
• Increasing detection ratio
• Cloud features

Windows Firewall:

• Light
• Intergrated into Windows
• Simple and 'set it and forget it'.

Voodoo Shield:

• Blocks all malware/unwanted files
• Pretty much makes you immune to malware

KES on its own is no mach compared to the above.

 

[Butterfly]

• Voodoo Shield:

• Blocks all malware/unwanted files
• Pretty much makes you immune to malware

KES on its own is no mach compared to the above.

Scan & Allow Mode is not immune to malware. It's pretty easy to encrypt some malware and make it fully undetectable on Virustotal which Voodoo Shield uses, Kaspersky actually has a great behavior blocker that can block some of those undetected new malware.

I chose Kaspersky because its far less annoying to deal with, already has awesome signatures and got great proactive defense.

 

[_CyberGhosT_]

@Butterfly
VooDoo Shield has 4 modes not just the one you felt like listing so lets be fair to VooDoo Shield, they are Training, Scan & Allow, Smart, and Always On, it takes about 30min to train and config VooDoo Shield's latest versions (not so frustrating for semi-knowledgeable users).
Smart mode is the default and suggested mode as Dan (Designer/Creator) has stated many times. Always on is comparable to other AV's "Paranoid or Hardened Mode"
Comparing an AV to an Anti-Exe is like comparing A row boat to a Moped, both are modes of transportation but in way dif classes of transportation.
KIS is a AV (Suite) a large one at that, and VooDoo Shield is a Anti-Exe both are agreeably Security minded software, but that's where the similarities end. PeAcE

 

[Butterfly]

@Butterfly
VooDoo Shield has 4 modes not just the one you felt like listing so lets be fair to VooDoo Shield..

All of what you said has nothing to do with the fact that this thread's creator said he wanted to use Scan & Allow Mode and not the other ones, I didn't list it because I "felt" like it, please read the thread fully before coming at me like that. I'm well aware of the differences between AVs and Anti-Exes and only responded to the thread creator's preferences, In my opinion an Anti-Exe can be too troublesome and requires too much effort when you think about the actual probability of catching an infection.

 

[_CyberGhosT_]

@Butterfly
Looks like I should have paid attention better huh

 

[Deleted member 2913]

Scan & Allow Mode is not immune to malware. It's pretty easy to encrypt some malware and make it fully undetectable on Virustotal which Voodoo Shield uses

Latest Beta 3.10 has VoodooAi that gives Verdict Safe, Unsafe & Suspicious on alerts for the files. And VoodooAi seems work good. So this would be helpful on such cases, right?

 

[Butterfly]

Latest Beta 3.10 has VoodooAi that gives Verdict Safe, Unsafe & Suspicious on alerts for the files. And VoodooAi seems work good. So this would be helpful on such cases, right?

Yes, but remember that unlike AV behavior blockers it will not work offline.

Edit: Apparently VoodooAi doesn't work realtime so it will actually not be helpful on such cases unless you scan every file before you open it...

 

[_CyberGhosT_]

Correct Yesnoo, but like Butterfly says offline will cause issues.
I love having it on my desktop for simple Drag-n-Drop scanning, if you have seen any of my screen shots it sits on the upper left of my screen.
From what I gather VooDooAI is not completed yet as Dan has more file types to add as well as some tweaks.
As long as you have a constant connection to the internet you can mess with it and familiarize yourself with it, it's a handy tool. PeAcE
EDIT: I forgot, Dan has released a version of VooDoo with the AI scanner built in "VooDoo 3.10 Beta" I believe.

 

[Deleted member 2913]

Yes, but remember that unlike AV behavior blockers it will not work offline.

Edit: Apparently VoodooAi doesn't work realtime so it will actually not be helpful on such cases unless you scan every file before you open it...

VoodooAi in Beta 3.10 works realtime. The alerts say calculating & verdict is displayed & its quick in analyzing & giving verdict.

 

[Butterfly]

.

VoodooAi in Beta 3.10 works realtime. The alerts say calculating & verdict is displayed & its quick in analyzing & giving verdict.

Oh that's great that they've added that then, thanks for letting me know.

 

[Soulbound]

Windows Defender:

• Works at kernel-level
• Knows where files go
• Intergrated into Windows
• Increasing detection ratio
• Cloud features

Windows Firewall:

• Light
• Intergrated into Windows
• Simple and 'set it and forget it'.

Voodoo Shield:

• Blocks all malware/unwanted files
• Pretty much makes you immune to malware

KES on its own is no mach compared to the above.

Here's a better match kes plus voodoo. Best of both worlds as long as you configure them properly. Kes has better protection modules than wd.
In terms of performance impact its very minor comparing to wd.
Also you have more customization possibilities running kaspersky