Battle NVT OSArmor Or SecureAPlus

[Question]

Which is better for me?
Im a Gamer and I want a light and good AntiVirus

 

[Hector1]

You are comparing very different things!

 

[shmu26]

You are looking for an antivirus. Therefore, you must choose SecureAPlus.
OSArmor is not an antivirus.

 

[yitworths]

both are living happily together

Sounds like a happy family...

 

[yitworths]

You are looking for an antivirus. Therefore, you must choose SecureAPlus.
OSArmor is not an antivirus.

I once used secureplus & it looked more like an anti-exe than AV or anti-malware. Yea it does make use of several av engines when connected to internet but otherwise when offline it uses clam-av. Do you think that's reliable? Tbh, if OP is looking for an av or anti-malware, he/she should look for other options. & os armor can be use alongside almost any security programs with little bit of tinkering.

 

[Arequire]

when offline it uses clam-av. Do you think that's reliable?

Ultimately the offline AV isn't all that relevant as the anti-exe portion is always running regardless of whether you're online or offline. Most AVs that don't have a signature for a piece of malware will let it run unrestricted anyway (being reliant on a hit-or-miss behaviour blocker for detection) so it offers far stronger protection than a traditional AV that's used alone.

@Question If you can stomach the fact that by using SecureAPlus you'll receive a notification asking you to allow/block the execution of each new game you attempt to play then it's well worth using. If not then I'd suggest using a traditional AV.

 

[Deleted member 65228]

I think SecureAPlus given what you're after.

However, if you can handle setting the configuration and managing it, OSArmor is a nice piece of software and owned by someone who actually knows what they are doing, so chances of you going wrong with NVT is... low. Even if you run into a barrier, the developer is always energetic to fix bugs ASAP.

 

[yitworths]

Ultimately the offline AV isn't all that relevant

That's why I ain't considering it as av or am. OP actually asks for a good av. That's why I suggest him/her to look for something else.

Most AVs that don't have a signature for a piece of malware will let it run unrestricted anyway

there is a feature namely BB or system watcher.

it offers far stronger protection than a traditional AV that's used alone

SAP uses so-called traditional av to scan exe. I've encountered many malwares which are based on script such as .vbs. Dunno whether anti-exe works against such things. A good BB will block that kinda infection for sure.

SAP is good but there are wide range of attacks & I'm not sure whether SAP will be able to block most of them. SAP should be used as a sidekick.

 

[Arequire]

there is a feature namely BB or system watcher.

(being reliant on a hit-or-miss behaviour blocker for detection)

I've encountered many malwares which are based on script such as .vbs. Dunno whether anti-exe works against such things.

It does:
Fileless Malware Protection | SecureAPlus

 

[yitworths]

It does:
Fileless Malware Protection | SecureAPlus

Fileless malware is oldschool. It actually resides on ram. All this kinda malware was used by govt. agency. & what I'm saying is script base malware which will get triggered by certain portion of code... the trick is called code obfuscation where actual malicious code is actually at the end. The malware gets installed at last stage... It's not very normal kinda attack

 

[Arequire]

Fileless malware is oldschool. It actually resides on ram. All this kinda malware was used by govt. agency. & what I'm saying is script base malware which will get triggered by certain portion of code... the trick is called code obfuscation where actual malicious code is actually at the end. The malware gets installed at last stage... It's not very normal kinda attack

It's labelled poorly. It actually refers to the use of things like powershell, wscript, etc.

 

[yitworths]

It's labelled poorly. It actually refers to the use of things like powershell, wscript, etc.

elaborate it... like to hear more

 

[Arequire]

elaborate it... like to hear more

Essentially it applies anti-exe to a list of Windows processes used by malware. If a parent process not on the whitelist triggers one of said vulnerable processes it will throw up a prompt asking you to continue blocking or unblock it.

Here's two screenshots. One of the prompt of a vbs sample being blocked and one showing a prompt from the fileless malware protection:

 

[yitworths]

Essentially it applies anti-exe to a list of Windows processes used by malware. If a parent process not on the whitelist triggers one of said vulnerable processes it will throw up a prompt asking you to continue blocking or unblock it.

Here's two screenshots. One of the prompt of a vbs sample being blocked and one showing a prompt from the fileless malware protection:
View attachment 191439 View attachment 191441

command line blacklistings will mitigate this kinda attack upto an extent. but just powershell blockade won't be enough. .vbe or .vbs may act on its own with several .bat files to install malware or infect certain programs & then through those programs they start to infect or install payloads. It's just another domain of infection. btw, powershell disable is good practice & many malware devs do know that they won't solely rely upon powershell. They use code obfuscation so that av-engine can't detect the actual process or code which is meant to run through it.

 

[shmu26]

I once used secureplus & it looked more like an anti-exe than AV or anti-malware. Yea it does make use of several av engines when connected to internet but otherwise when offline it uses clam-av. Do you think that's reliable? Tbh, if OP is looking for an av or anti-malware, he/she should look for other options. & os armor can be use alongside almost any security programs with little bit of tinkering.

I am not impressed by the AV of SecureAPlus.
After a while, I realized that the OP is probably calling all security software by the name of "antivirus", so my answer missed the point.
Nevertheless, SAP has more features by default and OSA has by default, so SAP is probably still the better choice.