Deprecated WiseVector Free AI Driven Security

[Decopi]

Hi @WiseVector,

I'm still working a lot on WV Firewall, testing and learning how different network rules behave.

Please, I have a question: Is it possible to allow specific process for specific apps or programs? For example SVCHOSTS.EXE, is it possible to allow svchosts only for Windows Update, DNS, Time, Firefox etc? Please how can I do that? Is it possible to be done in one rule, or do I need separated rules for each svchost+program?

Thank you

PS1: After weeks creating/deleting tons of rules, I found bugs, most of them are kind of small and irrelevant bugs, but few of them are freezing WV or crashing WV. I created a kind of report, which includes descriptions and images of the bugs. At the end of my tests I'll share my report with you.through PM.

PS2: Some third-party firewall software nicely separate PRIVACY firewall functions from SECURITY firewall functions. As a suggestion for the future, it'll be nice to see WV firewall:

1. As an independent module, not subordinated/not affected by other WV functions. For example, an "exclusion" should be restricted to AV functions, but not necessarily to firewall functions. This is the case of FPs, users may want to test an exclusion but without internet/network access.

2. WV firewall settings with a new option offering "Maximum Security/Privacy", where "Privacy" will block telemetry and all kind of phoning home (even the safe ones). If an user chooses this option, he can customize internet/network access by creating individual rules. This option of course is not for average users. But an user looking for privacy normally has very few programs needing internet/network access, so if the WV "Maximum Security/Privacy" option exists, then it'll take just 5 minutes to create few rules allowing access to few programs.

 

[ScandinavianFish]

I don't trust this security product , as it's origin is CHINA . CHINA = PRIVACY VIOLATIONS AND UNETHICAL DATA COLLECTION AND SHARING....

The thing is, every country collects sensitive information about their users, its like Kaspersky, if youre not an government official they are simply not interested in you, not to mention the AI of WiseVector is based locally on the system, meaning no internet connection is required for WVSX to work.

The information that an government can get from an AV company isnt anything special, they get even less than what they could get from Social Media, Search Engines, Browser developers, etc.

 

[Petrovic]

I don't trust this security product , as it's origin is CHINA . CHINA = PRIVACY VIOLATIONS AND UNETHICAL DATA COLLECTION AND SHARING....

paranoia?
i`m from Russia => Russia= PRIVACY VIOLATIONS AND UNETHICAL DATA COLLECTION AND SHARING
yep.....

 

[franz]

paranoia?
i`m from Russia => Russia= PRIVACY VIOLATIONS AND UNETHICAL DATA COLLECTION AND SHARING
yep.....

Several Russians collect information about me, but they are my best friends. I can say the same about Chinese too, but they are also my best and closest friends, and family.

 

[Lepefe]

Hello @WiseVector ,

Just FYI, latest WiseVector StopX V3.06 is delaying startup/launching of my programs.
In some cases there is no delay at all, but in other cases the delay is around 2 seconds to 30 seconds.

This is not related to my hardware (I have an octocore processor).
Also, this is not related to wise vector settings (I used default settings).
I downgraded to V3.05 and the delay disappeared.

Hope the info will be useful to you.

 

[ScandinavianFish]

And uh..

I just came back to my computer after eating dinner only to see this and then see it go down to 30 mb after an minute, not sure what cause this.

 

[WiseVector]

How does Network Intrusion Detection and Web Protection work? Because I have found Network Intrusion Detection to block malicious sites even when Web Protection is disabled, though it might just be an bug,

Sorry for the late reply.
It's not a bug. Web protection is signature based, it blocks Browser access to malicious URLs. Network Intrusion Detection is behavior based, it also detects malicious URLs.

Does or will the firewall block external network attacks such as DoS attacks and port scans?

No. Home users are not the target of external network attacks. The Enterprise users need this feature. We will design a product for them respectively.

I saw on an older comment of yours that there are plans to make Behavioral AI available only in the paid version, is it still true or is it because it will be an different componentthan WIBD?

It's not confirmed yet.

For the firewall to be registered in Security Center as an actual third party firewall?

Yes.

Creating AI model(s) for detecting phishing sites or/and Potentially Unwanted Programs?

Phishing sites is not our focus of detection. For different users, the Potentially Unwanted Programs could be totally different.

Adding password/PIN protection for the settings?

I think it's possible.

Make the Rollback feature rollback all changes done by malicious software (i.e created registry keys, start up items, scheduled tasks, system setting changes, etc), as of right now it seems to just restore encrypted files and deleting some remnant files, and ive found it to leave empty autorun items behind.

For saving resources, WVSX only restore the important personal data of users.

You can remove WVSX from running at startup by using Autoruns
You can terminate Wisevector.exe using Process Hacker, to which you can then terminate the WiseVector service (WiseVectorsvc.exe) which wont regenerate

Both of them are trusted tools.

You can disable and even delete the WiseVector Task in Task Scheduler

If it is performed by a malicious APP, WVSX will block it.

 

[WiseVector]

Is it possible to allow specific process for specific apps or programs? For example SVCHOSTS.EXE, is it possible to allow svchosts only for Windows Update, DNS, Time, Firefox etc? Please how can I do that? Is it possible to be done in one rule, or do I need separated rules for each svchost+program?

Sorry for being late.
It's possible. But you need separated rules for each svchost+program, since they have different Command Line and Port.

After weeks creating/deleting tons of rules, I found bugs, most of them are kind of small and irrelevant bugs, but few of them are freezing WV or crashing WV. I created a kind of report, which includes descriptions and images of the bugs. At the end of my tests I'll share my report with you.through PM.

Thanks a lot. Looking forward to your report.

As an independent module, not subordinated/not affected by other WV functions. For example, an "exclusion" should be restricted to AV functions, but not necessarily to firewall functions. This is the case of FPs, users may want to test an exclusion but without internet/network access.

WV firewall settings with a new option offering "Maximum Security/Privacy", where "Privacy" will block telemetry and all kind of phoning home (even the safe ones). If an user chooses this option, he can customize internet/network access by creating individual rules. This option of course is not for average users. But an user looking for privacy normally has very few programs needing internet/network access, so if the WV "Maximum Security/Privacy" option exists, then it'll take just 5 minutes to create few rules allowing access to few programs.

Very good suggestion. I think it can help WVSX to be a more user-friendly product. I have shared it with our team.

 

[WiseVector]

In some cases there is no delay at all, but in other cases the delay is around 2 seconds to 30 seconds.

Hi,
Can you please try to disable "Scan on file creation" to see whether this issue come up again or not? Thanks.

 

[WiseVector]

And uh..
View attachment 266427
I just came back to my computer after eating dinner only to see this and then see it go down to 30 mb after an minute, not sure what cause this.

It's normal if it happens occasionally, if not, it's abnormal.

 

[ScandinavianFish]

Both of them are trusted tools.

That is true, however they have long been known to be abused by bad actors, with Process Hacker being detected by majority of AV engines as an hacktool/riskware, so I figured it was worth mentioning, especially as Process Hacker can be used to kill all of WVSX processes.

 

[Lepefe]

Hi,
Can you please try to disable "Scan on file creation" to see whether this issue come up again or not? Thanks.

No problem with "Scan on file creation", nor with "Scan on file execution", nor with "Scan running processes". The "Enable real-time protection" option is fine, it doesn't matter if it is fully/partially enabled or disabled... the startup delay of apps and programs still is there on WiseVector StopX V3.06.

But I found the problem at "Advanced Protection Settings"... if "Enable advanced malware protection" option is checked, then the startup delay appears... and if it's unchecked, no startup delay on apps and programs.

 

[Decopi]

Please, I have a question: Is it possible to allow specific process for specific apps or programs? For example SVCHOSTS.EXE, is it possible to allow svchosts only for Windows Update, DNS, Time, Firefox etc? Please how can I do that? Is it possible to be done in one rule, or do I need separated rules for each svchost+program?

It's possible. But you need separated rules for each svchost+program, since they have different Command Line and Port.

Please, can you show me how to do that? If it is not too much to ask, please can you give different examples of different svchost rules for different processes? (let's say one svchost rule for Windows Update, another one for Windows Time, another for Windows DNS, and the last example a svchost rule for Firefox or any other browser). I'm sure these examples are going to be very useful for many users, and perhaps you also can add your explanation inside the WV pdf guide/tutorial.
Thank you in advance!

 

[amitkumargiri]

Several Russians collect information about me, but they are my best friends. I can say the same about Chinese too, but they are also my best and closest friends, and family.

Well in our local language there is a famous saying " thief and thief are cousin brothers " ....

 

[franz]

Well in our local language there is a famous saying " thief and thief are cousin brothers " ....

We say, "it runs in the family"

 

[amitkumargiri]

We say, "it runs in the family"

Nearly same , Chinese and Russian apps are nothing but completely spyware

 

[ScandinavianFish]

Nearly same , Chinese and Russian apps are nothing but completely spyware

And US platforms like Facebook, Google, Apple IOS/Mac, Microsoft Windows and Amazon are not? It sounds a lot like you have an very narrow point of view, similar to people who believe in disinformation and conspiracy theories.

 

[franz]

Nearly same , Chinese and Russian apps are nothing but completely spyware

I believe that most countries operate and spy on other countries, and their own citizens. This is part of the game that has been going on for hundreds of years

 

[Harputlu]

Nearly same , Chinese and Russian apps are nothing but completely spyware

how do you know that American antivirus companies are not used for espionage purposes?
i don't trust zonealarm(israel) , Norton(usa), McAfee (usa)

If the antivirus program reads the messages on your computer and looks at the internet history, it already knows everything.
Use open source software. Or try the escan (e-mail address only) antivirus program, which does not save user data in the user agreement.

 

[amitkumargiri]

how do you know that American antivirus companies are not used for espionage purposes?
i don't trust zonealarm(israel) , Norton(usa), McAfee (usa)

If the antivirus program reads the messages on your computer and looks at the internet history, it already knows everything.
Use open source software. Or try the escan (e-mail address only) antivirus program, which does not save user data in the user agreement.

Bro use Linux and technically I don't use antivirus