Unmaintained WiseVector Free AI Driven Security

[WiseVector]

Hello everyone,

V2.71 is released!
V2.70 can update to V2.71 directly when "Automatically download and install program updates" is enabled or you can perform an overwrite installation.
V2.67 users please wait for a few days to update to V2.71 automatically, or perform an overwrite installation now.
Thanks for your testing and support! Special thanks to @Andrew3000 @marcopaone @harlan4096 @McMcbrad @pxxb1 @bjm_ for finding some problems.
The download link:

https://update2.wisevector.com/WiseVector_StopX_V27.exe

https://www.wisevector.com/WiseVector_StopX_V27.exe

Update log:

1. Fixed the issue that ransomware rollback may fail to rollback some encrypted files.
2. Redesigned the rollback window, now users can adjust the window size so that they can view the rollback items clearly.
3. Show cleanup progress when users are cleaning a large number of malware.
4. Fixed the issue that the file name may be garbled after restoring from quarantine.
5. Fixed the issue that WiseVector StopX may cause other programs to get stuck.
6. Registry monitoring is more powerful, which can detect more malicious programs that modify the registry.
7. Added backup of php, jsp, asp files for ransomware rollback.
8. Reduced the resource usage.

 

[HarborFront]

Hello everyone,

V2.71 is released!
V2.70 can update to V2.71 directly when "Automatically download and install program updates" is enabled or you can perform an overwrite installation.
V2.67 users please wait for a few days to update to V2.71 automatically, or perform an overwrite installation now.
Thanks for your testing and support! Special thanks to @Andrew3000 @marcopaone @harlan4096 @McMcbrad @pxxb1 @bjm_ for finding some problems.
The download link:

https://update2.wisevector.com/WiseVector_StopX_V27.exe

https://www.wisevector.com/WiseVector_StopX_V27.exe

Update log:

1. Fixed the issue that ransomware rollback may fail to rollback some encrypted files.
2. Redesigned the rollback window, now users can adjust the window size so that they can view the rollback items clearly.
3. Show cleanup progress when users are cleaning a large number of malware.
4. Fixed the issue that the file name may be garbled after restore from quarantine.
5. Fixed the issue that WiseVector StopX may cause other programs to get stuck.
6. Registry monitoring is more powerful, which can detect more malicious programs that modify the registry.
7. Added backup of php, jsp, asp files for ransomware rollback.
8. Reduced the resource usage.

Mine already auto updated

 

[Antimalware18]

So, I've decided to give WiseVector a spin and so far im really enjoying it. I only have one request and I know its kind of pointless, but could we get a detection for the Eicar test file?

 

[WiseVector]

So, I've decided to give WiseVector a spin and so far im really enjoying it. I only have one request and I know its kind of pointless, but could we get a detection for the Eicar test file?

Hi，

Since Eicar test files are not real malware, WVSX will not detect them.

 

[dlr5668]

Installed 2.70 -> Rebooted -> Run full scan -> ExAllocatePool leaking a bit for me (Win 10 x64 latest). PoolMonX was showing over 1GB pool with tag None
2.71 same

2.67 seems stable

 

[porkpiehat]

Mine already auto updated

View attachment 252470

same here.....

 

[Jaspion]

Hi folks, if I can make a point here about the request to make WVSX detect the Eicar file.

It would be pointless.

Because what's the purpose of the Eicar file other than to test if your AV is working? But in this case you would have a signature-based detection, which doesn't help tell you if your AI-driven AV is working -- even if they did detect it, it wouldn't have been the AI.

Just like in any other AV, the Eicar file allows us to test only if the signature-based detection is working, but it tells us nothing about components such as BB, HIPS, AI, etc.

Unless I'm missing some point here.

 

[WiseVector]

Installed 2.70 -> Rebooted -> Run full scan -> ExAllocatePool leaking a bit for me (Win 10 x64 latest). PoolMonX was showing over 1GB pool with tag None
2.71 same

2.67 seems stable

Thanks for your feedback！
We have tested, it couldn't caused by performing full scan only.
Was there any other AV running or other operation while you performed full scan with WVSX?

 

[Anvitius]

Hi! Congratulations to all of us on the new final version! The problems I had on 2.70 beta (namely the short-term hovering of the mouse cursor in different parts of the desktop) have finally disappeared!

 

[blueblackwow65]

Hi looking at the malware testing it seems Wisevector did great but malware stayed in temp folder,maybe have a settting to delete items in temp folder in auto mode or something along those lines.

 

[harlan4096]

@blueblackwow65: you have to understand that it was during a special "Bonus Behaviour Test", this means I disabled real-time protection and run manually all the already detected on demand malware... also the malware that spawned those inactive leftovers in \Local\Temp folder was already detected on demand scanning, so in standard conditions those inactive leftovers will not be spawned there... anyway deleting temporal files from temporal system folders is not the main purpose of an antivirus, and You have features in Windows 10, for example, to do so

 

[blueblackwow65]

No problem I see now ,forget about what i wrote

 

[dlr5668]

Thanks for your feedback！
We have tested, it couldn't caused by performing full scan only.
Was there any other AV running or other operation while you performed full scan with WVSX?

I am running Kaspesky Cloud 21 and Windows firewall Control. Thanks for fast reply. I hope we can fix it

 

[WiseVector]

I am running Kaspesky Cloud 21 and Windows firewall Control. Thanks for fast reply. I hope we can fix it

Thanks a lot for your testing and info! We are going to release V2.72 soon to fix the problem!

 

[marcopaone]

@WiseVector Hi!

I was testing some viruses yesterday and I noticed something strange.
Video.
WiseVector is closed and in notify mode. I started the virus then opened WiseVector and it found the virus and blocked it. I clicked on many notifications and once I was done, part of the virus process remained open. (Apparently that process doesn't look malicious). There is also a.bat file left in the folder created by the virus.
I have written this so that you can understand the problem (assuming it is one), solve it or improve something.
I sent the sample to you privately.
Thanks @Der.Reisende for the sample on the hub.

VIdeo: 2021-01-05 19-49-58_Trim

 

[Gandalf_The_Grey]

@harlan4096 Are you testing the latest version 2.71 now in the HUB?

 

[harlan4096]

Yes! except 1st test I think the rest are all with new 2.71

Update: sorry the 3 1st tests were with 2.70...

 

[porkpiehat]

Hi，

Since Eicar test files are not real malware, WVSX will not detect them.

but, interestingly enough, Didier Stevens has created a PDF file that contains a DOC file that drops the EICAR test file.... and WVSX jumped right on it.

 

[WiseVector]

@WiseVector Hi!

I was testing some viruses yesterday and I noticed something strange.
Video.
WiseVector is closed and in notify mode. I started the virus then opened WiseVector and it found the virus and blocked it. I clicked on many notifications and once I was done, part of the virus process remained open. (Apparently that process doesn't look malicious). There is also a.bat file left in the folder created by the virus.
I have written this so that you can understand the problem (assuming it is one), solve it or improve something.
I sent the sample to you privately.
Thanks @Der.Reisende for the sample on the hub.

VIdeo: 2021-01-05 19-49-58_Trim

Thanks for your testing and video. We will test the sample soon.

 

[tipo]

but, interestingly enough, Didier Stevens has created a PDF file that contains a DOC file that drops the EICAR test file.... and WVSX jumped right on it.

probably the dropper behaviour gets intercepted by wv, not the eicar test itself.