Combinatie: Avira Free + ThreatFire + Comodo Firewall Pro

Interesant . Dar eu nu folosesc firewall (consider ca pentru 15 forumuri, yoputube,, google, 3 bloguri, cateva siteuri pe care le stiu de ceva timp, si rar site-uri suspecte am nevoie). Daca nu mai gasesc vreo oferta Avira folosesc astea. Plus ca s-ar putea sa i le pun mamei. Produse free ca doar ea nici atat nu umbla pe cine stie ce site-uri.

alexsoad, on Sep 14 2008, 21:00, said:

Cel mai probabil sunt scanari in retea  

Stai linistit ca am mai multe ca tine

Edited by crysty2k5, 14 September 2008 - 20:28.

Observ ca si SuperAnti Spyware are in versiunea Pro, Real-Time Protection!Acest real-time protection are aceeasi functie ca si ThreatFire?Daca da,care dintre cele doua programe ar fi mai bun?

Edited by vidysammy, 17 September 2008 - 13:50.

vidysammy, on Sep 17 2008, 14:49, said:

Nu este acelasi lucru.
Super antispyware pro se bazeaza pe semnaturi pentru protectia in timp real in timp ce Threat-Fire foloseste behavior-blocker.

pykko, on Sep 17 2008, 14:52, said:

Am inteles!Am insa o mica problema cu ThreatFire!Cand e activata protectia, la incarcarea unei pagini pe Internet, mi se blocheaza tot sistemul,pentru o secunda,dupa care isi revine si continua afisarea paginii!De ce oare?Cand ii dau "Suspend" nu am nici o problema!

Edited by vidysammy, 17 September 2008 - 13:58.

Quote

Quote

Se poate sa se raspunda strict la intrebare? Ma intereseaza si pe mine. Vreau opinii pro si/sau contra. Multumesc.

ragaiat, on Sep 17 2008, 14:59, said:

Diferenta dintre cele doua: unu' priveste aplicatia si o analizeaza pe baza de definitiilor (SUPERAntispyware) iar celalalt analizeaza aplicatia dupa modul cum se "misca prin PC", ce fisiere creaza, unde le creaza, etc.(ThreatFire - fara definitii).

SUPERAntispyware cum spune si numele, blockeaza spyware-ul, pe cand ThreatFire poate opri si un trojan, worm, backdoor.

@ vidysammy

ThreatFire scaneaza si comportamentul browserului, nu de multe ori cand deschideam un site, mi-a zis ca Opera are un comportament ciudat.
Adauga browserul la exclusions.

In fereastra programului, la Advanced Tools - > Custom Rule Settings si creezi o regula pentru aplicatia ta

Edited by crysty2k5, 17 September 2008 - 18:16.

crysty2k5, on Sep 17 2008, 19:10, said:

Cum sa procedez mai exact,ca m-am pierdut prin toate etapele acelea?Folosesc in mod special Mozilla Firefox si mai rar IE!

Edited by vidysammy, 17 September 2008 - 18:43.

Gasiti o descriere a ThreatFier aici: http://www.ciprianpo...l-de-antivirus/
Poate va va lamuri mai mult.

vidysammy, on Sep 17 2008, 19:41, said:

Am verificat acum si browserele: Opera, Firefox, IE si programele cunoscute de e-mail sunt puse la exclusions


Probabil sta o secunda din cauza cache-ului sau din faptul ca fisierele din cache sunt scanate

Defense+Security Level din Comodo nu face cam acelasi lucru ca si ThreatFire?

Nu.

ThreatFire are modul de carantina si daca e ceva suspect, stie sa stearga "problema".

Defense+ din Comodo e un HIPS.

ThreatFire e antivirus pe baza de comportament fara definitii

Edited by crysty2k5, 17 October 2008 - 20:22.

Atunci ThreatFire acopera si functiile din Defense+Security Level? Are sens sa mearga in acelasi timp?

Edited by Argv, 17 October 2008 - 20:30.

Nu.



ThreatFire acopera o parte din functiile lipsa din Avira free

Edited by crysty2k5, 17 October 2008 - 21:10.

Am instalat threat fire.Netul parea ca merge mai greu(am citit aici cam care ar fi problema) apoi am vazut o alta problema:am 2 useri pe acelasi pc.Cand am dat switch user sau log off si incercam sa trec pe celalat user abia se misca pc-ul.De intrat la celalalt user intra tot greu(celalalt user fiind cel de pe care nu am instalat programul).Asa ca am renuntat la treatfire.
In loc de treat fire as recomanda

Dynamic Security Agent

DSA is a freeware software that has a stealth mode firewall, Zero-hour anti-virus protection, Zero-hour spyware protection, Zero-hour malware protection, Behavioral hacker protection, Website/IP filtering, Basic Application Security, Process Security, Registry protection, System Anomaly Detection and Email Anomaly Detection. 

DSA doesn't remove malwares, spyware, viruses, worms and Trojans but offers real-time protection. 
What is great about DSA is that it doesn't use much computer resources and RAM like other firewalls with real-time protection. 

DSA is small and simple, it doesn't have log files or an interface for the privatefirewall.
DSA starts off in learning mode for 7 days because you can easily configure your trusted applications. 
DSA will display alerts when application try to connect online, launch or change. 
You will have to allow or block the applications. 

DSA can not protect your computer if you choose to allow malware application to run or connect online. 
DSA has a detailed help file that is easy to understand. Must must un-install any other firewalls before installing DSA. 

Features 
Dynamic Security Agent is a signature-less, anti-malware and desktop defense application comprised of several distinct technology layers designed to block or mitigate the damage caused by intrusion, virus and other malware attacks. DSA features the following layers of defense technology:
- Application Monitor/Manager
- Registry Monitor
- Process Monitor/Manager
- Email Anomaly Analyzer/Manager
- System Anomaly Analyzer

DSA also detects malware and intrusions based on behaviors characteristic of unauthorized system use. Some of these include:
- Attempts to access a protected registry area
- Attempts to access a protected object
- Attempts to Initiate a foreign process
- Attempts to control Windows service
- Attempts to create a DNS request
- Attempts to initiate outgoing TCP traffic

General Capabilities 
DSA’s layered approach to PC and enterprise endpoint defense addresses the Windows vulnerabilities and progressive techniques that hackers exploit to gain unauthorized system access and deliver malicious payloads. DSA provides Application Security by providing detailed alerts for incoming and outgoing application-specific Internet traffic. DSA also models and monitors system behavior to identify and block activity characteristic of known malware, hacking, phishing and other threat types so that personal computer users and IT managers within small, medium or large organizations can more effectively and proactively protect the environments and private data for which they are responsible.

Although DSA will detect, block and quarantine known and new forms of malicious software and other threats, it does not remove the malware. DSA is therefore an ideal complement to conventional virus and spyware scanning software as well as personal and server firewall applications. Neither DSA nor any other single layer of protection should be solely relied on to protect your system. DSA enables you to be aware of the activity on your computer and detects, blocks and alerts you to suspicious activity. These days, what seems normal online (a greeting card, banking site, attachment, etc.) may not be. DSA enables you to be aware, cautious and better protected. 

Windows OS Exploits 
For example, the WMF exploit allows a hacker to gain unauthorized access to your computer. In this scenario, a compromised/attack computer will send you a graphical file with the trusted extension “.wmf”. Internet Explorer will identify this legitimate file extension and will instruct the operating system to process it. Here’s where it all goes wrong. The file will in turn invoke another process, (which typically has an unusual name, i.e. a.exe). DSA will detect and block this “untrusted” process and generate an alert. 

Malware: Virus, Spware, Trojan and Worm Defense 
Viruses, Spyware, Trojans and Worms are all forms of malware that replicate, spread, steal personal information, and inflict damage to computers. DSA detects activity characteristic of malware infection such as attempts to access protected file objects, execution of WinAPI functions, and initiation of unknown processes, among others. Once detected, DSA blocks and quarantines the malware and alerts you of the security incident. 

Rootkit Defense 
By simple definition, a rootkit is a collection of software tools that an intruder can install on a computer to execute whatever criminal activity they have in mind. Rootkits are a particularly tricky form of malware to detect and defend against, as they are nearly invisible to most types of systems monitoring software. They allow an attacker to execute malicious programs invisibly as the rootkit is able to conceal files, running processes, and/or system data. Rootkits are a growing problem ― According to Microsoft, approximately 20 percent of the malware deleted by its malicious software removal tool are rootkits.
DSA can guard against rootkit-related attacks on a number of levels. DSA can detect when a rootkit is being installed by identifying when a registry key value is being modified. DSA can also detect rootkit activity based on the process, WinAPI call or executable that is launched as an output of the rootkit’s payload.

Hacker Defense 
Hackers are criminals that leverage system vulnerabilities, social engineering, and other techniques to break into computer systems for the purpose of amusement, theft, vandalism, or other crime. DSA prevents hacker attacks by restricting access to unauthorized areas of your computer and controlling the manner in which applications, processes, and other system features operate. In addition, DSA provides additional layers of protection though system and email anomaly detection components that baseline normal computer operation and detect unacceptable deviations from typical use caused by intrusion (hackers) and viruses, spyware and other forms of malware. Hackers and their techniques continually evolve and become more effective at hiding. No security solution provides 100% protection from attacks, but DSA offers unique capabilities focused on deviations of typical behavior and can therefore adapt and evolve along with the threats themselves.

Homepage
Download link

Edited by Nexus11, 24 October 2008 - 23:25.

Exista vreo diferenta intre Dynamic Security Agent si ThreatFire, in general?Daca da, care ar fi aceste diferente?

Edited by vidysammy, 24 October 2008 - 23:53.

vidysammy, on Oct 25 2008, 00:50, said:

Daca citesti mai atent ai sa vezi ca unu doar detecteaza si pune in carantina,pe cand celalalt se ocupa si ca un fel de antivirus (adica mai dezinfecteaza) in rest sunt cam la fel.Treatfire l-am schimbat datorita problemelor care le intampinam cu scanat peste scanat + viteza scazuta la browsing.Asa ca incerc DSA.

Edited by Nexus11, 25 October 2008 - 12:39.

@ Nexus11

Ai testat Threatfire 4 (nou iesit) ?!