Avast WEBforum

Other => General Topics => Topic started by: MWassef on July 20, 2008, 09:24:24 PM

Title: ThreatFire, now PC Tools AntiVirus Included
Post by: MWassef on July 20, 2008, 09:24:24 PM
if anyone interested  :-\
http://www.threatfire.com/updates/
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: drhayden1 on July 20, 2008, 10:04:44 PM
but can you run it along side avast with no conflict...if not-no thanks ??? ::) ;)
and doesn't avast have most of that protection included-so why need 2 of almost the same-avast being the better of course ;)
ThreatFire is zero-day security software designed for the average consumer. ThreatFire protects in real-time against viruses, worms, trojans, spyware, adware, rootkits, keyloggers, and buffer overflows -----It is designed to be used alongside your current antivirus to protect you between antivirus updates---- Because it is behavior-based and not signature-based, ThreatFire protects against both known and unknown, or zero-day, threats. It is easy to install, painless to use, and immediately effective against today's computer security threats.
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: Rafel on July 20, 2008, 10:27:33 PM
I run COMODO FW. I don't need this product :D
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: drhayden1 on July 20, 2008, 11:38:54 PM
Quote
I run COMODO FW. I don't need this produc
also use comodo so i guess i don't either ;)
and avast!of course also use ;D
so why do we need it ::) ???
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: Vladimyr on July 21, 2008, 06:26:21 AM
I've been using Threatfire 3.5 alongside avast! 4.8 on XP since April and on Vista HB for the last month with no apparent conflicts. If you're already using the HIPS in Comodo FW 3.0 then adding another behaviour analysis program is unnecessary.
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: johnny223 on July 22, 2008, 02:53:15 AM
Looks pretty promising.
How good is this threatfire software? Looks like it works with Avast, but does it slow down the system a lot on XP? ???
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: drhayden1 on July 22, 2008, 03:40:19 AM
i just installed threatfire and in my control panel-security panel-under virus protection
windows finds more than one antivirus program on your computer and at least one reports that it is currently up to date and virus scanning is one.....isn't that conflicting with avast! or not ??? ::)
don't have any others previous installed before-just avast and now threatfire ???

below from their threatfire tutorial....
can I use ThreatFire can I uninstall my antivirus protection?
Since no single application is currently foolproof, PC Tools believes that a layered defense provides the most complete protection. ThreatFire is the perfect complement to your existing antivirus, and will protect you between antivirus updates.
It is fully compatible with traditional antivirus programs, and can run side-by-side with these programs without conflict. While the traditional programs will protect only against known threats included in their signatures, ThreatFire goes beyond and protects against new or unknown zero-day threats as well.
ThreatFire also includes the on-demand scanning engine from PC Tools AntiVirus. This provides the perfect combination of on-demand scanning available in traditional antivirus with the cutting edge behavioral-based protection provided in ThreatFire for a powerful and comprehensive defense.
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: Tarq57 on July 22, 2008, 04:30:14 AM
I've tried four behaviour blockers. The HIPS in SpywareTerminator, D+ in Comodo3 series, Threatfire, and OA firewall.
Currently using TF alongside Avast. The only problem, and it's more an irritation than a problem, is that the Avast GUI is a little slow to respond when TF is active. (Reported here, and at the PCTools fori.)

I find it very good, frequent updates, few warnings, (mostly alerts for things I do with other software which are actually OK), and low resource use. No noticeable web slowdown.

As to the other 3 I've tried, that's another story.
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: drhayden1 on July 22, 2008, 04:43:37 AM
thanks....the only concern i have is what i posted above.....
i just installed threatfire and in my control panel-security panel-under virus protection
windows finds more than one antivirus program on your computer and at least one reports that it is currently up to date and virus scanning is one
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: Tarq57 on July 22, 2008, 04:57:44 AM
Not 100% sure, but I believe no conflict.
The TF application is a blocker and uses the AV-based database so as to target known malicious processes.
It would seem likely to me that there would be some overlap - perhaps a great deal - between its' database and that of Avast.
As to what would happen if they both detected the same malicious process starting to run at the same time...no idea, sorry. I'm only going by the info (which you've also seen) at the TF site.
I have the same security centre message. TF is recognized by the security centre by virtue of that blacklist.
I've just run a test with the 1st eicar test file. No alerts from TF, but Avast does as expected.
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: Vladimyr on July 22, 2008, 05:49:42 AM
i just installed threatfire and in my control panel-security panel-under virus protection
windows finds more than one antivirus program on your computer and at least one reports that it is currently up to date and virus scanning is one.....isn't that conflicting with avast! or not ??? ::)

The "Security Centre" wouldn't know AV conflict if it jumped out in front of it wielding a revving chainsaw!
It's primary purpose is to give comfort and reassurance by calmly reporting to you that all is well... and that for all Windows knows, one of your 2 AV programs may well have just been "killed" by a trojan!  :o ;D


Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: drhayden1 on July 22, 2008, 12:24:03 PM
Ok Thanks Tarq57 & Vladimyr For The Info ;)
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: Macintosh on July 22, 2008, 12:38:38 PM
i just installed threatfire and in my control panel-security panel-under virus protection
windows finds more than one antivirus program on your computer and at least one reports that it is currently up to date and virus scanning is one.....isn't that conflicting with avast! or not ??? ::)

The "Security Centre" wouldn't know AV conflict if it jumped out in front of it wielding a revving chainsaw!
It's primary purpose is to give comfort and reassurance by calmly reporting to you that all is well... and that for all Windows knows, one of your 2 AV programs may well have just been "killed" by a trojan!  :o ;D



Can any trojan kill avast antivirus :o :)
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: Tarq57 on July 22, 2008, 12:48:14 PM
Quote
Can any trojan kill avast antivirus
I'd doubt it, unless possibly the self protection module was disabled by the user.
Never say never, though.
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: Lisandro on July 22, 2008, 01:50:46 PM
Can any trojan kill avast antivirus :o :)
Any? No.
None? No either. There are some variants of Bagle/Beagle that could kill avast even with self-defense module on. They had to choose between a harder protection and user comfort with some legit functions in the computer.

Hmmm... Threatfire gave me problems in the past, now it's being reported as a full antivirus... something is telling me that will have problems again, at drivers/services level... not sure...
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: Vladimyr on July 22, 2008, 03:42:51 PM
I suspect that Novatix/PC Tools may be in a "Catch 22" over Threatfire being recognized by Windows Security Centre as an AV. If it isn't, people who use it as their main or sole protection will get worried. Some nod their heads as if they understand when you tell them it detects malicious files according to their behaviour... and then ask why it doesn't catch 'eicar.com'.
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: drhayden1 on July 22, 2008, 03:45:14 PM
http://www.tweakhound.com/xp/securitycenter/index.htm
so i won't see the 2 being there in the security center i just disabled it ::) 8) :D

click on bottom pic to enlarge ::)
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: Lisandro on July 22, 2008, 03:50:18 PM
so i won't see the 2 being there in the security center i just disabled it ::) 8) :D
If you don't care of having that, why did you disabled it? Just ignore it... let the two of them there...
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: drhayden1 on July 22, 2008, 03:53:59 PM
Quote
If you don't care of having that, why did you disabled it? Just ignore it... let the two of them there...
paronoid maybe-i don't know-but the two-avast and threatfire are working great together-no conflict i can tell ::) ;)
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: polonus on July 22, 2008, 08:08:28 PM
Hi Dan,

The only important thing to consider in this is that you do not have two resident anti-virus programs running together on one box. If you have one resident and another non-resident or one resident and several non-resident av or anti-malware solutions there is generally no conflict. There is an exeption to this rule of thumb by the name of Panda, because Panda signatures can be taken for malware by Avast, which is Panda's fault. I run avast together with ClamAV, TrendMicro RUBotted, and Comodo BoClean. Additionally I have SAS, and a-squared on demand and ewido micro on demand. Furthermore on a seperate USB stick I have the latest version of DrWebCureIt ready, also non-residental and a very fast additional scanner.
I think that is enough.
The answer on your question can be found here. Threatfire is a resident scanner, but non-signature dependant:
"ThreatFire 3.5 is a Antivirus Software product from threatfire.com, get 4 Stars SoftSea Rating, ThreatFire (formerly CyberHawk) provides behavior-based security monitoring to protect you from malicious programs such as Trojans, viruses, malware and other threats without relying on any signature updates. It can (should) be used along with your regular anti-virus software or firewall, adding an additional level of security to your system. The software works by continuously analyzing the behavior of processes and programs on your system and immediately alerts you if it detects any suspicious actions - you can then decide whether to allow or block the activity. ThreatFire comes ready-to-use and does not require any difficult configuration, however it also offers flexible rule settings that allow advanced users to customize the protection. The license of this antivirus & security software is Freeware, you can free download and free use this Antivirus & Security software."

So the answer to your question, Dan, my friend, is to be found above in italics,

Damian
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: drhayden1 on July 22, 2008, 11:01:18 PM
thanks damian for that long explanation...like the software-only thing i don't like is it being recognized as i posted before-as having 2 antivirus programs being detected in the security center ??? ;)
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: polonus on July 22, 2008, 11:18:45 PM
Hi Dan,

I can follow your line of reasoning there, two av scanners, OK, but the point here is one is an actual one resident with real signatures data to detect or interact, the other Threatfire is also resident, but with a different aspect that it does not work in the traditional way of normal resident AV scanners (it only checks the processes and thoroughly when a new program is launched and checks it later also for changes in these process patterns produced initially. But they can go along, take M$ word for it as well. They say it upfront in their explanation of what the tool does that it can run along any other normal resident av scanner.

Damian

The only nag with Threatfire is that it can be CPU consuming for some in the initial phase of it running...
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: Lisandro on July 22, 2008, 11:39:56 PM
I really wish that avast has a zero-day protection... I'm tempted to use a tool for that, but ThreatFire caused me a lot of troubles with Firefox extensions and software functions...
Title: Re: ThreatFire, now PC Tools AntiVirus Included
Post by: drhayden1 on July 23, 2008, 02:10:24 PM
i took threatfire after reading some of the posts here
thanks all ;)