The New AVG Identity Protection -- Any Opinions ?

Discussion in 'other anti-malware software' started by hawki, Mar 4, 2009.

Thread Status:
Not open for further replies.
  1. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Well, not going into what is better, just trying it out

    PRSC was so static (doing nothing accordint to), my son threw it away on its 64 bits gaming box,


    This one is informing you via tray icon action and pop-ups it is really doing something (a lot of icon action IMO)
    Seems to blacklist check installers, nice when this really works :thumb: (like in PrevX now ). Bit heavy on reources though :thumbd: . About 4 times as many reads as an traditional AV, now WHY WOULD A SECURITY APPLICATION WITH NO BLACK LIST, READ 4 TIMES AS MUCH AS A TRADITIONAL BLACKLIST ANTI VIRUS (it has to read the blacklist/malware fingerprint data base, so that makes sence)


    PLEASE ANY ONEo_Oo_O?
     
  2. progress

    progress Guest

    Because it monitors the behaviors? o_O

    But just a little bit, it's not as heavy on resources as ThreatFire in my case :)
     
  3. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    No,

    Behavioour patterns are endlessly more condensed, example of behavior pattern (example good ap)

    A) create process in TEMP

    B) create directorty in Programs Files\

    C) write to C:\Windows\system32\drivers\

    D) File has ligitemate driver siging

    E) write to "a startup registry"

    F) apply pending file name operations

    g) delete of TEMP directories

    h) Reboot


    Example bad app
    A) creat process in Temp dir

    B) creat executable in non primary disk :\Recycle

    C) maniplulate process

    D) service access [close]

    E) apply pending file rename operations [service]

    F) Reboot


    Patterns are generalised behaviours, so there should be a lot less i/O
     
  4. RejZoR

    RejZoR Lurker

    Joined:
    May 31, 2004
    Posts:
    6,426
    ThreatFire is pure behavior analyzer and blocker. And so far i haven't got a single false popup by TF. Even behavior blockers can make a mistake here and there but that doesn't equal them with HIPS by far.
     
  5. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    For me, if some security tool keeps showing alerts to the user asking what to do (and ThreatFire can even be tweaked to level 5), then it is a sort of a classical HIPS.

    And, if ThreatFire is a pure behavior blocker, then, what does it make AVG IDP be?
     
  6. progress

    progress Guest

    I think ThreatFire at level 3 (=standard) is a behavior blocker, but we are talking about AVG IP here ;)
     
  7. progress

    progress Guest

    Is there anyone who wants to donate his license to me? :rolleyes:
     
  8. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    They are non-transferrable, when you buy you agree with this :D
     
  9. progress

    progress Guest

    Thank you AVG :'(
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.