Ultimativna antivirus tema - P&O

 Postavio sam tj. dodao što treba i funkcionira. Kada otvorim Firefox preko Sandboxie-a MBAE obavijesti da je Firefox zaštićen. Hvala!

Hm, možda po uključenoj lampici. A opet, možda taj softver uopće ne uključuje lampicu. Ili se možda može vidjeti po pozadinskom procesu, ako ga ima kada se koristi kamera, a valjda ima (nikad nisam gledao). I to ako se uopće pali proces na hakiranom računalu. Ne znam... Možda pouzdano zna netko drugi.

Da, imam MBAE, a također sve redovito skeniram s MBAM-om...ali zanimalo me budući da vidim da je to nažalost postalo sve raširenije.

Tek sad skužio da mi kamera nije niti aktivirana, nemam taj driver.

 Otkad sam nadogradio Win 10 na zadnji build stalno mi se taj notification resetira. Imao sam isključen za MBAE prije i tako je ostalo a sad kad ga isključim on se opet stalno uključuje nakon restarta kompa. Iritirajuće.

Reinstalacija ne pomaže a i to najvjerojatnije nije problem MBAE-a već Windowsa pošto s još jednim programom imam problem. BSPlayer mi se uopće ne pokazuje pod programima u Notifikacijama znači ne mogu ni paliti ni gasiti notifikaciju. Isto reinstalirao program i isti vrag.

Ako to uključim onda se svaka notifikacija isključuje a to neću jer neke trebam, mail npr.

Zato i postoji da se uključuju i isključuju aplikacije po želji ali u Microsoftu se nešto sjebali očito s ovim upgradeom.

http://blogs.technet.com/b/mmpc/archive/2015/11/16/windows-defender-rise-of-the-machine-learning.aspx

===========================================================================

Windows Defender harnesses the power of machine learning, contributing to making Windows 10 Microsoft’s most secure client operating system and providing increased protection against security threats facing consumers and commercial enterprises today.

To reduce the number of both false negative and false positive detections our automation pipeline uses a variety of tools and technologies to process malware and unwanted software. These include:

• Machine learning
• Clustering
• Cosmos
• Azure and Cloud

The automation process

As seen in the diagram below, our automation typically takes a first pass at detecting malware as it is first encountered.

This adds another layer of protection to the manual work our security researchers do to write better generic detection signatures and clean-up routines, produce malware eradication strategies, and identify control points to take malware down.

Automation is the first part of malware analysis

Once a suspicious file is extracted and run within a virtual environment, or the features/attributes of a file are received, we use automation to sort the sample into one of the following classes:

• Clean
• Malware
• Virus
• Unwanted Software

Each of the classes above routes to a specific output. For example, once we identify a file as malware, we ship protection for it to our cloud engine. This also means customers who have the Microsoft Active Protection Service (MAPS) turned on, enjoy the benefits of being better protected against the latest threats.

Malware, viruses, and unwanted software can be mutated, packed, and obfuscated in a bid to evade detection. This requires targeted, and at times complex, detection signatures. Our automation can suggest or release the best type of generic signature for a certain file or cluster of files. The metrics attached to an automated signature are then automatically analyzed and various decisions can be made as to whether the signature is released or flagged for a researcher to manually analyze.

Classifying malware families

Our automation system can also classify a sample within the malware family to which it is most similar. If the system can’t confidently identify the real malware family, it assigns it a generic, synthetic family name. The prevalent family names for automation-classified malware are:

• Anaki
• Bagsu
• Beaugrit
• Bulta
• Dorv
• Skeeyah
• Dynamer
• Pocyx
• Toga
• Tefau

Individual threats within these families usually follow the format:

• Trojan:Win32/<family name>

The graph below shows an example of our synthetic families and their respective encounters in the past six months.

Synthetic family encounters May

Using automation helps us detect and remove malware and unwanted software faster and better protect our customers.

To ensure you are getting the latest protection, keep your real-time security software, such as Windows Defender for Windows 10 up-to-date.

Enable the Microsoft Active Protection Service (MAPS). MAPS uses cloud protection to help guard against the latest malware threats. It’s turned on by default for Microsoft Security Essentials and Windows Defender.

• Check if MAPS is enabled on your PC

Šta će ti antivirus na zatvorenom OS ?

Logično kad je Android otvoren. I sretno s pisanjem malware za Windows phone koji je skoro nemoguće obiti.

 ...lakse mu je za zapamtit...

Cisto me zanima da li koristite ovu opciju koja je ugradjena u Windowse ili mozda nesto drugo sto ima istu funkciju.

Da li ova opcija ima koristi/svrhe (kome se da moze napisati zasto ima/nema svrhe)?

Koristite li BitLocker?

Na starom laptopu sam napravio manju particiju koju sam zaključao BitLockerom, ali to je više bilo iz znatiželje i isprobavanja nego iz potrebe tako da ne mogu govoriti o koristi ili nedostatku iste.

Ono što mi je bio minus je da particija zaključana BitLockerom prilikom otključavanja ostaje otključana sve do restarta računala, tj. opcija za ponovno zaključavanje ne dolazi u Windowsima, ali vrlo jednostavno se može napraviti .bat skripta koja radi upravo to. 

Odlican video test usporedbe 3 skanera protiv ciscenja PC od crva.

Zemana ima novu verziju koja se odlicno nosi s ovom napasti.

Jel valja što ta Zemana AntiMalware?