Antivirus that does NOT require updates !!

I discovered something that I thought people here might be interested in.

It's an antivirus program that doesn't use virus-specific information or
database of virus signatures and hence doesn't require periodic updates. It
looks at the different ways viruses attack.

Here's a PDF that describes the software and it's technology (see
"InVircible's Generic Technology" at the bottom of page 2) :
http://www.invircible.com/papers/IV4Enterprise.pdf

What do you think ?

On Sat, 28 Jul 2007 14:59:41 +0300, "Paul_Lucy"
<Reply@ThisNewsgroupPlease.com> wrote:

>I discovered something that I thought people here might be interested in.
>
>It's an antivirus program that doesn't use virus-specific information or
>database of virus signatures and hence doesn't require periodic updates. It
>looks at the different ways viruses attack.
>
>Here's a PDF that describes the software and it's technology (see
>"InVircible's Generic Technology" at the bottom of page 2) :
>http://www.invircible.com/papers/IV4Enterprise.pdf
>
>What do you think ?
>
This is NOT the way to go, a program that never needs updating will be
an easy way for hackers to get around it!

If it doesn't need updating how is it going to deal with the latest virus
threats? Even the most expensive anti virus software requires updating to
keep up with the constant barrage of new viruses. I also noted that the pdf
file article is 5 years old and the 'last' customer comment came in 2003.
Hardly a glowing response. It certainly isn't an application I would trust
my system to.

--
John Barnett MVP
Associate Expert
Windows - Shell/User

Web: http://xphelpandsupport.mvps.org
Web: http://vistasupport.mvps.org

The information in this mail/post is supplied "as is". No warranty of any
kind, either expressed or implied, is made in relation to the accuracy,
reliability or content of this mail/post. The Author shall not be liable for
any direct, indirect, incidental or consequential damages arising out of the
use of, or inability to use, information or opinions expressed in this
mail/post..

"Paul_Lucy" <Reply@ThisNewsgroupPlease.com> wrote in message
news:ukbnL7Q0HHA.464@TK2MSFTNGP02.phx.gbl...
>I discovered something that I thought people here might be interested in.
>
> It's an antivirus program that doesn't use virus-specific information or
> database of virus signatures and hence doesn't require periodic updates.
> It looks at the different ways viruses attack.
>
> Here's a PDF that describes the software and it's technology (see
> "InVircible's Generic Technology" at the bottom of page 2) :
> http://www.invircible.com/papers/IV4Enterprise.pdf
>
> What do you think ?
>
>

"Paul_Lucy" <Reply@ThisNewsgroupPlease.com> wrote in message
news:ukbnL7Q0HHA.464@TK2MSFTNGP02.phx.gbl...
>I discovered something that I thought people here might be interested in.
>
> It's an antivirus program that doesn't use virus-specific information or
> database of virus signatures and hence doesn't require periodic updates.
> It looks at the different ways viruses attack.
>
> Here's a PDF that describes the software and it's technology (see
> "InVircible's Generic Technology" at the bottom of page 2) :
> http://www.invircible.com/papers/IV4Enterprise.pdf
>
> What do you think ?
>
>

You need to run two AV(s) then. You can run the one you're talking about
that's playing the role of an AV solution.

Then you run a real AV solution that has updates to back-up the AV that's
playing a role of an AV solution.

Running two A/V will cause problems. It's Ok for A/S but not A/V.

--
Peter
Toronto, Canada
"Mr. Arnold" <MR. Arnold@Arnold.com> wrote in message
news:eWCtLIS0HHA.3940@TK2MSFTNGP05.phx.gbl...
>
> "Paul_Lucy" <Reply@ThisNewsgroupPlease.com> wrote in message
> news:ukbnL7Q0HHA.464@TK2MSFTNGP02.phx.gbl...
>>I discovered something that I thought people here might be interested in.
>>
>> It's an antivirus program that doesn't use virus-specific information or
>> database of virus signatures and hence doesn't require periodic updates.
>> It looks at the different ways viruses attack.
>>
>> Here's a PDF that describes the software and it's technology (see
>> "InVircible's Generic Technology" at the bottom of page 2) :
>> http://www.invircible.com/papers/IV4Enterprise.pdf
>>
>> What do you think ?
>>
>>
>
> You need to run two AV(s) then. You can run the one you're talking about
> that's playing the role of an AV solution.
>
> Then you run a real AV solution that has updates to back-up the AV that's
> playing a role of an AV solution.
>

> It's an antivirus program that doesn't use virus-specific information or
> database of virus signatures and hence doesn't require periodic updates.
> It looks at the different ways viruses attack.
>
> Here's a PDF that describes the software and it's technology (see
> "InVircible's Generic Technology" at the bottom of page 2) :
> http://www.invircible.com/papers/IV4Enterprise.pdf
>
> What do you think ?

After a brief look at the web site and PDF I'd say InVircible Antivirus is
similar to CyberHawk, PrevX and other HIPS apps. Host Intrusion Prevention
Systems protect the computer by monitoring the behavior of software and
intercepting anything that looks suspicious. This is a valid approach IMHO,
however it is not necessary to rely on it exclusively. A HIPS type monitor
can be run along side traditional signature based AV. Also, HIPS
applications tend to require a lot of user interaction if they do not
include a database of trusted applications. By "user interaction" I mean
they pop up a lot of warnings and ask the user to decide if a particular
program/activity is safe. This can be pretty annoying, and is also
problematic for users who don't have enough knowledge to make the correct
choices. There are HIPS apps that include a database of safe applications
which cuts down the number of warnings/requests. That database needs to be
updated <g>. Unfortunately, Invircible AV doesn't support Vista so I can't
install it and confirm my opinion - take it as a "best guess". If you try
Invircible let us know what you think.

Says nothing about being compatible with Vista - and you are posting in a
Vista newsgroup.

--


Regards,

Richard Urban
Microsoft MVP Windows Shell/User
(For email, remove the obvious from my address)

"Paul_Lucy" <Reply@ThisNewsgroupPlease.com> wrote in message
news:ukbnL7Q0HHA.464@TK2MSFTNGP02.phx.gbl...
>I discovered something that I thought people here might be interested in.
>
> It's an antivirus program that doesn't use virus-specific information or
> database of virus signatures and hence doesn't require periodic updates.
> It looks at the different ways viruses attack.
>
> Here's a PDF that describes the software and it's technology (see
> "InVircible's Generic Technology" at the bottom of page 2) :
> http://www.invircible.com/papers/IV4Enterprise.pdf
>
> What do you think ?
>
>

Paul_Lucy wrote:
> I discovered something that I thought people here might be interested in.
>
> It's an antivirus program that doesn't use virus-specific information or
> database of virus signatures and hence doesn't require periodic
> updates. It looks at the different ways viruses attack.
>
> Here's a PDF that describes the software and it's technology (see
> "InVircible's Generic Technology" at the bottom of page 2) :
> http://www.invircible.com/papers/IV4Enterprise.pdf
>
> What do you think ?

All modern anti-virus products (since the Fish / Whale polymorphic
viruses were released into the wild in 1989/1990 (iirc)) have heuristic
detection of viruses.
Determining whether a program is a virus is as hard as the halting
problem. (Google halting problem if you don't know that stuff - every
good computer person should). Relying entirely on heuristics for
anti-virus is provably stupid! :-)
They might have some interesting new heuristics that could be integrated
into other AV products at some point in future, but their buzword-filled
nonsense whitepaper with no technical details makes me suspect that this
is not the case.

Alun Harford

"Peter" <ex_brit@discussions.microsoft.com> wrote in message
news:OreIjeS0HHA.5980@TK2MSFTNGP04.phx.gbl...
> Running two A/V will cause problems. It's Ok for A/S but not A/V.
>

I know this. It was a joke. However, I have seen people make posts in the AV
NG(s) doing just that with no problems too, according to them.

That's true, the user has to know enough about the system to be able to say
to this software "yes, what you are pointing out is virus activity, delete
it".

It doesn't look like a home user could use it.
______________________________

> After a brief look at the web site and PDF I'd say InVircible Antivirus is
> similar to CyberHawk, PrevX and other HIPS apps. Host Intrusion
> Prevention Systems protect the computer by monitoring the behavior of
> software and intercepting anything that looks suspicious. This is a valid
> approach IMHO, however it is not necessary to rely on it exclusively. A
> HIPS type monitor can be run along side traditional signature based AV.
> Also, HIPS applications tend to require a lot of user interaction if they
> do not include a database of trusted applications. By "user interaction"
> I mean they pop up a lot of warnings and ask the user to decide if a
> particular program/activity is safe. This can be pretty annoying, and is
> also problematic for users who don't have enough knowledge to make the
> correct choices. There are HIPS apps that include a database of safe
> applications which cuts down the number of warnings/requests. That
> database needs to be updated <g>. Unfortunately, Invircible AV doesn't
> support Vista so I can't install it and confirm my opinion - take it as a
> "best guess". If you try Invircible let us know what you think.
>