Rising Antivirus Free Edition Comparison

Apr 07, 2009  The best free antivirus: a comparison. I would love to see comparison numbers for Rising Antivirus You can download BitDefender 10 Free Edition.

It seems a new player comes to the Free AVs area: Rising.

They ve launched a free edition of their antivirus.

You can test it here:

It is not maybe a good player for Europe or US users but for Asia is OK I guess.

What I wonder is what features does the free version lack in comparison with the paid one. The website seems not to show this.

I did buy Rising Firewall last month and the AV was included for free or vice versa, but I just wanted the firewall really.

I dont have many virus samples but the ones I had was intercepted by Rising AV so it isnt totally dumb.

I did only use it for a week or so only because I am trialing Twister AV for the three free months to see if it is something for me. I tried Rising Antivirus just to see if it played well with Vista so I havent done any deeper analysis of it.

All I can say is that compability speaking it played well with Vista.

Maybe I will try it more later.

i mean it seems like it s pretty feature rich for a free AV, i don t know for sure because i haven t installed it.

for example, this feature :

Application Protection

Application Protection can protect specified applications from attack by malicious programs. A user can apply rules to game software, instant messenger, etc. to customize protection. Rising Anti-Virus 2008 provides users with eight rules: Anti-DLL Injection, Anti-CodeInjection, Anti-Memory Modification, Anti-Memory Read, Prevent Suspension, Prevent Termination, Anti-Simulated Sending, and Anti-Simulated Key.

Click to expand

anyone actually try the free version yet.

computer geek said:

The downloading page, brothersoft, appears to be rated Red by WOT. Whats up.

Site advisor rated it red too,

When we tested this site we found links to golddownload.com, which we found to be a distributor of downloads some people consider adware, spyware or other potentially unwanted programs.

In our tests, we found a small fraction of downloads on this site that some people consider adware or other potentially unwanted programs.

But if you trust the programs that you download there s no prob.

clocks said:

Interesting. Anyone tried this.

It is a 54meg download.

54 MB. Even the Java program isn t that big.

zopzop said:

i mean it seems like it s pretty feature rich for a free AV, i don t know for sure because i haven t installed it.

for example, this feature :

not just that but take a look on these:

Anti virus, worms, trojans

Anti Rootkit

Mail Protection POP3/SMTP

Application Protection RISING unique Account Safe function protects your online bank, online game, MSN, E-mail account, Yahoo Messenger and other private information.

Proactive Defence protects your security safe from malicious program

Application Access Control

Program Startup Control

Malicious Behavior Detection

Hidden Process Detection

Multiple Languages

High Speed Update Service

Support Service

Free

I smell something behind the scenes..

Macstorm said:

not just that but take a look on these:

but it gets better or more fishy depends on how cynical we are. according to the quote in the post by tony, the free version is the EXACT same thing as the paid version. and it s free as long as it s for personal use only.

i m bout to download that sucker tonight.

Has anybody installed and tried the free version and if so, what do you think.

I installed it in XP Pro vm machine and the computer locked up at every boot. I had to revert to a snapshot to get the vm machine working again.

I noticed that Rising features do not mention adware/spyware protection. But the link below shows Rising as having 95.9 on demand scan for adware/spyware.

Does anyone know how it performs in real time.

Hi,

I gave it a spin, tweaked the settings because I have DefenseWall on board, to speed up performance:

- Scheduled scans no startup scan, daily boot record and memory scan, optimize for performance

- Auto protect file protection, added compressed files, only file creation, medium level, also script web protection

- Active defense system reinforcement set to high, behavioral detection set to low, possibly redundant added XP startup processes to application protection: ask for first three inrusions, did not seem to slow down rising, added explorer to limit application access actions, last three set to ask.

Opera starts cold within 3 secs, hot start within 1 sec on Athlon 3900

Scanning time average acceptable, ran some random malware samples real time, caught them all, crashed when catching one quarantained, but not deleted, kept on its feet despite crash, let the sample send to rising so problably will be handled more elegant in future, scan on selected malwares directory, removed everything. Problably missed a few pop-ups was bombarded, which caused a shut down error also without losing protecting, one module timed out.

One active defense false positive, but neglected access, system kept running okay, also send to Rising

I will keep this freebie for a while, looks good until now seems a good pick in combo with a policy sandbox, an overlapping pick when having a classic HIPS or smart behavioral blocker on board.

EDIT: received an update errors and FP are gone. Rising is a keeper for me, now nearly without AV, see 213254

Regards Kees

Last edited: Jun 25, 2008

kees

hello kees, since you have the program installed can you help me with the following questions.

1 how much RAM does the program use.

2 have you messed around with the Application Protection settings to see if they actually work.

3 what do they mean by Smart Virtual Machine with Behaviour Packing Pattern Recognition. i see it on their website and it says :

RISING Antivirus comes with an integrated smart virtual machine, which is used for virus scanning and malware recognition. RISING s proprietary smart virtual machine technology provides the additional safety for your computer without slowing down your system. Suspected code and program can be run in this virtual machine for RISING Antivirus to check for potential malicious behaviour. RISING s Behaviour Packing Pattern Recognition allows to test such potential malware thoroughly without influencing the performance of your PC and protects your system against new viruses and unknown viruses.

thanks dude

i went ahead and took a chance and installed it. so far so good. i don t notice any slow down compared to when i had antivir on and the install went smoothly.

i do notice that it has A LOT OF OPTIONS though. so much stuff to mess around with

It ran light and was pretty good overall. Although, I didn t feel secure as with other free av s. Just my subconscious taking over.

Does it have its own engine. Or is it imported from someone elses.

Homemade, i think.

Kees

sorry for stupid question but what does its systray icon look like.

it a green umbrella that changes to yellow than to red when a service is not running but you can send it to the back ground if you like and not see any thing. on a schedule scan it has the Rising logo.

HyperFlow said:

Thank you HyperFlow

Actually, I take back my previous comment, and have decided to run Rising for now. I didn t give it a real chance, and reading over this thread has made me re-think my opinion.

Kees1958 said:

Minimum 27MB, max 41MB, note that I disabled the real time file protection module

On my system uses 19-22mb during normal use and 50-60mb during a full system scan; the real time protection is active.

pandlouk said:

On my system uses 19-22mb during normal use and 50-60mb during a full system scan; the real time protection is active.

The difference is normal, each system shouldn t be expected to have the same results

L815 said:

The difference is normal, each system shouldn t be expected to have the same results

Yes, I know, but 19mb of differrence.

I find something odd with Rising s file monitor. If I disable Smart Monitor from File Monitor s advanced settings, RAV detects the eicar test file when I download it. But with Smart Monitor on, it stays silent. Possibly a bug. Can someone test this please and see if it can be replicated.

File Monitor settings at medium with added scanning for compressed files and self-extracting exe s.

edit: after a reboot everything seems to be going fine now

Last edited: Jun 26, 2008

Strange, I keep getting a BSOD while trying to update the program. Uninstalled AVG, ran RegSupreme Pro, Installed Rising, trying to update and downloading them, but when it is installing the updates - BSOD.

When I ve tried it two times the program wont work anymore. Anyone who know how to fix it.

XP Pro with Norton Antibot and Sandboxie running.

tesk said:

Strange, I keep getting a BSOD while trying to update the program. Uninstalled AVG, ran RegSupreme Pro, Installed Rising, trying to update and downloading them, but when it is installing the updates - BSOD.

I don t know, have never used it, but have you tried disabling Norton Antibot.

Are you trying to run the Rising updater sandboxed.

I have this exact same problem, but I m running Vista SP1. I also find if you try to uninstall it you ll get a BSOD too. But when I update it BSODs, not during the download, but during the install of the update itself. Is this happening in your case.

My previous AV was Antivir free edition which I uninstalled and rebooted before trying this program a few days ago.

Tarq57 said:

No I havn t tried that. But Norton is so simple that I can t amagine that. But I will give it a try.

And it is not running sandboxed.

I will be back. - With anwers.

Kevin523 said:

Yeah it download the updates, but when it wants to install the updates it goes in a BSOD.

Uninstall and Install, both works just fine.

Sorry for bumping this thread

It didn t work. I got a BSOD.

It was while it tried to stop one of it modules. I ve disabled the self-protection.

Comments have tweaked an interest in me to test - time to cover-up with this av.

What s causing the bsods.

Sandboxie Rising BSOD during Rising update.

Their drivers both call the same SSDT hook and are incompatible with each other.

yxclark said:

Sandboxie Rising BSOD during Rising update.

You are absolutely right. Uninstalled sandboxie and it updates fine.

Thanks

Now I can run some tests.

anyone know how to make the HIPS in rising remember my answers. when my computer first boots and then i open up firefox, i keep getting the same warning about firefox having access to the keyboard or something. i select allow and even check the box remember until next reboot. but it doesn t remember my selection.

Rising also has poor detection rate in China.

I used the virusbuster DB of TF before, also not a first tier AV. I am only using its HIPS, have you seen what a candy box the custom setting of OS protection offers. With a policy sandbox, downloaded files are caged, so it is looks like what I needed: a HIPS focussing on the vulnarable static parts of your system.

Don johnson said:

Rising also has poor detection rate in China.

how do you know this.

anyone know how to make the HIPS in rising remember my answers. when my computer first boots and then i open up firefox, i keep getting the same warning about firefox having access to the keyboard or something. i select allow and even check the box remember until next reboot. but it doesn t remember my selection.

There s an option to trust the application and add it to the whitelist. A bit hard to see on the warning gui. I dunno though if it is reversible or configurable.

bman412

found it thanks. kind of odd that it s so hard to see, i wish there was a way we could send suggestions to them. that option to trust the program should at least be highlighted and easy to see.

I dunno though if it is reversible or configurable.

i found the allow/deny whitelist. it s under the active defense tab. select settings, then select active defense. the a/d whitelist is right there. you can add or remove programs from there.

i m lovin this AV

found it. tyvm

I m a Chinese.Rising has pretty good market sector.Most of Chinese people don t like it.

What are the reasons they don t like it. And what are the antivirus programs of choice there.

acr1965 said:

I don t agree with Don johnson

I m Chinese,rising is a good antvirus,rising antvirus has 40 millions users,it is true.

most users use rising antivirus keep their computer more safe.

why so many users.

there is more trojans in China.

why they chose rising antivirus.

rising antivirus really know how to defence on trojans in China than any other antvirus et. ess avp and so on

Because of its exaggerated publicity and unfair competition.Rising said it has the first virtual machine technology in anti-virus industry.Rising called Kaspersky the king of false positive.

Where are these claims. I m kind of interested to see them for myself.

Besides, every vendor stretches the truth and subtly omits critical info when marketing their products. It s more or less common practise, I don t see what makes Rising special.

What. It is all chinese, please eleborate

There s too much stuff I have heard for and against Rising from various sources - in the end I would recommend not taking anyone blindly and evaluating the program based on your own experience.

From what I heard, Kaspersky s China branch isn t too good either, but again its all just hearsay.

RISING Antivirus 2008 is developed by a Chinese software company in Beijing. It protects your computers against all types of viruses, Trojans, Worms, Rootkits and other malicious programs. Ease of use, Active Defense technology, Patented Unknown Virus Scan Clean technology and Patented Smartupdate technology make RISING Antivirus install-and-forget product that lets you focus on what you really want to do.

RISING Antivirus Free Edition is a solution with no cost to personal users for the life of RISING Antivirus 2008 while still provides the SAME level of detection and protection capability as Rising Antivirus 2008. RISING Support centre will also provides technical support for Free Edition users. RISING expects more users can enjoy Lion-strong security protection.

I ve tested Rising Antivirus free edition on my desktop test system with a few trojans. Some are public versions which is detectable by most antiviruses and some private which can only be detected by certain good and powerful antivirus such as Kaspersky. When Rising AV sees the virus, it doesn t immediately notify me that it has found a virus. Only when I try to run it, Rising File Monitor Alert appears telling me that it has found a virus and giving me the option to clean, delete or ignore the file. This is good because it doesn t constantly scan in background which will slow down your computer. It can detect all public version of trojans that I try to copy to the computer.

Next, I tried scanning a private version of trojan with Rising Antivirus but it did not detect anything. I was a bit disappointed, thinking that this is like any other free AVs out there that doesn t have a good proactive engine. When I run the private trojan, it did not infect my system. I suspect that Rising Antivirus somehow blocked the threat. So I disabled all Rising Antivirus auto-protect, and ran the trojan again. Now the system is infected. I re-enabled auto-protect and ran Hidden Process Detection. It detected a hidden process which spawned by the trojan. I ran a scan on the memory and boot records and it was able to detect and remove the private trojan. I AM IMPRESSED. As you can see, although Rising Antivirus did not have the virus definition to identify the private trojan as a threat, but it can somehow block it from infecting the computer. Even if it is infected, it can detect hidden process and remove it from memory.

Is Rising Antivirus a bloatware. Here are the process that I ve identified which belongs to Rising Antivirus.

ravtask.exe - 676K

ravstub.exe - 3411K

ravmond.exe - 8192K

ravmon.exe - 2048K

ccenter.exe -1652K

All 5 processes above takes up about 15MB from memory. Since most of the computer nowadays come with at least 1GB of RAM, you wouldn t really feel that Rising Antivirus is hogging on your computer. It is not heavy in system resource usage nor light. Moderate would be the best word to describe Rising Antivirus system resource usage.

Rising Antivirus can run on Windows 98 up to Windows Vista 64 bit. The system requirements to run on non-Vista computer is Pentium3 500 MHz, 64 MB of RAM and a standard VGA 24-bit true color. As for Windows Vista, Pentium3 1 GHz CPU, 512 MB of RAM and a Standard VGA 24-bit true color.

more;

I suppose every product has its bashers, but the ability to perform really does speak for itself.

Hope, Hype, Help, Horror first euphoria, than reality, like Twister.

LOL

I don t know if I m crazy, but I just replaced my trustworthy friend AntiVir Free with Rising. This AV runs lean and has some nice configuration options with White listing apps. Are there any good reviews on this AV. I m curious to read them. Also, how do these developers give a product like this away.

Ice

The only issue I have so far is with TF. While scanning, TF smokes the cpu and slows down Risings scan. I guess its an issue with TF to omit the scan executable in Risings product. Also, I had a problem updating the virus definitions on my WinXP pro PC. I get some zip file name in a window. On my Vista Home PC the update went smooth.

IceCube1010 said:

The only issue I have so far is with TF. While scanning, TF smokes the cpu and slows down Risings scan. I guess its an issue with TF to omit the scan executable in Risings product. Also, I had a problem updating the virus definitions on my WinXP pro PC. I get some zip file name in a window. On my Vista Home PC the update went smooth.

Hi

I thought Rising AV had a HIPS. Why do you still use ThreatFire. Isn t that overlapping.

Your probably right. I just don t know how to use the program. I see an area to add programs to a white list, which I did. I included TF and Geswall programs. I m not sure how this hips work. I ve used SSM, CFP D just to name a few and this program is different. TF is more of a behaviour analysis type program, not really a classic hips.

Very good Kees. I will review the screens. I didn t realize it had such a sophisticated hips, similliar to Comodos Defense.

thanks

Does anyone know which test files can be used to see how Rising performs. I dunno, but this AV could be a keeper. So far, so good with BOClean.

Dave

Last edited: Jun 28, 2008

Hi

How intrusive is Rising s HIPS.

Thanks

Someone said:

Thus far, it seems to me to be rather friendly.

dw2108 said:

So it does not have a lot of alerts.

I m trying it in the highest protection mode possible, and the resource amount is still respectable, and my computer is workable too.

pykko said:

Here is always interest in budget friendly solutions.

I downloaded and installed Rising Free AV and it s scanning now.

While running Limited User Account, I noticed that Rising didn t finish the installation untill I logged in as Administrator.

I hope that it will update automatically while running LUA.

Question: what is your motivation behind the quoted remark.

Does anyone know which test files can be used to see how Rising performs. I dunno, but this AV could be a keeper. So far, so good with BOClean.

The Eicar test virus is offered in any format: executable, zipped, double zipped, etc.

I though t id try this instead of AVG 7.5 its actually faster on my system and not just that on the first boot caught 3 trojans one being Trojan Win32 Dns Changer should i change passwords.

maddawgz said:

Personally I change passwords often. just to make sure. but if you feel at all like maybe someone got your password then yes. by all means change it it takes 10 sec and gives you piece of mind.

Fajo said:

True Fajo, it actually found 5 viruses all up avg had missed impressed..Anyone tried the one with firewall. any issues with firewall, is it combined or seperate FW.

I disabled at first all features until I could whitelist things, and one can get an alert with some test files, but it s really very comfortable to live with.

i thought it ran rather good but i got spooked when i tried the pc audit and would get better scores before scans as to after the scan and it would show my last scan 24hr ahead of my local time and than this worm being talked about so i removed it and ran my normal AV and AS the AS found virusrescue and said it is adware and this adware was not on my sys before Rising install i did a AV/AS scan before installing Rising AV and my sys was clean they can keep it i m good with what i have

Last edited: Jun 29, 2008

I currently have RAV installed. Updated MBMAM and SAS and did a full scan and both found no trace of virusrescue from my pc. There maybe some other means perhaps as to when and how you contracted virusrescue aside from what you re implying that you got it from installing RAV. That is of course assuming your RAV installer is clean. May I ask which program you used that detected virusrescue.

I have been running Rising Firewall for a couple of months. I have Vista and it runs fine, no issues.

Back then, before the AV was free you got the Firewall for free when you bought the AV. They are two separet programs. They run fine together of course

Since I had some minor issues with Twister I have now installed Rising AV again. I personally dont care much for the HIPS part so I let it use the default settings. Hopefully it is safe enough coz I really like the silence, not many disturbing popups.

Neither the AV or FW gives any impact on performance but on the other hand I have rather powerful computer

Does Rising with all features enabled use less memory than AntiVir free scan when writing and ThreatFire.

Yes, but nowadays RAM is not that important, what is more important to me is that it uses less CPU time and in a CPU benchmark Rising scores about 5 higher.

I know a lot of people use PerfectDisk. This relates to PerfectDisk 8 but may apply to the latest version.

PerfectDisk 8 uses the following registry key in respect of a boot time defrag :

HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Control Session Manager

BootExecute PDBoot.exe autocheck autochk

After installing Rising, it did an update which introduced a file called bsmain.exe and altered the value of the above key to bsmain. It removed any reference to PDBoot. I initiated a boot time defrag with PerfectDisk but upon rebooting there was a message to the effect it could not perform the defrag.

Running a repair of PerfectDisk corrects the key to show PDBoot.exe autocheck autochk bsmain. The repair does not remove the reference to bsmain but simply adds back the reference to PDBoot. However, the next time Rising is updated the key reverts back.

You need to run a repair of PerfectDisk after every Rising update or, more practical, export the reg key in its correct form then run the reg file before performing a boot time defrag.

Oh. Thanks. I ll probably just stick with AntiVir free and ThreatFire then.

Someone,

Antivir ThreatFire is a good combination, but I may have been unclear

Rising uses less RAM than Antivir ThreatFire

Rising uses less CPU time than Antivir ThreatFire

Rising scores higher on CPU benchmark better than Antivir ThreatFire

Note when comparing I had ThreatFire on level 4 it is a bit faster than on level 3, the default

Excuse my ignorance, but how come. And in what way will this affect protection and amount of alerts. I m very interested since it sounds tempting

some more questions about rising especially it s HIPS feature :

1 does it protect against low level disk access killdisk and the like.

2 is there a way to contact them in case we find errors or something in their software like bman412 found here.

3 i googled around and couldn t find anything, do they have an english forum.

Someone,

Oops. I misunderstood. Well I might try it soon.

Thanks very much for the clarification

Has this been addressed at all. Anyone find a work-around to run sandboxie with Rising AV.

Saraceno said:

In version 3.28.0.0 it says:

Partially resolved conflict with Rising Antivirus 2008.

But I don t know cause I haven t installed Rising.

I have enlisyted to their forum, but still have not received their conformation mail. I had the same issue with EQS, so maybe my ISP who checks our e-mails filtters them out.

Kees, I created accounts at with succes using my gmail account.

PM me if you think I can help you.

The only low level protection is formed by an ask on driver installation. I thought both DW and GW protected against it

oh i ve tested geswall vs killdisk too and geswall passed. i was just wondering if rising had a setting to protect the MBR from attacks like killdisk.

Well the bug finally got to me and I had to try Rising.

Install went without incidence.

Did a full scan-found nothing.

Playing with the settings now.

A very nice surprise so far.

Smooth, quiet and very light.

Reminds me of the title of an old movie that seems to fit here:

Run Silent, Run Deep

I am more impressed at this point with Rising then I have been with other alternatives.

Time will tell.

Dan

Folks,

Lets simply not pursue any nationalistic oriented tangent discussions. The subject is Rising AV - a security product.

Regards,

Blue

Thread Status:

Not open for further replies.

BlueZannetti said:

Folks,

hi Blue, sorry for my noise, could you delete my 2 relpies.

cheers

David

As exected Rising Av and Rising FW are a nice couple, fast and light

Is the free Rising AV good enough to use as the main AV program.

Rising AV free seems to be a good solution for a non-gaming PC. I tried it out on two machines and it works like a charm on a general use PC. The gaming PC had issues with too fast drive reads and caused a game halt on several complex games Mass Effect, Oblivion, The Witcher. I think the HIPS portion may have something to do with this - or maybe not.

SourMilk out

Big Apple said:

When you setup the HIPS correctly, it is real good. With Rising FW I am not using startup control and application access for webbrowsers. On our XP home box, Opera starts within 2 secs cold and 1 sec repeat launch on an Athlon 3900 with 1,5MB and Sata 1 drive. This is the fastest I ever achieved.

So it is fast uses less CPU cycles than Avira, I am keeping it on.

By the way: Nice avitar Big Apple

SourMilk said:

Rising AV free seems to be a good solution for a non-gaming PC. I tried it out on two machines and it works like a charm on a general use PC. The gaming PC had issues with too fast drive reads and caused a game halt on several complex games Mass Effect, Oblivion, The Witcher. I think the HIPS portion may have something to do with this - or maybe not.

Change the deny options in custom setting to ask, that will do the trick. I also noticed disk throughput increase with a benckmark prog. I do not understand how it achieves this. Theoretical AV s delay read and writes because they are OFTEN implemented as a drive/file filter, so may be Rising has find an effective way to deal with this side effect of an AV engine.

When you setup the HIPS correctly, it is real good. With Rising FW I am not using startup control and application access for webbrowsers. On our XP home box, Opera starts within 2 secs cold and 1 sec repeat launch on an Athlon 3900 with 1,5MB and Sata 1 drive. This is the fastest I ever achieved.

Yes, funny avatar

Does Rising have a web shield/http scanning. This thread on the Comodo forums says that it does not.

Is a web shield feature important. My understanding is that anything a web browser downloads is in the cache, which means it must be scanned by a realtime AV. And an http scanner will work by acting as a proxy and scan http traffic before it reaches the browser. Is this correct. If so I do not see much need for a web shield since it seems both should catch it.

Defcon said:

It does not have a full webshield like some other AV s, only a script web shield. Opera can be set to cache webpages in memory, downloads are saved on disk, I do not know how other browser do this.

Using the Latest Installer Creation Tool of Rising AV Free, I created a file with the name Rav20.52.12.exe. The tool works straight forward.

But when I want to use the latest installer on a clean system, it asks for a registration key. which I don t have since I use the free release

Does anyone else have experience with this procedure.

Sorry to but in wilbert. But can anyone tell me what location the updater runs from. Although it downloads updates it can t seem to execute the update on a LUA with SRP.

I am thinking of excluding the the update. exe in hope that it works.

Thanks.

dogma said:

Sorry to but in wilbert. But can anyone tell me what location the updater runs from. Although it downloads updates it can t seem to execute the update on a LUA with SRP.

C: Program Files Rising Rav SmartUp.exe

Note: I first used Rising without file monitor, after tweaking some more now also using Rising FW with the settings I tested how much realtime file protection would slow doen the system, I noticed after a full system scan of program partition, there was no speed loss..

Note without options below and no initial C-drive scan the startup of Opera cold takes 3 secs longer, no difference in repeat start.

When using Rising be sure to select Auto protect - File Monitor

Custom level

System Optimization

skip on execution scan for files protected by the OS

Smart speed up

skip files with same hash as last disk scan when not changed, do not scan

Advanced settings

Enable smart monitor

enable above

Monitor File creation

scan every file created

My two cents thoughts

The good HIPS and smart settings of the AV make the whole going naked no AV discussion irrelevant, since Rising has an HIPS and virtually no slow down for the AV blacklist part.

Last edited: Jul 10, 2008

I just installed on fresh Vista machine and see RavMonD.exe taking up 30-40 cpu during any file access. What is going on.

Do you have ThreatFire installed, check for th HIPS active defense setup, see HIPS setup tips 1274286 postcount 57

On Vista64 the active defense is not available. On the gaming rig of my son we are trying out Rising in combination with Comodo 64 bits, he was a bit jealeous how fast we were able to get the Athlon 3900 running on XP with Rising good bye Avira free and PRSC paid

The scan takes ages, but its worth the wait because only changed programs will be checked on execution no change is minimal AV delay.

Also some screen scan displays are mixed up in English language, so the Vista64 bit 32 bit English version is not very well tested yet but heck it is only external, langage filters have no impact on internal functionality.

From gamers I heard that the best vista64 gaming performing AV is bitdefender, anyone experience with it on Vista64.

So the Rising free edition is basically the same as the paid version. Does it expire after a year. I just installed it on my laptop along with their firewall.

Just a quick note: Rising AV 20.51.22 crashed on two systems while doing the full disk scan.

This is the first time that Rising shows unstable on me.

Wilbert

Same here on the Vista64 box after receiving the update, removed Rising on the Vista64 box, did some testing on fastest IE7 start on Vista64 box and the winnner is . . Avast.

Same here on the Vista64 box after receiving the update, removed Rising on the Vista64 box, did some testing on fastest IE7 start on Vista64 box and the winnner is. . Avast.

I had installed Avast with only the disk access shield. Very nice and resource friendly.

I also tried Rising with minimal installation, it basically installs a on-demand scanner, no realtime.

Currently I m leaning towards DriveSentry, especially after the Rising crashes.

wilbertnl said:

I updated RAV free today and the version showing on mine is 20.52.32. Did a full scan and after some not so few minutes, scan finished with no hiccups. RAV s on-access protection is turned on by default if you have File Monitor module installed, and scans files only during first access of the user s session unless the file has changed to my knowledge. For file writes and file modifications, you have to enable Smart Monitor options.

Still running RAV HIPS IE script blocker concurrent with Returnil. Fast and light just like my old pc wants it lol.

Well I said to my self I was going to quit testing the new av s around. But I found my self installing Rising av and so far there have been no surprises at all. It seems to work well but time will tell. I don t find it faster than McAfee or Norton av s but to be fair almost nothing slows down my new comp. I do hope it keeps working smoothly as I sort of like it already

bigc

bigc73542 said:

Well I said to my self I was going to quit testing the new av s around.

Such disobedient self.

Such disobedient self.

I know it I should be made to spend a week at Disney World in Florida as my punishment

Nice as it might be, 151MB in my ADD/Remove applet flagged my conscience to pull that hog out within 15 minutes. Theres simply no execuse IMO in BLOATING any security app including an AV no matter if you have a 500Gb HD.

Modular and miniature is the wave of the future, not a cascade of innumerous files and such just to do what much more lighter apps are capable of with far less tapping into resources or bulking up the meat on the hard drive.

I pulled RISING right out in spite of it s so-called HIPS, thats overdoing it like Norton s in my book.

EASTER said:

Nice as it might be, 151MB in my ADD/Remove applet flagged my conscience to pull that hog out within 15 minutes. Theres simply no execuse IMO in BLOATING any security app including an AV no matter if you have a 500Gb HD.

Have you tested it. After a scan it keeps a hash of all the files scanned, when the hash is not changed, it skips the on execution scan, making it the fastest AV ever. It also skips files which are protected by NTFS and XP/Vista, so it even saves on the hash check also. Together with GW or DW you can set up an iron tough defense policy HIPS focussing of threat gates aps, Rising s HIPS on the OS-core, other applications in the mixed zone covered by active intrusion heuristics and intelligent AV check with on execution Virtualisation like Norman.

This an innovative HIPS/AV and its FREE

My dear Easter, although I reward your contributions a lot, it is humoreous to hear you say: overdoing have a look at your security sig with double and triple aps for the same SDDT hooks and overlapping defense mechanismes

Easter you are totally wrong about this one. The size of Rizing Antivirus is 151 MB because:

It has included the 75mb of files necessery for windows 98x, windows 2000/XP/Vista and windows 2003/SP/Vista 64 and another 75mb of their backups in case you want to repack a new version or reinstall/fix the installation.

Conclusion: The files needed for operating correctly probably do not exceed the size of 30-40mb. This on my vocabulary is the exact opposite of bloating.

Panagiotis

Hi Easter, i think you are being a bit harsh.

just because it uses quite alot of hard drive space doesnt mean its bloated.

did it acually slow your computer down. noticeably.

Have you tested it. After a scan it keeps a hash of all the files scanned, when the hash is not changed, it skips the on execution scan, making it the fastest AV ever. It also skips files which are protected by NTFS and XP/Vista, so it even saves on the hash check also. Together with GW or DW you can set up an iron tough defense policy HIPS focussing of threat gates aps, Rising s HIPS on the OS-core, other applications in the mixed zone covered by active intrusion heuristics and intelligent AV check with on execution Virtualisation like Norman.

Is this hash feature part of it s AV or HIPS.

Installed, updated, running nice and light.this one is a keeper for me so far. Among its nifty features it has the ability to block other connections during update to prevent any infection during the update period when the machine is vulnerable briefly.

151MB in my ADD/Remove applet flagged my conscience to pull that hog out within 15 minutes. Modular and miniature is the wave of the future

Hello Easter, good to see you stand up for disk space.

At first I was excited to respond with the size of DriveSentry 3.1 - 1.09 MB on disk according to Add/Remove.

But then I decided to check the data 202 MB, which contains virus signatures and also hashes of every file on my system.

So, I had to rethink my response: Are you sure that the hog that you removed was not mostly data.

I would like to see that Rising removes any file that is not required for my Windows release. And so far I can t install a repackaged build, because the registration key is excluded. And I use the free AV, that doesn t require a key.

And so far I can t install a repackaged build, because the registration key is excluded. And I use the free AV, that doesn t require a key.

There are 2 files that are related with the license. If I remember correctly they are. ini files.

But i do not remember their names. Anyway for finding out do the following.

1. Download and install Rising AV.

2. Without updating anything perform a repack.

3. Extract the files of the original sfx and the repacked one in 2 seperate folders.

4. Perform a checksum verification from the original folder to the repacked folder. You should see one file that is missing and a second with different hash. Those contain the free license.

The problem is that the update process itself executes under LUA with limited rights, it unzips itself in your Documents and Settings LUA folder and then tries to wtire to your program files which is not allowed under LUA.

One of my pc s is protected with Symantec Endpoint this is the what we have at work and its required to connect to corpnet. On my laptop I m trying out Rising after finding out about it from here.

The other day I copied an exe which it turns out was packed from my laptop to the pc. It was part of some shareware download program, I forget which. The copy went fine, but on the pc SEP had popped up a warning and then cleaned the file.

The malware it found was this - 2006-111201-3853-99

Now I don t know if this is not a serious threat, but it troubles me that Rising did not find it.

Edit - more details from symantec - 2006-111201-3853-99 tabid 2

The Trojan also may end the following processes:

RavMon.exe

Ravmond.EXE

IPARMOR.EXE

adam.exe

EGHOST.EXE

MAILMON.EXE

KAVPFW.EXE

FilMsg.exe

Twister.exe

So it looks like it specifically targets Rising as well as Kaspersky, yet Rising did not find it. This is very surprising.

Last edited: Jul 12, 2008

It may be because of your RAV configuration. In order for Rising to scan files written to disk, Smart Monitor must be enabled as well as its options. Adjusting File Monitor scan settings as well scan of compressed files, self-extracting files etc will improve the scope of scanning with some bit of added resource needs.

Did the malware execute.

Anyone got the Rising update working under LUA yet.

Arup said:

Anyone got the Rising update working under LUA yet.

I have no issues with RAV updates while running LUA on Windows XP3. No user action needed.

Any settings you had to do to get around it.

I m having problems with the Security Audit Tab.

It keeps telling me I have Low Security, and the detailed report states that Virus Definitions and Scan all Drives need attention. Even AFTER I update RAV definitions and scan, the status remains LOW. Rebooting the system doesn t change this.

Can anyone else confirm this.

Rising AV Ver. 20.52.52

Win XP Pro - SP3

Comodo3 FW and D

mine did that also until I rebooted a couple of times and then it showed correctly

the scan engine is not good enough,so did the monitor function.

how did it protect our pcs by this.blue screen and the slow speed of the system runtime..

but it has a good thing that is the scan engine is designed by themselves.

how did the chinese av software protect international security by its localizational thoughts..by its proactive defense.iam not trust with this.cause i can easily destroy the system by change the eigen value to detour the monitor.

a long way to go.

If you look at their client list, some pretty big names there like BOSCH Germany, Lotte and Sanyo Japan, of course, 40 million users can t be stupid enough to use this as well and neither are we.

nasdaqms said:

I would have to disagree that it is a bad av. Actually I believe it is pretty good. But I am not going to continue to use it though as I have several subscriptions to other av s still active and I might as well get something for the money I spent for them.

but it troubles me that Rising did not find it.

It would be interesting to find out if the threat would be able to execute and install itself under RAV.

It s also possible that this SEP popup is a false positive.

Tadoussac said:

It keeps telling me I have Low Security, and the detailed report states that Virus Definitions and Scan all Drives need attention. Even AFTER I update RAV definitions and scan, the status remains LOW.

Sometimes I notice the same, sometimes it looks ok High Security. I don t recognize a patern.

I don t worry too much about it.

Bloat I must ask how much space does a fresh Windows Install take up.. or how much space for a Microsoft office program or even how much space for any normal program. sorry but 151 megs. is pointless to get in a huffy over it. even on my 2 gig HD laptop that aint much space.

Not at all.

And you are positive that its updating even when you are running under LUA. Can you try a manual update and see if it gets executed under LUA.

I had rising on my Vista computer for a couple of days and it updated manually and on a schedule with LUA on in the computer without any special settings.

I had rising on my Vista computer for a couple of days and it updated manually and on a schedule with LUA on in the computer without any special settings.

Thanks Big C, here when I try to manually update it pops up with a warning about unable to write to the Rising folder. Btw was there any clash with the built in Windows defender on Vista.

I tried a test with the EICAR file. I renamed it thus:

a.. . .txt.com.

Rising AV would not allow me to access the double-extension test file. So I renamed it thus:

a.. . .com.

Rising allowed the EICAR file to run, and other AVs will not allow the file to run. This could be a very serious bug in the English version of Rising AV owing to Unicode issues.

Tested systems for this problem: XP SP 1a, SP 2 and SP 3; 2000 SP 1a through SP 4; Win9x/ME.

Can anyone recreate this problem.

how can I know what invisible bugs exist below the surface.

That is what we never know, regardless of which software. Usually we hear about them after bugfixes.

I got the same results, Rising blocked eicar here as well.

Try renaming the file as he did. that s what he is talking about it would not run one way but if he renamed it another way it ran.

I did and warning popped up, it works.

Try renaming the file as he did.

Did you try it yourself, Fajo.

I downloaded eicar.txt no pop-up, because I configured RAV to only scan excutables

Then I renamed the file to eicar.txt.com.

Then I executed the file with that name, and RAV stops it.

What else.

Exactly what I did and it blocks.

This is what happens when I try and update it under LUA.

Did you check both path names, do they exist.

What happens when you try to perform the copy yourself in a CMD session.

Yes they are legit paths, whats happening is that Rising is downloading the update into my Documents and Settings LUA folder and then trying to execute the update and write to program files which is blocked as per LUA rights.

I tried a test with the EICAR file. I renamed it thus:

No I have not tryed it Yet Have ZA im Beta testing for the moment Rising is on my list of things to try. I was just curious because one way he renamed it said it would not let it Thur then he renamed it another way and said it would. so thought maybe there was something there. but if you guys have tryed both ways and it wont let it thur then guess its a glitch with his system.

For those testing/using this product- is RAV a product that belongs in the top tier of free antivirus programs along with Avast, AVG and Antivir. Or does it belong in the second tier of free av s PC Tools, etc. That s assuming a person believes what programs are top and second tier.

Don t limit to the free ones, I think a better question would be if Rising competes with the best AV/malware detection period - such as Avira, Kaspersky. After all they offer both a paid and free product with no differences that I know of.

For those testing/using this product- is RAV a product that belongs in the top tier of free antivirus programs along with Avast, AVG and Antivir. Or does it belong in the second tier of free av s PC Tools, etc. That s assuming a person believes what programs are top and second tier.

In terms of features I would say top tier, but I can not comment of detection rates, since that is an unknown at this time.

BigC would not use it when it was 2nd tier. When a well recommended Wilders members plays with it and the HIPS features of AV make it a good overall choice for me.

My criteria

- focusses on protecting the core of your OS HIPS zero day protection

- smart scanning features

- light on resources

- AVG, AVAST like detection results hey Avira is better but a lot slower and lacks the HIPS feature

Rising has smart real time protection, only downside is that a full scan takes 35 minutes 250 GB disk, upside is that it checks the calculated bin-hash of these scanned programs and does not perform an on-exection scan when programs seems to be unchanged with the hash check.

wilbertnl arup

EICAR detection fails if it is renamed and the file name is too long, as was confirmed by seven others who ditched Rising after we found another bad hole. If file creation and file modification are turned of temporarily, File Monitor allows arbitrary bad code to run even with the HIPS set to the max, again confirmed by several others.

I m steering clear of this stuff for the time being. Rising has still some holes fix. And a hacked web page article containing a trojan, and which discusses the addons for the FF browser, was not detected by Rising. The code ran.

We also found a conflict between the file monitor whitelist and the creation and modification settings: whitelisting does not work always.

Last edited: Jul 13, 2008

Let me just say that I was a content AVG free 7.5 customer.

I also was beta tester for Trendmicro when this product was considered number 1.

But with the release of AVG 8, I was unhappy because of the decreased responsiveness of my system.

Trendmicro became a mammoth on my system.

I turned away from Trendmicro and AVG, and I m happy with Rising as a valuable alternative.

BigC would not use it when it was 2nd tier. When a well recommended Wilders members plays with it and the HIPS features of AV make it a good overall choice for me.

Thanks for the confidence vote. I have not found anything worng with Rising as of yet, and It looks as if I might not. I had rising installed and then removed it but the more I thought about the different modules of protection included I went ahead and reinstalled it and while I was at it I also installed the Rising firewall. I am going to give it a good honest run for at least a month and see if I can cause it to screw up in some manner. Although it does have pretty good self protection against meddling. Captha code required to access some of the system protection modules. It seems like a pretty goot idea to me. But we shall see, but as of now it seems to be doing very well.

I renamed the EICAR test file as so, and Rising detected it.

Pseudo said:

Sorry for the stupid question, but what happens when you let Rising clean the virus.

Does it delete the whole file or does it disinfect it.

PiCo said:

When I clean the EICAR test file, it quarantines it. Haven t gotten to try it on any real virus.

Apart from the update bug which is probably an exception in my case probably due to x64 XP, I truly like this light AV, brings the response back in surfing and makes the entire system snappier. You can t ask for a lighter more responsive AV.

The Eicar test virus is not a real virus, the file is actually a text file that you can open in any text editor.

But it also is a binary and executable. So you can run it and then it prints the text EICAR-STANDARD-ANTIVIRUS-TEST-FILE.

I don t think there is anything to clean in this file. The purpose is to test anti-virus software.

Maybe its a good av but it s still my pc and not Risings. It comes across as a little bossy to me.

Your choice..I find it quite light, specially for a resource challenged PCs and for a free AV, one of the most full featured, even more so than Avast.

PierreF said:

I don t like the Rising logo in the blue windows startup screen.

Go to Detailed Settings Other Settings. Then untick Show pre-login status.

It will put in the quarantaine RAVBIN folder, with RAVSTORE.exe or the virus quarantaine shortcut you can empty the ravbin/delete or restore quarantained files

Arub, this was my first impression about Rising. Its good that its light, many av s are too heavy. It installed smoothly only updating took a while large update.

Thank You bman412

Can the skin be changed easily..The black GUI looks hideous, and hard to read on my monitor.

ellison.

It comes across as a little bossy to me.

I m not sure what you are trying to accomplish.

Should we abandon Rising because you are this sensitive.

The recent Rising updates seemed to have fixed the unicode issue

That is actually the part that impresses me about RAV.

Every day I notice an update. And I m able to create an installation package which I can use to install anywhere.

It gives me a good feeling to go to a family member and being able to install the latest antivirus definitions out of the box.

Sure we might find malfunctioning that could raise our doubts, but this baby is growing fast.

I have turned away from famous AV products because of their resource requirements. I remember installing a rate 1 AV and having to download 150 MB updates right after installation

I have been looking around and thinking of low resource solutions, and so far RAV fits the bill.

I have both the AV and firewall and I like the icons on the login screen. They are well designed and let me know my pc is protected, and I like the little tiger

Can the skin be changed easily.

Since the products have skinning builtin, I would imagine its a matter of time before they release more. Not that I care for the feature much, and I like the default dark skin just fine.

That is actually the part that impresses me about RAV

Yeah, the guys at Rising are really on the ball, and if I pay for an AV/HIPS, it will more than likely be this one. I need to look at their paid version. If their FW is as good as their AV/HIPS combo, then Rising is keeper.

Rising has free version of AV and Firewall with no nag/update screen, and the website also has no info. Can anyone tell me what the differences are between the free and paid versions.

Anyone here running Rising under XP x64 with LUA and have manual update issues.

Not that I care for the feature much, and I like the default dark skin just fine.

I agree, the default skin in pretty nice in my opinion. I like the GUI.

Is there a way to download RAV as a zip file. I m using an ancient Win98 system

with dialup and according to the download screen it is a 4-5 hour download. Thanks for your help.

I think the download is an exe, but its already compressed, so zip won t make it smaller. I noticed there is a way to create a custom installer, so maybe there is a way to make it smaller.

It s good to see a homemade AV discussed here.However,I have to say I can t provide a little support for this AV.

Rising is the most used AV in China for home users.There are several reasons I think:

1.Most home users don t care too much about security.

2.Some may care but don t know how.

3.Since they don t care or know how to,let alone pay some money for it.

4.Few of them ever heard of Avira or other AVs but they do know the green umbrella and the yellow lion. Besides,it s free.

The main Reason I don t like it is:

Most infected computers I helped to treat were installed Rising AV I m no expert but got some virus knowledge. Those so severely infected computers were scanned with Rising AV and it told you NOTHING. I turned to other AVs and they might report dozens of viruses.

Maybe it s because those homemade viruses are also targeting Rising AV as well for it s the most famous AV here. So many of them can bypass Rising s detection so the result is usually nothing.

Despite all of that,I think Rising is light and scans fast which is less important than the detection rate for an AV.

I don t know much about its HIPS.

In that case the VB tests are irrelevant it seems where Rising didn t do a shabby job put up against some industry giants.

Rising s forte is prevention via its HIPS module and therein lies its basic problem when it comes to a home user or noob. Typically most casual users would have no idea to deal with HIPS pop ups and would usually allow them instead of blocking them thereby making it easy to get infected.

Overall I find Rising to be a refreshing change, its approach to AV is the future, Avira and Avast are already considering HIPS for their future offerings so all in all, Rising is a well balanced and free offering.

I actually purchased a license for rising in 2004 i wonder if that old serial still works. and used it for a while, the gui was so much nicer then a little cartoonish but a lot more pleasant on the eye. Wish i had some pics to show you, but alas i cant find any.Perhaps its my age but i really cant find anything attractive about this gui at all.

ellison64

I write software all day long, and recently switched to the dark side - my Visual Studio code editor is now white text on dark gray. Its much easier on the eyes since I spend 10 hours in front of my pc, and I ve started switching other Windows apps to a dark theme as well.

So hangon a minute - for Vista users there s no HIPS and the AV seems to be so-so, not as good as say Avira. So the only plus point in Rising s favor is its very light and fast.

So hangon a minute - for Vista users there s no HIPS and the AV seems to be so-so, not as good as say Avira. So the only plus point in Rising s favor is its very light and fast.

That s my opinion.

x64 XP and Vista.

Only x64 OS like Vista x64 and XP x64, otherwise all features there and the HIPS more than makes up for the lack of any other attributes.

I see, I thought it was 32 and 64 bit Vista. Though I shoud ve realised Vista32 doesn t prevent this sort of thing.

So a question, do other HIPS also not work on Vista 64 due to the driver protection. I guess this would also imply that HIPS is not needed on it because malware also can t do bad things.

Technically as far as I know, there are only few HIPS if any for x64, MS s own x64 Defender with Sprynet enabled is one. You don t need any HIPS on a x64 with LUA SRP DEP enabled and a AV. Comodo works as a full fledged HIPS Firewall under x64.

Hi All, Arup and Kees,

I have been watching this thread with interest. As about 6 weeks ago my AVG 7.5 updated itself and thereafter would not work and crashed, I have tried a few AV s in the meantime but uninstalled them due to one reason or another. slowing the system/hanging etc so I have been naked whilst surfing for that time, I was only running a hardened Opera browser/Kerio 4.1.5 firewall with customised settings and TF.

Yesterday I scanned my XP system with Super Antispyware/A squared, and Clamwin AV on demand only, which showed my system was absolutely clean after being naked for 6 weeks.

After I installed Rising AV free and customised it as per Kees s suggestions. I am very happy with it so far,-- Running light and fine. RAV also didn t find anything on my PC on a full scan.

Anyhow I have 2 questions about RAV.

Firstly, I see the installation wizard fires up each time there is a smartupdate, why is this and is it neccessary. Other Av s don t do this to update Virus definitions.

Second, I keep seeing an alert from Application potection -- attempted action of injection of DLL, requester-- Opera browser, the action data being kerio FW GKH/DLL, it is set to ASK. The problem is the alert is gone before I get chance to do anything about it, I have looked but cannot see if the alerts can be configured to last a little longer. Any ideas.

Thanks and Regards Gordon

ghodgson said:

I have checked Silent SmartUpdate and never notice the daily update other than the increment of release number.

hello i don t know if this has been mentioned but does anyone know where you can see what each update does.

i m not talking about the relatively minor definition updates, but the major program updates. just today a whole lot of. dlls and exes were updated.

The Rising AV updates still haven t cured the unicode issue, as I thought had been corrected. And there are double-dot issues. Try renaming the EICAR test file exactly like this: a. spaces bar space bar . .js.php.txt. .com.

Does anyone find Rising catching a file so named. And if one does, try renaming it with Arabic or Russian fonts before the space . .. com. or worse, hidden characters.

Also, the AV alone is hooking certain keys which are best left alone for Windows to handle. Another week of this without a patch from Rising, and Rising is going to the recycle bin.

Last edited: Jul 16, 2008

timcan said:

Hi, dw2108

Did I do this rename correctly.This is the result I got from rising.

I get that too, but do you get the File Monitor alerting you while saving it or by trying to open it. Also do get that if spaces are in the name of the file.

Like this, maybe.

a. com

Just blank space between the a and. com

but do you get the File Monitor alerting you while saving it or by trying to open it.

Hi, when opening.

For those using the HIPS feature, you may want to tweak the settings a bit. With system enforcement set on high which should protect a number of critical processes from termination, pskill still can terminate the processes.

Adding the processes to Application protection and refusing termination resolves this hopefully

I barely dare to say it to a Kerio user, but have a look at the rising FW or either remove tampering protection from Opera, because this can not controlled on program level or in this case the Kerio dll

bman412 said:

Better to use a custom setup as explained in 1274286 postcount 57

Kees1958

I barely dare to say it to a Kerio user, but have a look at the rising FW or either remove tampering protection from Opera, because this can not controlled on program level or in this case the Kerio dll

thanks Kees, I really like my Kerio 4.1.5 paid FW and would be loathe to remove it. It has given me excellent service to date. So I have removed tampering protection from Opera, so will see how we go.

Cheers Gordon

OK, I admit it. I m addicted to Rising AV.

I like Rising AV and FW a lot so far.

Just out of curiosity, who has configured the HIPS this way,

I followed the photos you posted.

Hi Kees.I have.. but occasionally tweaking to a small degree to stop pop-ups whilst maintaining security--I hope.

Gordon

TIPS/suggestions for improvement, I will promise to collect them and ran some testing against it to discover impact. I always like useability improvements less pop-ups, so I welcome suggestions.

Reason for doing so: my wife sort of allows every pop-up on the XP box, so user interaction should be as less as possible is the weakest link in the chain anyway and my son does not want game interfering on his Vista64 box.

I was using NOD32 and Commodo D and WinPatrol. After a month, I got tired of the bloat in Commodo.

So, for the last several days, thanks to your excellent posts, I have also tried DW with Threatfire and Alvira Antivir. I also tried GW, but had some problems.

Now I have DW 2.45 beta and Rising AV and FW with your settings. I also switched WinPatrol for Anvir Task Manager after reading one of your posts. I kept Alvira for the right click Scan On Demand only for downloads, just as a double check. I use FD-ISR Pro and ShadowProtect for ISR and imaging.

So far, your setup has been tight as a tick, fun to use, and very light on resources. Thanks to you I am really beginning to understand this stuff. Your help is much appreciated.

Silver

Today I received an Email supposedly from UPS saying that a package was undeliverable. There was an attachment with the email obviously malware. I did some checking and UPS is aware of it and sent out warnings. Panda was the first company out with a warning that the file contained a trojan.

I had Rising on my system for a trial. I saved the attachment to a directory and had Rising scan it. Nothing found.

Bye Bye Rising.

cruelsister said:

Today I received an Email supposedly from UPS saying that a package was undeliverable. There was an attachment with the email obviously malware. I did some checking and UPS is aware of it and sent out warnings. Panda was the first company out with a warning that the file contained a trojan.

If you had DW, that would not have been a problem as long as you have your mail reader set to Untrusted.

Rising of all AVs has a different approach relying heavily on HIPS than just signatures alone which makes sense on a system that doesn t have net access or updates are not that frequent. I prefer it to just updates as there can be a gap between updates and getting infected. HIPS is the wave of future for all AVs, even Avira is conteplating it for their next version.

It seems that the assumption being made is that the HIPS portion of Rising is high quality. Personally I would question this as the AV already proved itself as lacking.

Although I like to fish in troubled waters by trying new security products, I think that it s time to throw this one back.

simmikie said:

9 trojan-psw.qqcy.12.b not absolutely sure about the cy and have since deleted Rising poped-up, i clicked delete, trojan ran anyway,

could it have been : trojan-psw.qqspy.12.b. hmm i wish you still had the sample i d love to test it against other popular HIPS.

pretty disappointed

i agree, since rising mentions that it monitors global hooks as part of it s system reinforcement. what s more disappointing is that it seems that there s no way to contact these people to let them know what s going on.

to Risings credit, it did identify the trojan, but was unable to stop it from running. i am not well versed enough to know if it was bypassed by utilyzing hooks or not.

i should be able to find the sample again. i will pm you when i do.

Mike

Mike good testing, I can not recal on a different image now whether I had set global hook testing on in System Reïnforcement.

No, you didn t set it on. It is now set on in my setup.

Thanks for the info.

Silver,

Would you post a screenshot of it in the original thread, I am on a different image now

Did anyone test RAV hips against aklt.exe keylogger test. I get varying results when I tested it but my general conclusion was that RAV hips fails against aklt.exe.

Did anyone test RAV hips against aklt.exe keylogger test. I get varying results when I tested it but my general conclusion was that RAV hips fails against aklt.exe.

i did, and yes it does.

AVG 8 detected this, c my thread on this.

Rising is not depending on signature and detection, rather HIPS where even if it goes past the scanner, it would be blocked. Different concept.

Rising is not depending on signature and detection, rather HIPS where even if it goes past the scanner, it would be blocked. Different concept.

that s why post 244 in this thread is so scary. rising detected the trojan but couldn t stop it from running even after the user selected delete. what s worse the HIPS portion of rising also failed to stop the trojan from doing it s thing.

that s pretty discouraging.

exactly. one really does not even need to run live malware to see this in action. i tested first with Matousecs full suite of POC s/Leaktest, before and after Kees tweeks yes i realise they are merely leak-test, but they still involve process manipulations, that test HIPS more precisely than FW s. what would happen is Risng one pop-up on several of the test, but the end result, after applying deny/delete/quarantee, or whatever responses were offered, would occur anyway. those observations are what actually made me test against real malware.

again out of a superbly miniscule sampling of malware, Rising detected and stopped 8 of 11. number 9 came up Risng told me this is a bad thing do you want to eradicate it. i chose yes, the malware scoffed and went on it s business. Rising AV did not stay on my system long enough to see samples 10 11.

i don t mind an HIPS/AV missing something, because they all do, and always will. but i do expect a security app to be capable of stopping what it does findperiod, no exceptions.

The scary thing was the blind faith placed in the HIPS portion of the product after the AV detection part was shown to be lacking.

Rising stopped cold the first 8, got to 9 trojan-psw.qqcy.12.b not absolutely sure about the cy and have since deleted Rising poped-up, i clicked delete, trojan ran anyway, jumped Returnils system drive protection and infected my D E drives. fortunately i had AVZ onboard which found and cleaned d: d.exe and the same for E drive, as well as autorun.inf s.

Was ist the same or a similar trojan like in this thread.

216224

If so, it seems not to be an exclusive Rising problem.

Or bye bye Rising and bye bye NOD.

Cheers

An interesting test Rising about here.

Good to see that, that means they are improving and becoming a viable free alternative in the likes of Avira and Avast.

Did rising free av got HIPS..

im wondering about install the free version and uninstall my avira free

Last edited: Aug 7, 2008

Comes Rising AntiVirus Free with Rising Firewall.

lunaticdreams said:

Rising AV free comes with HIPS which works under x32 OS but not x64.

What were the settings of the Rising AV HIPS modules, and would Rising DARE test its AV with the HIPS completely disabled.

MAJOR EDIT: Removing Rising AV from a Win 2000 PC could lead to a reinstall of Windows -- 2 PCs thus far. And I think, Avira is MUCH more safe on XP PCs.

Last edited: Aug 10, 2008

No way it s of any value without the HIPS. Case in point is an email that s going around yesterday and today regarding upgrading to IE7 seemed to be from Microsoft. Contained a trojan, of course. Actually it was just a renamed Antivirus XP 2008 trojan that s been around for a while. Rising was one of the 4 out of 36 that missed it Virustotal.

Better hope the HIPS is of real high quality; you ll need it.

UPDATE

It s very easy to reproduce in XP the problems described above for 2000.

Before you install this stuff, ask yourself, Do I want to live with this AV, which is not at all the the best.

Case in point is an email that s going around yesterday and today regarding upgrading to IE7 seemed to be from Microsoft. Contained a trojan, of course.

WOW.

These kind of emails don t even get any chance to reach my system at all, they are filtered out by the excellent server side filters of my free email service.

Also: AV s don t function on SSL connections, and that is what I use for email.

I don t need an anti virus at all for this basic protection.

Each and every solution has pro s and cons. No matter if it is AV or HIPS that is functioning, together Rising offers a lightweight solution without nagging. And that s what I appreciate.

I have to admit, you re right: who among us has caught in one night EVERY virus, worm, trojan or malware covered by, say, Avira.

Rising is an excellent free alternative and offers quite a lot as well, the HIPS alone is worth its weight in gold.

Rising offers a lightweight solution without nagging.

Thanks for the info; I m using Rising Firewall Free and I have similar thought. I ll try it AntiVirus as soon as possible.

Noticed that Rising support is good - quick feedback.

First of all you have to have confidence in this test which I don t. It would be different if all the testing sites were anywhere near close in their results, but there is such a difference in their findings that it about removes any confidene in any of these tests.

Testing tests

1- One HERE.

2- More

Source.

Rising just gave me a false positive on Spyware Blaster. However, it did not do it when the program opened, or when I updated it. It only detected it when I closed Spyware Blaster down, and Rising offered to delete the file. I found this to be very odd behavior. Obviously I want my AV to stop a malicious program from running in the first place, not after the fact. I even tested it with just opening Spyware Blaster, doing nothing else but closing. I thought perhaps it didn t apply its updates until it closed and maybe that was what caused Rising to catch it then. However, just opening and closing it was enough. Rising caught it again - when I closed Spyware Blaster.

I was hoping for good things from this program as it seemed very thorough in its features was light on system resources at the same time. Needless to say, I uninstalled it.

There is no option Scan with Rising Antivirus in context menu of Free Commander, only in context menu of Windows Explorer.

Discussion in other anti-virus software started by pykko, Jun 24, 2008.

LOL, most Americans say the same thing about, Made In China we don t like it either

Sheesh if even the Chinese don t like this one, then it must really be rubbish

Most Americans may not like Made in China but the trade balance clearly shows that they buy the most from China, what would Wal Mart be today without Chinese stuff, same goes for rest of the world. The very PC I am using has Chinese made components and the fact we can now buy almost yesterday s mainframe level performance PC is due to China s capability of giving us what we want at a price that we can afford to.

JediSB said:

Rising just gave me a false positive on Spyware Blaster. However, it did not do it when the program opened, or when I updated it. It only detected it when I closed Spyware Blaster down, and Rising offered to delete the file. I found this to be very odd behavior. Obviously I want my AV to stop a malicious program from running in the first place, not after the fact. I even tested it with just opening Spyware Blaster, doing nothing else but closing. I thought perhaps it didn t apply its updates until it closed and maybe that was what caused Rising to catch it then. However, just opening and closing it was enough. Rising caught it again - when I closed Spyware Blaster.

I have also noticed that Rising pops up when I use Spywareblaster.

I don t think that the executable itself triggers the alarm but some of the dummy Explorer data for ActiveX extensions.

That s why a second time launching the program doesn t rise a trigger again, I think. I solved the false alarm by whitelisting Spywareblaster.

Hope it helps.

Hmm I got a trigger again the second time as well.

I was looking at using Rising on a PC I m building from spare parts for my 9 year old son. Since the machine is using old parts its not going to be a screamer by any stretch of the imagination. 2.8GHz P4, 80GB ATA133 HD, 1GB of PC3200 RAM. Therefore I was looking for something free, light on resources, and that provided good protection. I think I m going to go with Avira. Thanks for your advise though.

Hmm I got a trigger again the second time as well.

Avira will suit you fineadd Windows Defender in Spynet mode and you have Spyware and HIPS protection as well.

There are much better solutions available. The definitions for Rising are abysmal, and even ClamAv outperformed it on the recent AV-Test.org comparison. About the only plus is that it can run on Windows Server 2008.

There are much better solutions available.

Unquestionably, but I was not searching for a good av - KIS user - I wish to know something more about Rising. Thanks.

is rising detection ok. any reviews.

So far in tests there are doing lousy but again if its doing what you want it to do then go with it.

Rising depends more on its HIPS than on signature for protection, its a different approach but HIPS will block any suspicious activity as well.

If memory serves the Rising HIPS portion didn t flag any of the AKLT modules. Who knows what else could get passed it.

Tarnak said:

Looks like my use of Rising AV is about to come to an end. Certainly not going to pay for it.

I liked it for what it is/was.

Lol. free product was a stretch but now that they are charging for it. there user base will drop drastically.

IT S RUNNING FINE HERE IN MY OFFICE COMPUTER

I too am/was a Rising AV FREE user, but today I got the same message, Your license will expire in 31 days and must pay for a new license, needless to say I won t, because I took it on as free with a lifetime license. Who are they trying to kid.

I have written to them saying I want a free lifetime license-- as that is how it was described when downloaded. Watch this space.

I know it s a matter of principle Gordon, but I d stick to some great free alternatives that have been free for a long time, and will continue to be free.

No use flogging a dead horse.

Hello everyone

Don t worry. Rising AV is still free. I don t know about the firewall. I ll have to ask. See picture below. I asked them.

Hi,

I sure would be pissed if they did the business in this fashion. Luckily, I am using Twister AV made in China with the lifetime license of 29.99 and no peeps whatsoever. The support department has been responsive at all my inquiries.

It s still free. Maybe they updated the license app regguide and had problems with the free users. It s all fixed now.

tekkaman said:

It s still free. Maybe they updated the license app regguide and had problems with the free users. It s all fixed now.

They were giving you a glimpse of whats to come.

As for now. I wont be using this product. Free or not Free.

Yes but what you don t seem to see is what is between the lines. For life could simply be a VERSION Change or even a Update that officially ENDS the products life for that period. Microsoft does it all the time so do many other company s. You have to understand a products Life to understand what they mean by free for life.

generally for life in the business world means for the life of the product ; That product being Rising 2008 AV. Just like if you buy a PNY graphics card, it boasts a lifetime warranty, but if you try to send it in for repairs 6 years from now, you ll find the warranty is null and void because the product is no longer manufactured.

So yes, Rising AV 2008 will be free for life. It doesn t mean there will be UPDATES for life, and it doesn t mean 2009 will be free.

My post yesterday

I have written to them saying I want a free lifetime license-- as that is how it was described when downloaded. Watch this space.

Hi, Received a reply from Rising today and they say 2008 will remain free and 2009 also.

The popups/nag screens have gone as they said.

Sorry to make you confused about Rising Antivirus Free Edition. We have fixed this issue which you have mentioned and this is caused by system maintenance task.

To fix this issue, you need to update you Rising Antivirus Free Edition and then the popup window will not appeared any more.

We promise Rising Antivirus Free Edition is FREE antivirus software, and also provide full-function and service in free.

RISING Antivirus Free Edition is a solution with no cost to personal users for the life of RISING Antivirus 2008 RISING will keep the same policy when Rising Antivirus 2009 release.

Best wishes,

Jessica Zhou

I have kept their e mail to remind them of what they said to me just in case.

the firewall is still free, might not be in 09 though. It had the same bug as the AV, and apparently it was fixed. one of these days I ll get around to reinstalling it, but as of right now I m enjoying the Vista firewall behind my router. Speedy startup and whatnot.

Find the best alternative to Avast Free Antivirus 2016 in Softonic. Compare and download free programs for PC: Avast Free Antivirus 2016, AVG AntiVirus Free.

Jan 04, 2016  While I doubt that Rising Antivirus Free Edition would top anyone s list of the most attractive antivirus 18 Best Free Antivirus Programs for 2016.

AVG AntiVirus FREE; AVG AntiVirus; AVG Internet Security; AVG Internet Security Business Edition; AVG AntiVirus Business Edition; AVG File Server Edition;.

Comparison of antivirus software This is a non-exhaustive list of AVG Linux Server Edition: Yes: Yes: Yes: No: No: No: No: Yes: Yes: No: Yes: No: Proprietary: Non.

rising antivirus free edition comparison

Should I remove Rising Antivirus by Beijing Rising Information Technology. RISING Antivirus Free Edition protects your computers In comparison to the total.

rising antivirus free edition comparison

Review of Rising AntiVirus 2011 Free Edition: Rising AntiVirus Free Edition is a program from Chinese manufacturer Beijing See Installation Time Comparison.

rising antivirus free edition comparison rising antivirus free edition comparison

The free edition of Panda Cloud Antivirus comes with real Rising Antivirus. They used to publish a comparison chart to show the differences between the.

Rising AV - free edition

See Installation Time Comparison BitDefender Free AntiVirus scored a total of 49 out of 96 points when compared to the Rising AntiVirus 2011 Free Edition.

rising antivirus free edition comparison