Antimalware, firewall, and other security programs for Windows XP working in 2023 and hopefully beyond

[AstroSkipper]

On 12/17/2023 at 1:10 PM, AstroSkipper said:

Zemana AntiMalware

Zemana AntiMalware is a second opinion malware scanner designed to rescue your computer from malware that have infected a computer despite all the security measures one has taken. There's no need to tinker with confusing settings. With years of experience built-in, it just works "out of the box". Zemana AntiMalware is highly optimized and lightweight with virus definitions stored in the cloud, not cluttering up the local drive. Zemana AntiMalware can be used in two versions, Free or Premium. A valid license is only needed for the Premium version. Zemana AntiMalware 2.74.2.150 is the last compatible version with Windows XP. The more recent version v3 are no longer XP-compatible contrary to the information on the Zemana's homepage.

Feature comparison Free vs. Premium:

Homepage: https://zemana.com/us/antimalware.html

Version number: 2.74.2.150

Date of release: 21.08.2017

System requirements:

Windows 10, Windows 8, Windows Vista, Windows, Windows 7, Windows XP

Release notes: https://zemana.com/us/whats-new3aa7.html?ProductID=2

Reviews:

https://davescomputertips.com/zemana-antimalware-review/

https://www.wizcase.com/antivirus/zemana/

Download link: https://softradar.com/zemana-antimalware/2.74.2.150/

Screenshots:









Zemana Anti-Malware is indeed a lightweight tool and IMHO, rather meant to be used as an additional security layer. It is definitely not a fully fledged antivirus or antimalware programme. Therefore, I personally would use it only as an on-demand scanner to get a second opinion even though the premium version offers a real-time protection after all which is either paid for or realised through a giveaway license. Zemana Anti-Malware uses cloud engines for local scanning. Thus, no local definition updates are needed but logically a working internet connection. What kind of scan engines it uses in these days is kept rather secret. There seem to be several, but the company's information policy is modest and rather disinformative. I have the impression that they don't want to show their cards anymore contrary to the past. Furthermore, the current version 3.2.28 is listed as XP-compatible. This is simply nonsense and misleading. All versions 3.x start directly with an error message under Windows XP and are therefore not XP-compatible. The good is the much older version 2.74.2.150 still works flawlessly under Windows XP in these days which has just been tested again by me.

Cheers, AstroSkipper

I have written this article about Zemana Anti-Malware to the best of my knowledge and belief and as informatively as possible. For this purpose, I installed the programme on my second Windows XP partition, tested the basic functions and took screenshots. Now, I am curious about your opinions. Is there anyone here who is using this programme or has used it for some time in the last 6 years?  I am interested in meaningful facts and useful information for potential users. 

PS: I had to write this post a second time as the original one suddenly no longer existed after the maintenance work here on MSFN. 

Edited December 21, 2023 by AstroSkipper
Update of content

[Saxon]

Comodo Internet Security 5.9, which despite following the security industry naming convention for paid suites is actually the name of Comodo's free suite, now supports the company's TrustConnect VPN service.

TrustConnect uses 128-bit encryption to provide addition Wi-Fi protection

Source article:

https://ethicalhacking.do.am/news/comodo_adds_vpn_attacks_competitors/2011-12-22-257

I wonder, how good is that VPN?

[AstroSkipper]

39 minutes ago, Saxon said:

Comodo Internet Security 5.9, which despite following the security industry naming convention for paid suites is actually the name of Comodo's free suite, now supports the company's TrustConnect VPN service.

TrustConnect uses 128-bit encryption to provide addition Wi-Fi protection

Source article:

https://ethicalhacking.do.am/news/comodo_adds_vpn_attacks_competitors/2011-12-22-257

I wonder, how good is that VPN?

Comodo Internet Security 5.9 is from 2011/2012. So, it is very old. I doubt that these old VPN implementations still work at all today in Windows XP.  VPN in Windows XP is a very specialised topic and has become very problematic. 

Edited December 21, 2023 by AstroSkipper

[Saxon]

3 hours ago, AstroSkipper said:

Comodo Internet Security 5.9 is from 2011/2012. So, it is very old. I doubt that these old VPN implementations still work at all today in Windows XP.  VPN in Windows XP is a very specialised topic and has become very problematic. 

@AstroSkipper, you're absolutely right, the VPN discussion belongs in another thread, therefore I'll post the following questions there.

I just thought since it's embedded in the Comodo Internet Security 5.9 package, it's still related.

[AstroSkipper]

10 minutes ago, Saxon said:

@AstroSkipper, you're absolutely right, the VPN discussion belongs in another thread, therefore I'll post the following questions there.

I just thought since it's embedded in the Comodo Internet Security 5.9 package, it's still related.

All is good.  I didn't consider your post off-topic.  But such VPN implementions are simply too old and probably won't work in these days. The VPN protocols have changed completely on most servers and are no longer XP-compatible in most cases. Of course, the proof is in the pudding. Someone could test it. 

[Milkinis]

https://www.ftc.gov/news-events/news/press-releases/2024/02/ftc-order-will-ban-avast-selling-browsing-data-advertising-purposes-require-it-pay-165-million-over

[Vistapocalypse]

2 hours ago, Milkinis said:

https://www.ftc.gov/news-events/news/press-releases/2024/02/ftc-order-will-ban-avast-selling-browsing-data-advertising-purposes-require-it-pay-165-million-over

The link states: “From 2014 to 2020, Jumpshot sold browsing information that Avast had collected...” This was well known to many of us years ago, but the U.S. Federal Trade Commission has acted at a glacial pace. 

[Ascii2]

I tried Kaspersky Embedded Systems Security 3.1.0.461 and Kaspersky Embedded Systems Security 3.3.0.87 on Windows XP Professional with Service Pack 3.

Both versions (version series) would replace or modify the following system files:

wzcsvc.dll (Wireless Zero Configuration Service)
shimgvw.dll (Windows Picture and Fax Viewer)

Kaspersky Embedded Systems Security 3.1.0.461 also modifies:

mfc42u.dll (MFCDLL Shared Library - Retail Version)

Kaspersky Embedded Systems Security 3.3.0.87 also modifies:

pdh.dll (Windows Performance Data Helper DLL)
userenv.dll (Userenv)
netapi32.dll (Net Win32 API DLL)
secur32.dll (Security Support Provider Interface)
user32.dll (Windows XP USER API Client DLL)
mfc42.dll (MFCDLL Shared Library - Retail Version)
usp10.dll (Uniscribe Unicode script processor)
shlwapi.dll (Shell Light-weight Utility Library)
ws2_32.dll (Windows Socket 2.0 32-Bit DLL)
msasn1.dll (ASN.1 Runtime APIs)
wintrust.dll (Microsoft Trust Verification APIs)
mscms.dll (Microsoft Color Matching System DLL)
olepro32.dll ()
fastprox.dll (WMI)
odbc32.dll (Microsoft Data Access - ODBC Driver Manager)
winmm.dll (MCI API DLL)
atl.dll (ATL Module for Windows XP (Unicode))
wldap32.dll (Win32 LDAP API DLL)
wmiprvse.exe (WMI)

It is not clear why the products do so.  After restoring the original files, the original files were again replaced with Kaspersky modified ones after a few reboots.

Edited March 5, 2024 by Ascii2

[shelby]

360 Total Security Essential has not update 3 months since i have it

[Vistapocalypse]

As Imacri has pointed out elsewhere, Norton has recently announced EOL for users running Windows XP:

https://community.norton.com/en/forums/end-life-announcement-norton-security-software-windows-xp-windows-vista-and-windows-7-sp0-3

[D.Draker]

15 hours ago, Ascii2 said:

I tried Kaspersky Embedded Systems Security 3.1.0.461 and Kaspersky Embedded Systems Security 3.3.0.87 on Windows XP Professional with Service Pack 3.

Both versions (version series) would replace or modify the following system files:

wzcsvc.dll (Wireless Zero Configuration Service)
shimgvw.dll (Windows Picture and Fax Viewer)

It is not clear why the product does so.  After restoring the original files, the original files were again replaced with Kaspersky modified ones after a few reboots.

Thank you! Very interesting facts from a fellow MSFNer!  It's no wonder that spyware replaces those original Windows files.

wzcsvc.dll (Wireless Zero Configuration Service) - convenient to  send additional hidden data via side channels (a well known way of stealing data).

shimgvw.dll (Windows Picture and Fax Viewer) convenient to view and make screengrabs of what you do on your PC.

There are multiple official governmental warnings against using that software.

 

[Ascii2]

10 hours ago, D.Draker said:

Thank you! Very interesting facts from a fellow MSFNer!  It's no wonder that spyware replaces those original Windows files.

wzcsvc.dll (Wireless Zero Configuration Service) - convenient to  send additional hidden data via side channels (a well known way of stealing data).

shimgvw.dll (Windows Picture and Fax Viewer) convenient to view and make screengrabs of what you do on your PC.

There are multiple official governmental warnings against using that software.

 

I adjusted the report.  I had only included the common items modified.  Kaspersky Embedded Systems Security 3.3.0.87 modifies much more on Windows XP Professional with Service Pack 3.

With regards to the official government warnings, depending on the governments, that in itself should not be enough cause of concern; governments are often not truthful in various reports nor are many of the major software vendors align with various government.  Many of the security software vendors should not really be trusted, but some are still competent (some more than others) in finding and handling other threats.

Edited March 5, 2024 by Ascii2

[AstroSkipper]

On 3/4/2024 at 10:53 AM, shelby said:

360 Total Security Essential has not update 3 months since i have it

Thanks for reporting! Unfortunately, your report is a bit unspecific. Which version of 360 Total Security Essential do you refer to? And what exactly is no longer being updated? The programme or the virus definitions or even both? FYI, please be aware of what I have already investigated and written here: https://msfn.org/board/topic/184730-antimalware-firewall-and-other-security-programs-for-windows-xp-working-in-2023-and-hopefully-beyond/?do=findComment&comment=1253715

 

Edited March 5, 2024 by AstroSkipper

[shelby]

5 hours ago, AstroSkipper said:

Thanks for reporting! Unfortunately, your report is a bit unspecific. Which version of 360 Total Security Essential do you refer to? And what exactly is no longer being updated? The programme or the virus definitions or even both? FYI, please be aware of what I have already investigated and written here: https://msfn.org/board/topic/184730-antimalware-firewall-and-other-security-programs-for-windows-xp-working-in-2023-and-hopefully-beyond/?do=findComment&comment=1253715

 

This is i have

[AstroSkipper]

1 hour ago, shelby said:

This is i have

360 Total Security Essential 8.8.0.1119 will never get any Avira database updates again. As already stated in my quoted post, there were (and hopefully are) still some further antivirus engines which were used by this version. However, these were cloud-based. Therefore, no local updates are needed anymore.  The last date of your updating from 12-12-2023 was probably the day when you got the obsolete Avira defintion updates from 2021. Other updates you'll presumably never see. All in all, this version is no longer what it used to be, and I haven't used it for a long time.  Maybe, it is time for you to switch to another antimalware programme.

Edited March 5, 2024 by AstroSkipper
Update of content