Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

[Product Review] Reason Core Security


  • Please log in to reply
11 replies to this topic

#1 Sintharius

Sintharius

    Bleepin' Sniper


  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:09:23 PM

Posted 17 April 2015 - 11:53 AM

Hello all, and welcome!

If you have seen the news about Unchecky, have used herdProtect or ShouldIRemoveIt then I bet you will have heard about Reason Software.

This thread will focus on its latest product - Reason Core Security.

A bit of background info

Reason Core Security is a Reason Software Company product, powered by a team of very talented programmers, malware hunters and visionaries lead by Andrew Newman. Andrew was the co-founder and chief software architect for GIANT Company Software, acquired by Microsoft Corporation.

The main website is here.

Reason Software is also the creator of herdProtect and ShouldIRemoveIt.

What type of product is Reason Core Security?

Reason Core Security is a cloud scanner that targets a variety of threats with a very strong focus on adware, spyware and PUPs (potentially unwanted programs), however it is not designed to function as a traditional anti-virus engine and does not specifically target file infecting and memory resident viruses as well as various types of rootkits.

This makes Reason Core Security similar to Malwarebytes Anti-Malware in the part that both have to go with an antivirus (MBAM does have rootkit scanning however).

The difference between free and paid version

Paid version provides real-time protection, while free version does not.

Setup used for this observation

- Operating System: Windows 7 Ultimate x64 Service Pack 1

- Other security software:

Emsisoft Internet Security v10

Malwarebytes Anti-Malware Premium v2.1.4.1018

Malwarebytes Anti-Exploit Premium v1.06.1.1018

- Version of Reason Core Security used: 1.0.6.0

Reason Core Security at a glance

- Installation is rather smooth, with no restart required.

- Compatible with other AVs and AMs (I have only Emsisoft and Malwarebytes, but there is a report of RCS working with Kaspersky).

- You are offered to do a custom compability scan after installation. If malware is found then the software will offer to do a Quick Scan.

- Interface looks ok, with a minimal and uncomplicated design - which is always a plus.

- The engine service process is rather light (slightly less than MBAM), but there is another process probably related to the UI eating up quite a bit of resource and stays active at all times even when the software is minimized to the system tray.

- Bundle Protection failed to install on my system for some reason (stating "Execute installer error"). There are also reports of some bugs that need ironing out.

Functionalities

- Protection: Includes the basic Real-time protection (alerts when malware attempts to run) and Bundle Protection which is essentially Unchecky. Reason Core Security uses a "Protection Score" system to evaluate the security status of your computer.

- Tools: Include a program uninstaller, a startup manager, a browser addon manager and a remediation tool.
  • Uninstaller: Includes a rating on how much risk an installed program is to your computer's security. Also claims to have an "advanced uninstaller" (which probably removes all traces similar to Revo Uninstaller).
  • Startup Manager: Displays everything that start with Windows - including things that belong to Windows and should not be displayed.
  • Browser addon manager: Displays all addons, toolbars, search hooks (which is only of importance to malware removal helpers) and menu extensions.
  • Remediation tool: Reset some settings to fix damage caused by malware. Don't use this if you don't know what you're doing.
- Settings: Allow you to set proxy settings, protection, schedule scans, exclusions and licensing.

- History: Allows you to view the Quarantine, information on previous scans and logs.

- Scan speed is average. A Quick Scan on my system took 11:48 - which is slower than Emsisoft's Malware Scan (33 seconds) and Malwarebytes' Threat Scan (8:00). I do not know where exactly does Reason Core Security's Quick Scan looks in, however.

Since I don't do malware tests, this will be better left to someone else.

Support

- Live support and contact by mail is available, through I prefer a support forum.

- There is a false positive form that will automatically collect the file's MD5 when you choose to report the FP from the app, which is ok in my opinion.

Pros and Cons

- Pros: Lightweight, easy to use interface, good compability, assist in preventing PUP installations with Unchecky technology.

- Cons: Comes with "bells and whistles" that are unnecessary and can be dangerous if used by inexperienced users, signature detections need some work (see spoiler to know what I mean), no web protection (you will have to use your AV or another AM to cover this).
Spoiler

Conclusion

Reason Core Security is still in its infancy, however it has some potential to become a good AM solution should Reason Software put effort into it.

In the meantime, if you decide to try out Reason Core Security then don't forget to have AV protection, and if necessary additional AM protection from Emsisoft Anti-Malware or Malwarebytes Anti-Malware as a precaution.

Have a nice day!

Regards,
Alex

BC AdBot (Login to Remove)

 


#2 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,718 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:23 PM

Posted 17 April 2015 - 12:52 PM

Some personal documents are visible as icons on your desktop. Pointing this out in case you didn't know.


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2019
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#3 Sintharius

Sintharius

    Bleepin' Sniper

  • Topic Starter

  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:09:23 PM

Posted 17 April 2015 - 12:53 PM

There's nothing in it Didier, I haven't updated it for ages :P If I really care about my Desktop I would have cut out the rest of it. The two files at the bottom are just DDS logs, nothing special.

#4 Didier Stevens

Didier Stevens

  • BC Advisor
  • 2,718 posts
  • OFFLINE
  •  
  • Gender:Male
  • Local time:10:23 PM

Posted 17 April 2015 - 12:57 PM

You haven't updated your "LIST OF DEADLINES" in ages? I guess you're a typical student :lol:


Didier Stevens
http://blog.DidierStevens.com
http://DidierStevensLabs.com

SANS ISC Senior Handler
Microsoft MVP 2011-2016 Consumer Security, Windows Insider MVP 2016-2019
MVP_Horizontal_BlueOnly.png

 

If you send me messages, per Bleeping Computer's Forum policy, I will not engage in a conversation, but try to answer your question in the relevant forum post. If you don't want this, don't send me messages.

 

Stevens' law: "As an online security discussion grows longer, the probability of a reference to BadUSB approaches 1.0"


#5 Sintharius

Sintharius

    Bleepin' Sniper

  • Topic Starter

  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:09:23 PM

Posted 17 April 2015 - 12:59 PM

I try to turn in my stuff on time so no need for a deadline reminder anymore :lol: that file just sits there because I did not bother to remove it.

#6 Sintharius

Sintharius

    Bleepin' Sniper

  • Topic Starter

  • Members
  • 5,639 posts
  • OFFLINE
  •  
  • Gender:Female
  • Location:The Netherlands
  • Local time:09:23 PM

Posted 17 April 2015 - 02:09 PM

On a side note, someone in MalwareTips did a testing with 500 malware samples against Reason Core Security's scanner. The detection was around 22%... which is too little.

#7 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,769 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:23 PM

Posted 17 April 2015 - 06:12 PM

Reason Software is also the company behind Boost.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#8 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,683 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:04:23 PM

Posted 17 April 2015 - 07:05 PM

Have a red rating on Web of Trust for scam and fake advertising. Doesn't look good.

https://www.mywot.com/scorecard/boostbyreason.com?utm_source=addon&utm_content=rw-viewsc

Edited by Aura., 17 April 2015 - 07:05 PM.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#9 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,769 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:23 PM

Posted 18 April 2015 - 06:39 AM

I don't give a lot of weight to WOT ratings.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#10 Aura

Aura

    Bleepin' Special Ops


  • Malware Response Team
  • 19,683 posts
  • ONLINE
  •  
  • Gender:Male
  • Local time:04:23 PM

Posted 18 April 2015 - 08:00 AM

Well it gives you quite a good baseline sometimes for websites you don't know a lot on. And depending on the comments and proofs they had, it can help. The ratings for Boost are the general ratings given to pretty much every websites that advertise a "PC Booster" program.

unite_blue.png
Security Administrator | Sysnative Windows Update Senior Analyst | Malware Hunter | @SecurityAura
My timezone UTC-05:00 (East. Coast). If I didn't reply to you within 48 hours, please send me a PM.


#11 quietman7

quietman7

    Bleepin' Janitor


  • Global Moderator
  • 51,769 posts
  • ONLINE
  •  
  • Gender:Male
  • Location:Virginia, USA
  • Local time:04:23 PM

Posted 18 April 2015 - 03:38 PM

Many site rating vendors (i.e. McAfee SiteAdvisor, WOT) use a system of volunteer testers that continually patrol the Internet to browse sites, download files, and enter information on sign-up forms. All the results are documented and supplemented with feedback from users, Web site owners, and analysis from their own employees. The advising site vendor then summarizes the results sometimes into a color-coded red, yellow and green ratings scale to help inform Web users as to the safety of each tested site. While these tools are useful, they are not foolproof and sometimes may provide misleading ratings. Just because you visit a risky site does not automatically mean the site is bad or that your system has been infected by going there. Thus, the use of such rating sites does not always guarantee an accurate rating of the results they provide. Even Bleeping Computer has been incorrectly rated from time to time....see this discussion topic.
.
.
Windows Insider MVP 2017-2018
Microsoft MVP Reconnect 2016
Microsoft MVP Consumer Security 2007-2015 kO7xOZh.gif
Member of UNITE, Unified Network of Instructors and Trusted Eliminators

If I have been helpful & you'd like to consider a donation, click 38WxTfO.gif

#12 WKlaus

WKlaus

  • Members
  • 1 posts
  • OFFLINE
  •  
  • Local time:11:23 PM

Posted 31 July 2016 - 07:25 AM

Been on other sites looking for ReasonCore Software reviews and happened to come across this discussion. I can see its been discussed a while ago. Well, a year ago a knew nothing of this software so from what im reading its easy to tell that i improved A LOT.I'm using it together with some of my other AV, no conflicts so far,removal rate is getting higher so i guess lots of work is going on there. It is easy to download, install and run. Very affordable. Makes me feel safe when I surf the internet. Highly recommend the latest release






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users