MSFN Forum: Application Defense. whats your choice? - MSFN Forum

Jump to content



Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

Application Defense. whats your choice? The final step in my mission in layered defense Rate Topic: -----

#1 User is offline   breadandbubbles 

  • Member
  • PipPip
  • Group: Members
  • Posts: 228
  • Joined: 03-October 05

Posted 21 August 2006 - 07:37 AM

Alright, so im setting up a nice defense systerm for my computer. but i cant finish the last step!

i want a good process guard. Some of you may be familiar with those such as Winpatrol, Prevx(a much better one than winpatrol, just for the record). Ghost Security has Appdefend and Regdefend. I Know Kaspersky has some sort of process guard built into the Internet Secuirty Suite.

So?

Do you have a favourite?

Im really hoping for some good feedback here, so anything at all would be great!


#2 User is offline   albator 

  • Nlite Supporter
  • PipPipPipPip
  • Group: Members
  • Posts: 637
  • Joined: 18-August 04
  • OS:XP Pro x86
  • Country: Country Flag

Posted 17 February 2007 - 05:39 PM

RegDefend is really good, fast (written in ASM) and powerful. :thumbup
I dont use it , but i recommend it to friends
also a good freeware is startupmonitor, it will prompt you to allow change to startup.

http://www.mlin.net/...upMonitor.shtml

This post has been edited by albator: 17 February 2007 - 06:24 PM


#3 User is offline   DigeratiPrime 

  • MSFN Junkie
  • Group: Super Moderator
  • Posts: 3,490
  • Joined: 18-August 04
  • OS:Windows 7 x64
  • Country: Country Flag

Posted 17 February 2007 - 08:31 PM

WinPooch is free/open source
http://winpooch.free...ng=en&page=home

Also there is a popular program that is actually called "ProcessGuard" by Diamond CS
http://www.diamondcs...u/processguard/

#4 User is offline   Jeremy 

  • Casual Poster
  • PipPipPipPipPipPipPipPipPip
  • Group: Members
  • Posts: 3,473
  • Joined: 24-June 04
  • OS:Windows 7 x64
  • Country: Country Flag

Posted 18 February 2007 - 11:03 PM

FileMon and/or Process Explorer.

#5 User is offline   albator 

  • Nlite Supporter
  • PipPipPipPip
  • Group: Members
  • Posts: 637
  • Joined: 18-August 04
  • OS:XP Pro x86
  • Country: Country Flag

Posted 24 February 2007 - 11:22 AM

View PostJeremy, on Feb 19 2007, 12:03 AM, said:

FileMon and/or Process Explorer.


we were talking about Behavior blockering (aka process guard) software.
Filemon is not a process guard software.

for a complete list of software go to

http://wiki.castlecops.com/Different_class...rial_blockers:-

This post has been edited by albator: 24 February 2007 - 11:23 AM


#6 User is offline   Jeremy 

  • Casual Poster
  • PipPipPipPipPipPipPipPipPip
  • Group: Members
  • Posts: 3,473
  • Joined: 24-June 04
  • OS:Windows 7 x64
  • Country: Country Flag

Posted 24 February 2007 - 11:42 AM

Albator, I'm well aware of what kind of program it is. A co-worker of mine wanted to know which file a process was corresponding with and FileMon helped him. This is helpful when malware that doesn't use an executable and thus doesn't show up in Task Manager and happens to exploit, for example, explorer.exe. It's a method of guarding your processes, which is the point behind the recommendation.

Share this topic:


Page 1 of 1
  • You cannot start a new topic
  • You cannot reply to this topic

1 User(s) are reading this topic
0 members, 1 guests, 0 anonymous users



All trademarks mentioned on this page are the property of their respective owners
Copyright © 2001 - 2011 msfn.org
Privacy Policy