ProSecurity v1.26 released! [as of Jan 08, 2007]

[PSDeveloper]

Note: On November 25, vendor requested (http://www.wilderssecurity.com/showthread.php?p=889909#post889909) thread renamed to reflect current version release: 1.23
Note: On December 2, ProSecurity v1.24 was released (http://www.wilderssecurity.com/showpost.php?p=894435&postcount=144).
Note: On December 7, vendor requested (http://www.wilderssecurity.com/showthread.php?p=917940#post917940) thread renamed to reflect current version release: 1.26


We provide free edition from this version, this free edition reduced some functions, but it will update in time with the full version. It will contain all the new bug fixes and performance updates the full paid version.

Download link: http://www.proactive-hips.com/download.php
Web page: http://www.proactive-hips.com/
Online manual: http://www.proactive-hips.com/manualbook

What's new? November 18, v1.22.1 (Paid/Free)
------------------------------------------------
1. [Fix] A bug may cause BSOD after uninstalling.
2. [Fix] Some small bugs of v1.22.

------------------------------------------------

About ProSecurity
ProSecurity is kernel-level security protection software. It protects processes, registry, physical/kernel memory. It also prevents trojans, keyloggers, rootkits and other malwares(malicious programs) from installing and damaging your system.

Any feedback will be appreciated!

[TECHWG]

ok were back to a topic. I guess it glitched or something, because when ever a mod has changed my topic they say "MOVED" or have an edit saying why they did something. This should be all ok now and if they moved it for a reason my guess is they would tell you.

Good work with the freeware i ran it on my vmware. Very cool

[Kees1958]

PSdeveloper,

Good move to compete head up against SSM. I can not find the differences between teh paid and the free version on the website. Could you explain them?

Thx

[PSDeveloper]

-{ Quote: "PSdeveloper,

Good move to compete head up against SSM. I can not find the differences between teh paid and the free version on the website. Could you explain them?

Thx" }-
Here is:
185176

[TECHWG]

the freeware version feels very nice. i expected an empty feeling since i have the paid version, but actually it looks acts and feel really nice

[farmerlee]

Wow this is very generous of the PS team! Its always great to see free software released especially for those who rely on freeware to keep them safe.

[Kees1958]

As fas as I know the difference between ProSecurity free and SSM free are

+ SSM: basic registry and win ini files
+ SSM: global hooks and library control
+ SSM: basic IE protection
+ SSM: basic window filter option (which I do not use)

+ PS: driver control
+ PS: basic outbound network control

Comparison paid versions
+ SSM: window filter

+ PS: memory protection

Free version of SSM offers a little more protection, Paid version of PS offers additional physical memory protection

Am I right? Please comment experts users of PS and SSM?

[TECHWG]

my dislike with SSM free is its an old version, full maybe but its an old version. PS freeware will always contain all the new updates and fixes as the paid version. And perhaps once in a while a new feature will be added to freeware

[Rasheed187]

Nice to see that you now also provide a freeware version, but I believe SSM Free is still a bit more powerful, I may be wrong though. I also saw that it offers registry protection, but you can not manage the rules, which keys is it protecting?

[TECHWG]

no . . SSM freeware is more powerful, but as they say . . its an "old" version. So you are living in the past . All the exploits all the bugs are still open to you. I would trade gimicks and gadgets for actual security in the sense i am more stable and secure than having gadgets and gizmo's from new version

[TECHWG]

-{ Quote: "I tried ProSecurity, the version I tried did not work well with DefenseWall (gave BSOD). SSM free works fine together with DW. The free version is running on the pro version 2.08 according the release and not any more the old 1.9 build.

Yes SSM freeware users is behind in release of SSM, but to call it old and buggy is far fetched." }-


If you have a compatability issue why dont you post in our forum www.proactive-hips.com/forum

if we dont know, nothing can be done

[Kees1958]

Okay I will remove the post

[TECHWG]

you dont have to remove the post lol, but if you have a compatability issue or a bug problem, we have our own forum where we check. We are here on wilders as a more light harted chat about PS and opinions and alike. But if we have things on our forum we can go into depth withought making people on wilders think we are taking over their forum. and its alot easier to read fluid posts when we dont have strong details about bugs on wilders. We dont restrict info on our bugs, or hide the fact we might made a boo boo, but just want to keep the deep nitty gritty stuff on our forum.

[bellgamin]

-{ Quote: "you dont have to remove the post lol, but if you have a compatability issue or a bug problem, we have our own forum where we check. We are here on wilders as a more light harted chat about PS and opinions and alike. But if we have things on our forum we can go into depth withought making people on wilders think we are taking over their forum. and its alot easier to read fluid posts when we dont have strong details about bugs on wilders. We dont restrict info on our bugs, or hide the fact we might made a boo boo, but just want to keep the deep nitty gritty stuff on our forum." }-TECHWG I'm a little confused about your status. Sometimes your posts sound like you are a just a *user & fan* of ProSec, but in some threads (such as this one) your persistent use of "we" in reference to ProSec makes it sound like you are their employee.

I think it is a *questionable practice* if an organization has their own personnel post at a public forum in such a way as to lead people to the false belief that they are just another user & fan of that organization's software.

I'm not saying that this tactic was used in this case but --- If you are NOT a ProSec employee, then why the repeated usage of "we" in your post quoted here? And what should I imply from your granting permission for Kees to leave his post here at Wilder's instead of posting it at the ProSec forum? (Or as you referred to it: "our forum")

[Franklin]

Whether a fanboy,user or employee doesn't really bother me.

Any and all information about security apps are fine here.

The authors or employees of such security apps posting here I believe adds to their credibility as I have seen some of the regulars tear a new app to pieces which they are quite capable to do.

Also if there are points to be raised in regards to a posters status I think it should be sorted out by pm.

[Arup]

Pro Security free is among the most comprehensive of anti malware solutions, for that we have to thank the dev, comparitively, most other programs are paid, SSM free BSODs on my system, PS OTOH runs fine.

[starfish_001]

This version does not really fix the install problem that I have encountered

uninstall old version - reboot - install this version (Full Version) , reboot in learning mode, reboot in learning mode again, use a little in learning mode, turn off learning mode. Reboot

system does not fully load the desktop - reboot leave for 10 minutes - pop up from Pro security for one of my auto starts - (regrun in this instance )

Most instances when the sys freezes loading the desktop NOD's splash screen is loading. I have set Pro security as an exclusion under NOD to see if that helps



My conclusion right or wrong is that learning mode has missed some of the my normal system behavior. That NOD or another app maybe outpost are not co existing with PS


Any suggestions would be welcome ....

[starfish_001]

From website

Owner- Programer- Designer- Research- Website Creator

Jie Dong

Feature/Concept Input- Software Tester- Website Creator

[kr4ey]

-{ Quote: "This version does not really fix the install problem that I have encountered

uninstall old version - reboot - install this version (Full Version) , reboot in learning mode, reboot in learning mode again, use a little in learning mode, turn off learning mode. Reboot

system does not fully load the desktop - reboot leave for 10 minutes - pop up from Pro security for one of my auto starts - (regrun in this instance )

Most instances when the sys freezes loading the desktop NOD's splash screen is loading. I have set Pro security as an exclusion under NOD to see if that helps

My conclusion right or wrong is that learning mode has missed some of the my normal system behavior. That NOD or another app maybe outpost are not co existing with PS


Any suggestions would be welcome ...." }-

I have not noticed any problems loading Nod32 after two reboots. But you may want to leave learning mode on a little longer to load all the system files in PS.
(3 or 4 reboots)

[duke1959]

Hello. I was wondering as far as the free version of ProSecurity goes. Does anyone think it is better than Cyberhawk? CH did well in some recent tests that are available in another thread here. I do see that PS certainly offers much more in the way of information in it's GUI than CH does, which I like. Also, does the PS Free version support Fast User Switching for Two User Accounts, and is it easy on System Resources? Any info would be appreciated.

[starfish_001]

-{ Quote: "I have not noticed any problems loading Nod32 after two reboots. But you may want to leave learning mode on a little longer to load all the system files in PS.
(3 or 4 reboots)" }-


Thanks that is good to know - may it could be a combination of effects. I have to explore this more

[TECHWG]

-{ Quote: "TECHWG I'm a little confused about your status. Sometimes your posts sound like you are a just a *user & fan* of ProSec, but in some threads (such as this one) your persistent use of "we" in reference to ProSec makes it sound like you are their employee.

I think it is a *questionable practice* if an organization has their own personnel post at a public forum in such a way as to lead people to the false belief that they are just another user & fan of that organization's software.

I'm not saying that this tactic was used in this case but --- If you are NOT a ProSec employee, then why the repeated usage of "we" in your post quoted here? And what should I imply from your granting permission for Kees to leave his post here at Wilder's instead of posting it at the ProSec forum? (Or as you referred to it: "our forum")" }-

I have been here before PS was even born. I saw AntiKeylogger Elite and decided to help the dev to make it better. Then after introducing him to HIPS he made the decision that HIPS is alot more important than anti keylogging on its own. So thats why i am so entheuiastic about PS because i know he actually cares about the product. Also i am an admin on the forum , so i feel part of this and the developer would agree with me. All i am is ideas/testing etc but i feel like i am a part of it in a small way. And when i refer to "our" forum this is only because i helped set it up. This is all. see ?

[TECHWG]

-{ Quote: "
My conclusion right or wrong is that learning mode has missed some of the my normal system behavior. That NOD or another app maybe outpost are not co existing with PS

Any suggestions would be welcome ...." }-

Perhaps you are running too many anti-malware products or something. You should try this in vmware and install one by one your other products and see when you get the problem ?

[poirot]

TECHWEG, i use ProSecurity 1.22 trial since a few days in one of my two computers and i must say i like it a lot:
it seems to me very simple without diminishing security at all,in fact i think all main sectors to be covered are taken care of; pop ups are the 'right' number and very clear- i didnt have to read much the Manual before using it, very intuitive and logical.
Now i posted with a few questions at the ProSecurity forum two days ago,but received no answer at all.
Perhaps i can pose you the question which is still unanswered:
do you think there might be any drawback or conflict in theory using ProSec and ShadowUser at the same time? I already used both without any problem of startup/Shutdown -as i had previously done with the other HIPS i experimented with,that is Antihook 2.5,2.6,3.0 and SSM- but who knows,maybe PS is different, although i think everything should be just fine.

One other question,more InTopic than the previous one is:
do you know in what exactly PS Free differs from the paid one?
Still,no news about it at the PS forum.

Edit- Sorry i had not seen a previous post about the differences btw Free and Paid, now i know,thanks.

[TECHWG]

-{ Quote: "TECHWEG, i use ProSecurity 1.22 trial since a few days in one of my two computers and i must say i like it a lot:
it seems to me very simple without diminishing security at all,in fact i think all main sectors to be covered are taken care of; pop ups are the 'right' number and very clear- i didnt have to read much the Manual before using it, very intuitive and logical.
Now i posted with a few questions at the ProSecurity forum two days ago,but received no answer at all.
Perhaps i can pose you the question which is still unanswered:
do you think there might be any drawback or conflict in theory using ProSec and ShadowUser at the same time? I already used both without any problem of startup/Shutdown -as i had previously done with the other HIPS i experimented with,that is Antihook 2.5,2.6,3.0 and SSM- but who knows,maybe PS is different, although i think everything should be just fine.

One other question,more InTopic than the previous one is:
do you know in what exactly PS Free differs from the paid one?
Still,no news about it at the PS forum.

Edit- Sorry i had not seen a previous post about the differences btw Free and Paid, now i know,thanks." }-

at the top of this thread you will see a picture from the freeware version's comparison page to see how it differs. I would expect no conflict but we do not own this software so we have no idea. I will see if i can obtain a trial of it and see if it conflicts, but what ever happens please let us know. It has been brought to my attention of some rules or "guide lines" about not using the wilders forum to the extent that people may feel this is officlally a products forum. I will do my best to checkthe ProSecurity forum more often. sometimes the developer may know and read your posts and may research before he posts to you if he is unsure of a software. I will look into this

WG

[Stem]

First of all,.. "Thank you" to PS for the free version of this application,.. I did purchase a license for PS a couple of weeks ago, as I do like to show support this way for any product I personally think is good. (I also have license for other HIPS). I have not yet had time to download the latest version,... but will install later.

From some posts, I see that some user are getting BSOD or other problems with PS and/or SSM, if this is believed to be a bug or conflict, then I think that any such problems should be directed first to the developers of the product, to allow them time to try and sort out any possible bugs or conflicts,... we will always see some possible problem (on some setups) with this type of application, due to the low level control being made.

I would also ask, could we please keep the thread more on topic,... and not start straying into who is who,....

[poirot]

I am glad you too, Stem, think PS is a worthy piece of software and i am looking forward to your findings, tips and remarks about it.
(this time it's an easier task than with Jetico,;D )


TECHWEG, no matter who you are ,or might represent, i think you are rather adding to the Forum and not subtracting anything,so thanks from me.

[Stem]

Helo there poirot,
-{ Quote: ".....and i am looking forward to your findings, tips and remarks about it." }-PS is a nice program,... but as some are finding, a slightly different approuch is needed (compared to PG / SSM) to correctly set up for your system. I did run the "Kill" tests (APT/SPT) against PS, and PS stood up well and was able to block all I attempted. The developer does appear to be listening to users, and updating the product, so at the moment I have no concerns as such.

Regards,
Stem

[TECHWG]

i had a problem with the previous 1.22 which has been resolved with this minor release. The developer seriously does listen to users and is very active on fixes. as i say most developers "seem" to have a day job, and work on coding when they get home. But the developer of ProSecurity, upon learning of HIPS software quit his day job of being a successful computer programmer to dedicate his day and night to making the best HIPS he can. I have seen this and i know this to be true. So i really do urge people to go on our forum and tell the developer of any genuine issues that you have and he will do his absolute best to fix it. Even if he needs to research on a problem with your conflicting software.
___

-{ Quote: "
TECHWEG, no matter who you are ,or might represent, i think you are rather adding to the Forum and not subtracting anything,so thanks from me." }-


@poirot

Thankyou very much :) I am a fan and the concept guy for PS and gave the developer very much feedback through the months. I love hearing the good things and the bad things because, good things means happy people and good product, bad things means you identified something that can be done to improve the product. Win win . . no negatives with this.


Best regards to all

WG

[djg05]

Just out of curiosity I thought I would try out PS 1.22.1 to see what it was all about.

On the SSM thread there has been discussion for the lack of protection for LSASS and its mates which can be shut down. The same for LSASS is true in PS using APT-1, although there is less restriction on the rules for it.

With my f/w Kerio it says that it is protected yet it can easily be shut down the same way. In SSM in spite of going through all the warnings none of the various kill methods I have tried have yet managed to kill it off.

Maybe I am looking at this the wrong way, but I regard my f/w as my front door and the HIPS to be the iron bar to stop it being broken down.

I know that some don't believe in going through warnings signs, but to me the point is to try and break a program then you can see what its real strength is. I am sure some way will be found by malware to subvert the warnings and if a program just relies on warning messages rather than substance I would rather know about.

Incidentally I turned off learning mode after rebooting as advised in the help file and there was no problem with BSOD.

I am sure this program will improve but currently I don't think it is for me.

Using Win 2k sp4

[TECHWG]

-{ Quote: "Just out of curiosity I thought I would try out PS 1.22.1 to see what it was all about.

On the SSM thread there has been discussion for the lack of protection for LSASS and its mates which can be shut down. The same for LSASS is true in PS using APT-1, although there is less restriction on the rules for it.

With my f/w Kerio it says that it is protected yet it can easily be shut down the same way. In SSM in spite of going through all the warnings none of the various kill methods I have tried have yet managed to kill it off.

Maybe I am looking at this the wrong way, but I regard my f/w as my front door and the HIPS to be the iron bar to stop it being broken down.

I know that some don't believe in going through warnings signs, but to me the point is to try and break a program then you can see what its real strength is. I am sure some way will be found by malware to subvert the warnings and if a program just relies on warning messages rather than substance I would rather know about.

Incidentally I turned off learning mode after rebooting as advised in the help file and there was no problem with BSOD.

I am sure this program will improve but currently I don't think it is for me.

Using Win 2k sp4" }-

Castle idea . . Your firewall is to stop people coming at the gate. If they get over the gate over the moat, then the HIPS is standing at the door to your castle protecting you unless you let them in. Then you can use things like Cyber hawk to protect the interior along with HIPS to give you extra protection. As for LAss .. . . i think perhaps lots of softwares are having isues with this from what you said. I have to opoligise since i am drinking at present, but i believe the developer will read all these posts and see this one and begin thinking about this problem . .


@JIE

Can you look into this lass thing and see if we can protect it by defeult or something ? perhaps just adding termination protection or something


WG

[Arup]

Wouldn't a good AV detect LSASS exploit, in that case, putting it in PS would kind of make it redundant at the most.

[andylau]

I want to ask, is it supported Windows Vista?::)

[TECHWG]

i believe presently it is not supported by Vista but will in a later version. Vista is still only a baby and not even in production PC yet. I would lay off vista for the moment

[starfish_001]

-{ Quote: "Perhaps you are running too many anti-malware products or something. You should try this in vmware and install one by one your other products and see when you get the problem ?" }-



Perhaps ....

I am only running PS for test. I use Raxco First Defense like many round here. I have a snapshot setup for PS. It is based on a stripped down version of my main sys rather than a clean install. Why because if I migrate this into my main sys snapshot it has to coexist with my setup.


That said the PS snapshot has most other security software removed as I try to work out what is causing the problems. At this point the snapshot has NOD, Outpost, and PS.

I have also had sys freezes when blocking global hooks where ssm or appdefend would have simple blocked with no impact

[TECHWG]

please feel free to goto the forum "HERE" (http://www.proactive-hips.com/forum) and detail the problem in as much detail as you can so the developer can do his best to resolve your issues.:thumb:

[Roger_]

I have also installed and started evaluating ProSecurity full version last night and the first impressions are quite positive so far.
I certainly will be using the PS forum / support mail to clear out a few things.
For the moment, I have a couple of questions that have crossed my mind :

- 15 days surely is very short for me to perform a full evaluation as my availability will be quite limited;

- Although investing money in buying software products from well-known companies may turn out to be quite risky (companies can end or get bought by other groups), being PS almost a 'one man show', what foreseen guarantees of continuity may we anticipate?

Thanks in advance.

Roger

[TECHWG]

regarding the freezups people have the the user input warning screen's, i believe Jie has fixed this. After he adds and fixes some things he will certainly release the new version. Its with all your help that things get done! if you would not tell us we would not find out all these little things!
Thanks :D

WG

[ccsito]

According to the product comparison chart, the program has network access control. Could it then be used as a outbound firewall replacement? Can it be used as a supplement to the XP firewall to control outbound access?

[Stem]

-{ Quote: "Can it be used as a supplement to the XP firewall to control outbound access?" }-PS as options to allow/deny/ask for TCP incoming, TCP outgoing, UDP,RAWIP (per application)

[TECHWG]

Yes i believe so. But that has drawn a very important (forgotton on my part) point. i will ask Jie to see if he can add TCP/IP / UDP rules etc and if he can have a tick box for an exe to run as client or server or both etc. it might end up being a firewall hips lol but hey function is function

[Stem]

-{ Quote: ".....it might end up being a firewall hips lol but hey function is function" }-There is always a possible problem of driver conflicts with firewalls if PS was to add network packet filter drivers. I personally would prefer no such driver installation from an HIPS,... if such an addition was made, then there would, for me, need to be an option not to install the driver for this.

[TECHWG]

well personally i use a firewall, but i would like to see a server and client tick box so we can control its access after we allow or deny with user interface

[Tommy]

-{ Quote: "There is always a possible problem of driver conflicts with firewalls if PS was to add network packet filter drivers. I personally would prefer no such driver installation from an HIPS,... if such an addition was made, then there would, for me, need to be an option not to install the driver for this." }-
I agree with that. Even i don't use PS i allways suggest HIPS please be a HIPS and not a HIPS with FW-functions which are nearly unusable.

Cobbler, stick to your trade.

[Stem]

-{ Quote: ".......but i would like to see a server and client tick box so we can control its access after we allow or deny with user interface" }-As I mentioned, this would require a network packet filter driver, to filter the inbound TCP, to block inbound TCP"SYN" packets (connections) when the "server" was blocked,.... this can lead to conflicts,...... I for one, prefer my firewall to perform this filtering.

[TECHWG]

but PS right now gives you a warning, xxx.exe is being contacted from outside etc and gives you the IP etc. If it can do this it should have ability for simple tick boxes that says allow inbound, allow outbound etc. I believe the driver you speak of is part of the driver for PS. i may be wrong but i think perhaps true

[Stem]

PS does not filter the TCP/IP, it will simply allow or block, if for example you change the network setting for your browser to block inbound TCP, then all inbound TCP is blocked (including returned packets,... so internet comms will not proceed for the browser,..you will not be able to browse), this is not the same as TCP/IP packet filtering, which, if server status was blocked, would allow returned packets, but would block inbound connections.

[TECHWG]

yes this is what i personally would like to see only tick boxes to allow inbound and allow outbound, no rules, just the ability to block inbound and akllow outbound etc simple function

[Stem]

But this is not the same as "Allow as client" / "allow as server". If you select to block an inbound attempt with PS, this will then block any/all inbound TCP for that application, and will then lead to no internet access for that application.

You can currently set this in options (per application):-

[PSDeveloper]

-{ Quote: "yes this is what i personally would like to see only tick boxes to allow inbound and allow outbound, no rules, just the ability to block inbound and akllow outbound etc simple function" }-
I guess you don't use PS to control your network :-), actually this function was exists from v1.20.
Please turn to application's advance settings page, and then turn to network tab, you can see them there, they are not tickboxes, but you can right click on them to popup the setting menu.

[TECHWG]

I guess i cant see the wood for the trees! i had completely forgotten the advanced tab :-[

[PSDeveloper]

-{ Quote: "But this is not the same as "Allow as client" / "allow as server". If you select to block an inbound attempt with PS, this will then block any/all inbound TCP for that application, and will then lead to no internet access for that application.

You can currently set this in options (per application):-" }-
I'm sorry, but maybe the name is not very good so it confused you.

Tcp Incoming = Tcp incoming connection
Tcp Outgoing = Tcp outgoing connection

This means if user set Tcp incoming to "Block", and set Tcp outgoing to "Allow", this means this application can't accept incoming connections. But this application can connect to network still.

[Stem]

Well there is a problem on my installation(from all PS installations),.. as if I select "block inbound TCP" for my browser, my connection is lost.

edit:
I have re-checked,.. as I do on every installation of PS,... if I select to block inbound TCP for firefox,... then no Browsing is possible. If your intention with this was to only block inbound connection (TCP SYN) packets, then there is a conflict/bug/problem, in which case I must review the installation, as a conflict that disables the correct running/filtering for PS, may affect my firewall. This for me is not good news, as I will now not run PS on an internet PC, untill I can find this conflict.

[Stem]

-{ Quote: "I'm sorry, but maybe the name is not very good so it confused you.

Tcp Incoming = Tcp incoming connection
Tcp Outgoing = Tcp outgoing connection

This means if user set Tcp incoming to "Block", and set Tcp outgoing to "Allow", this means this application can't accept incoming connections. But this application can connect to network still." }-To recheck on this: I have restored from image of XP (updates to 17 nov 06). This as no firewall installation (this is my test PC behind packet filter firewalled gateway), On installation of PS and setting of my browser within PS to block inbound TCP allow outbound TCP,.. I am unable to connect to the internet. This is not filtering TCP on this setup,.. this is simply blocking ALL inbound TCP


Edit:
Could a user of PS please check on this. Set the network access (in PS) for your browser to "block inbound TCP" then try to connect to the internet (make sure first, that you have disconnected from the internet (fully closed your browser) after changing the rules for your browser within PS,...)

[PSDeveloper]

-{ Quote: "To recheck on this: I have restored from image of XP (updates to 17 nov 06). This as no firewall installation (this is my test PC behind packet filter firewalled gateway), On installation of PS and setting of my browser within PS to block inbound TCP allow outbound TCP,.. I am unable to connect to the internet. This is not filtering TCP on this setup,.. this is simply blocking ALL inbound TCP


Edit:
Could a user of PS please check on this. Set the network access (in PS) for your browser to "block inbound TCP" then try to connect to the internet (make sure first, that you have disconnected from the internet (fully closed your browser) after changing the rules for your browser within PS,...)" }-
Thanks for your testing, I have replied here: http://www.proactive-hips.com/cgi-bin/yabb2/YaBB.pl?num=1164090300/0

[Stem]

Thanks for checking,

I do not use IE (I will setup again to check with this browser),.. When I block FF for inbound, I notice that the only alert given is for loopback,... other connection attempts have no popup (for returned packets). But still no browsing is possible

I will re-install, and re-check for all other browsers.

Could you try FF(firefox) to see if there is a possible problem due to loopback (blocking the initial loopback (inbound) connection may stop further connection by FF)

Edit,
I have checked with IE, and all o.k.,..... so it is a problem with FF. As this is now a bug report, I will continue this at the PS forum.

[PSDeveloper]

-{ Quote: "Thanks for checking,

I do not use IE (I will setup again to check with this browser),.. When I block FF for inbound, I notice that the only alert given is for loopback,... other connection attempts have no popup (for returned packets). But still no browsing is possible

I will re-install, and re-check for all other browsers.

Could you try FF(firefox) to see if there is a possible problem due to loopback (blocking the initial loopback (inbound) connection may stop further connection by FF)

Edit,
I have checked with IE, and all o.k.,..... so it is a problem with FF. As this is now a bug report, I will continue this at the PS forum." }-
Thanks for your reply! PS manages loopback connections too, so after you set "incoming" to block, while firefox try to connect to a loopback address, PS blocked it.

I can access our forum, please try to connect to our forum again if you can't access forum still, please let me know. Thanks!
http://www.proactive-hips.com/cgi-bin/yabb2/YaBB.pl?num=1164090300

[Stem]

-{ Quote: "Thanks for your reply! PS manages loopback connections too, so after you set "incoming" to block, while firefox try to connect to a loopback address, PS blocked it.
" }-Yes, PS blocks the loopback for FF, but it also blocks all other inbound when the "block inbound TCP" for firefox is set,.. have you run firefox to check on this?

[chrome_sturmen]

prosecurity is the best i have yet seen- its similar to process guard + regdefend+ssm - where is the developer from? ukraine? czech republic maybe?

[PSDeveloper]

-{ Quote: "Yes, PS blocks the loopback for FF, but it also blocks all other inbound when the "block inbound TCP" for firefox is set,.. have you run firefox to check on this?" }-
yes, I tested FF just now, FF has a loopback connection, it connect to 127.0.0.1: 1935:
Direction:Incoming Protocol:TCP Remote Address:127.0.0.1: 1935

[Stem]

-{ Quote: "prosecurity........its similar to process guard + regdefend+ssm - ......" }-I would personally not agree with this,... the protection within PS is very good,... but not to the extent as you try to infer. (a simple example would be access to windows services/ LSP )

[Stem]

-{ Quote: "yes, I tested FF just now, FF has a loopback connection, it connect to 127.0.0.1: 1935:
Direction:Incoming Protocol:TCP Remote Address:127.0.0.1: 1935" }-Could you connect to the internet with FF with the settings mentioned? (block TCP inbound for FF)
(loopback will use any port available)

[PSDeveloper]

-{ Quote: "prosecurity is the best i have yet seen- its similar to process guard + regdefend+ssm - where is the developer from? ukraine? czech republic maybe?" }-
Thanks for your praise! I'm very glad you like it so much!

[PSDeveloper]

-{ Quote: "Could you connect to the internet with FF with the settings mentioned? (block TCP inbound for FF)
(loopback will use any port available)" }-
No, I can't. it's because PS block FF from TCP inbound accessing.

[Stem]

-{ Quote: "No, I can't. it's because PS block FF from TCP inbound accessing." }-So this is a bug/problem with PS/firefox (or a problem with PS/loopback)

[PSDeveloper]

-{ Quote: "So this is a bug/problem with PS/firefox (or a problem with PS/loopback)" }-
The network function has no problem on its work.

[starfish_001]

-{ Quote: "regarding the freezups people have the the user input warning screen's, i believe Jie has fixed this. After he adds and fixes some things he will certainly release the new version. Its with all your help that things get done! if you would not tell us we would not find out all these little things!
Thanks :D
WG" }-

Do you have any timeline in mind for this? As the app asking for hooks that freezes is easy blocked by other apps.

[TECHWG]

WOW what a dialog going on :D i think this problem might take a little while, but it would be nice to have this fixed. Stem i also have this FF issue.

and to the guy who asked the creator of ProSecurity is Chinese

[TECHWG]

-{ Quote: "Do you have any timeline in mind for this? As the app asking for hooks that freezes is easy blocked by other apps." }-

What do you mean? the delay before you can click buttons on the warning screen ?

[starfish_001]

-{ Quote: "What do you mean? the delay before you can click buttons on the warning screen ?" }-


No I mean sometimes when I block things in PS the whole system freezes (This has happened with leechget) and will not clear until a reboot or more common that some applications stop responding until killed (note tab lite used for testing)

if I block the same thing in PG, SSM or even outpost (if network) no problem

[TECHWG]

ok i get ya now. This is the exact same problem i had today several times. Jie is working on it as we speak. We will see how long it takes him to fix :)

[Kees1958]

-{ Quote: "To recheck on this: I have restored from image of XP (updates to 17 nov 06). This as no firewall installation (this is my test PC behind packet filter firewalled gateway), On installation of PS and setting of my browser within PS to block inbound TCP allow outbound TCP,.. I am unable to connect to the internet. This is not filtering TCP on this setup,.. this is simply blocking ALL inbound TCP


Edit:
Could a user of PS please check on this. Set the network access (in PS) for your browser to "block inbound TCP" then try to connect to the internet (make sure first, that you have disconnected from the internet (fully closed your browser) after changing the rules for your browser within PS,...)" }-

Stem: thx for the clarification.

The freeware version does not has the TCP blocking feature does it?

[TECHWG]

i believe freeware does include network protection in ProSecurity

[TECHWG]

if all goes well, the fixed driver will be given in a temporary update utility of some sort to replace the driver, to save you reinstalling IF all goes well. but as i understand with the next few week(s) i think we will see new features or abilities by PS. I am not sure what they all are. But i know they will be very nice.

[Stem]

-{ Quote: "The network function has no problem on its work." }-But firefox will always attempt a loopback when started,.. PS is simply blocking this and any other TCP inbound. So from this, if I was using IE, and an inbound TCP connection/scan was made, then IE would be simply blocked from any/all other inbound untill re-started?.

[TECHWG]

i think so. We will see if the dev can fix this local host thing. This is the feature i was looking for and could not "find" but firefox seems to do this weird local host thing

[Tommy]

/ a liitle bit OT ON
In the closed thread regarding PS 1.22 full there was mentioned a possible discount of xx U$S for SSM refugies. Will this be realized?
I won't pay a full prize as i allready have a HIPS, but a good discount could get me to think about that again :) By the way please add PayPal possibility.
/OT OFF

[Stem]

-{ Quote: "By the way please add PayPal possibility." }-You can use Paypal

[starfish_001]

-{ Quote: "ok i get ya now. This is the exact same problem i had today several times. Jie is working on it as we speak. We will see how long it takes him to fix :)" }-


Thanks - Excellent

[TECHWG]

:) so Jie anything about thie offer of cheaper for people migrating from other HIPS softwares or no ?

[PSDeveloper]

-{ Quote: ":) so Jie anything about thie offer of cheaper for people migrating from other HIPS softwares or no ?" }-
Yes, sure, this type of discount will be released within a few days.

[TECHWG]

very cool !

[PSDeveloper]

-{ Quote: "No I mean sometimes when I block things in PS the whole system freezes (This has happened with leechget) and will not clear until a reboot or more common that some applications stop responding until killed (note tab lite used for testing)

if I block the same thing in PG, SSM or even outpost (if network) no problem" }-
This freeze bug will been fixed in the next version which will be released tomorrow or the day after tomorrow.

[TECHWG]

I feel i cant really wait for this new version, because i am so happy with the changes made :D

[Tommy]

-{ Quote: "I feel i cant really wait for this new version, because i am so happy with the changes made :D" }-
Stay calm or take an Aspirin :)

[TECHWG]

i am trying haha but trust me i have the test version and i cant wait for release version

:lurking:
*puppy*

[MikeNAS]

I have some error with newest ProSecurity Free.

-Access violation at address 0040444E in module -RuleEditor.exe'. Read of address 000002F4.

-ProSecurity can't create communication with kernel driver!

-Create Communication with driver failed! Error Code: 2

All of those came after restarting my computer (Windows Server 2003 nLited). ProSecurity still runs but doesn't protect anything. When I exit main program and close manual all components and restart -> it's works fine.

[PSDeveloper]

If any admin or moderator see this topic, please merge this topic with the previous one (http://www.wilderssecurity.com/showpost.php?p=885119&postcount=1). Please change the old topic to this one. Thank you!

Download link: http://www.proactive-hips.com/download.php
Web page: http://www.proactive-hips.com/
Online manual: http://www.proactive-hips.com/manualbook

What's new? November 26, v1.23 (Free/Paid)
------------------------------------------------
1. [New] Update online module.
2. [New][BOTH] Installing new version without uninstalling.
3. [New][PAID] Protect registry from restoring hiv files.
4. [Fix][BOTH] Freeze while showing warning box.
5. [Improve][BOTH] Speed up importing and exporting settings/rules function.

------------------------------------------------

[B]About ProSecurity
ProSecurity is kernel-level security protection software. It protects processes, registry, physical/kernel memory. It also prevents trojans, keyloggers, rootkits and other malwares(malicious programs) from installing and damaging your system.

Any feedback will be appreciated!

[PSDeveloper]

-{ Quote: "I have some error with newest ProSecurity Free.

-Access violation at address 0040444E in module -RuleEditor.exe'. Read of address 000002F4.

-ProSecurity can't create communication with kernel driver!

-Create Communication with driver failed! Error Code: 2

All of those came after restarting my computer (Windows Server 2003 nLited). ProSecurity still runs but doesn't protect anything. When I exit main program and close manual all components and restart -> it's works fine." }-
Thanks for your bug reporting, we will fix this in the later version.

[MikeNAS]

-{ Quote: "Thanks for your bug reporting, we will fix this in the later version." }-

Same errors with the 1.23 version.

[TECHWG]

verywell done !

[kr4ey]

-{ Quote: "I have some error with newest ProSecurity Free.

-Access violation at address 0040444E in module -RuleEditor.exe'. Read of address 000002F4.

-ProSecurity can't create communication with kernel driver!

-Create Communication with driver failed! Error Code: 2

All of those came after restarting my computer (Windows Server 2003 nLited). ProSecurity still runs but doesn't protect anything. When I exit main program and close manual all components and restart -> it's works fine." }-

I had this error too. Try a uninstall and reboot than install.
May have to go in safe mode and uninstall and delete ProSecurity Folder in C:\Program Files. Reboot and install again.
This worked for me.

Rick

[TECHWG]

Umm new issue to me, i never had this before my version works good

[gerardwil]

I have to dig in my mind, had similar issue long time ago.

Gerard

[TECHWG]

i dont recall this problem ever. Perhaps we need some detailed info on the cause

[nightingale]

>:( Oh man.I downloaded this program and all hell broke loose on my comp.It would not let my password work in the front of my comp ,so I could not log in.It kept saying something about an error and that it could not read my comp liscence.When I started up my comp again through restoration all the stupid armor did was throw pop ups after pop ups of things on windows that it needed to have my okay or deny.It froze my comp ,then the blue screen of death.I had t odo factory restore.I am posting this on THIS site as I think people here should hear all about my experience from hell because of this software.I hope no one else goes through what i went through.

[EASTER.2010]

-{ Quote: ">:( Oh man.I downloaded this program and all hell broke loose on my comp.It would not let my password work in the front of my comp ,so I could not log in.It kept saying something about an error and that it could not read my comp liscence.When I started up my comp again through restoration all the stupid armor did was throw pop ups after pop ups of things on windows that it needed to have my okay or deny.It froze my comp ,then the blue screen of death.I had t odo factory restore.I am posting this on THIS site as I think people here should hear all about my experience from hell because of this software.I hope no one else goes through what i went through." }-

In some early stages of the beta versions i went thru a somewhat scary senario with ProSec but then that was to be expected. I wouldn't be too quick or ready to discount conscientious efforts in security-ware and ProSec is said to be very at-the-ready to respond to concerns. I do know these malfuctions can and do happen with this type software as they strive to work at lower levels of Windows systems code/instructions signals and can & do CLASH! :ouch: unexpectantly. At the time it is nothing short of a nightmare but bring it to their attention and see what results from them. Been there and experienced that, knowing this is no perfect science. ;)

[nick s]

-{ Quote: ">:( Oh man.I downloaded this program and all hell broke loose on my comp.It would not let my password work in the front of my comp ,so I could not log in.It kept saying something about an error and that it could not read my comp liscence.When I started up my comp again through restoration all the stupid armor did was throw pop ups after pop ups of things on windows that it needed to have my okay or deny.It froze my comp ,then the blue screen of death.I had t odo factory restore.I am posting this on THIS site as I think people here should hear all about my experience from hell because of this software.I hope no one else goes through what i went through." }-Hi nightingale,

Without more details, it seems that you did not reboot at least one time with PS in learning mode. All hell will probably break loose if you do not...login problems, a flood of process and library alerts, and BSODs. Running in learning mode for a typical session or two is a good idea.

Nick

[TECHWG]

Please also note that if the developer changes something and fixes it, PS now has update feature that you can press at the top of PS "New ver". I believe in the next version also it will automatically check for new versions, with an option to disable auto update checking. This is absolutly valuable for getting the latest fixes :D

[starfish_001]

-{ Quote: ">:( Oh man.I downloaded this program and all hell broke loose on my comp.It would not let my password work in the front of my comp ,so I could not log in.It kept saying something about an error and that it could not read my comp liscence.When I started up my comp again through restoration all the stupid armor did was throw pop ups after pop ups of things on windows that it needed to have my okay or deny.It froze my comp ,then the blue screen of death.I had t odo factory restore.I am posting this on THIS site as I think people here should hear all about my experience from hell because of this software.I hope no one else goes through what i went through." }-


You should have been able to recover from the recovery console or safe mode

PS uses a driver for protection - I have not tried this but you should be able to disable PS by stopping the driver loading. I'm not running at the moment will reload later.....and try...

To disable your driver boot to safe mode
Open Device Manager (Control Panel > System > Hardware > Device Manager).
Click View > Show Hidden Devices.
Expand the "Non-Plug and Play Drivers".
Find "PS driver and double-click it.
In DRIVER, change the Startup type to manual or disabled

It might be useful if Pro security posted some emergency recovery steps? May be there are some on the website ....
:)
If people don't reboot a couple of times in learning mode there is a lot of potential for problems ...

[TECHWG]

I think this may be resolved in a new update at some poing very soon, i have suggested a system where the user can opt to import standard (already prepped) system rules. We will see how long this takes to impliment, and if still peoples third party software may cause problems still.

[BuckSnort_]

My first try at uninstalling an earlier version of ProSecurity and installing version 1.23 failed similar to others in this forum. After restoring a previous snapshot, I uninstalled in safe mode this time. Reinstalled 1.23 and it is working fine now.

[TECHWG]

umm i had no trouble with uninstalling 1.22.1

[PSDeveloper]

-{ Quote: "My first try at uninstalling an earlier version of ProSecurity and installing version 1.23 failed similar to others in this forum. After restoring a previous snapshot, I uninstalled in safe mode this time. Reinstalled 1.23 and it is working fine now." }-
I'm sorry for this problem! It's a problem of setup program, the problem just seems like this: ProSecurity's setup program should delete the rule files before copy files, but it forgot to do this, this means after it installed all new exe files, it still use old rule files which has an old SHA-1 checksum, so the new installed exe files can't been started again. I have fixed this, but you are not needed to download a new setup program if you have make PS work.

[TECHWG]

ah that makes sense, i know PS was not the problem i had no issue even with my vmware tests

[PSDeveloper]

-{ Quote: "ah that makes sense, i know PS was not the problem i had no issue even with my vmware tests" }-
you first received a beta version(it use old setup script and you don't need to uninstall before installing this new version), which one will delete rules before install new version, that's why you don't have this problem. :)

[TECHWG]

Oh i see. i think ?! anyway all i know is thats all fixed in 1.23 and i am running better than ever! hey did you change anything else ? my system seems to be working smoother somehow ?

[Roger_]

I was away for a few days and just got back to find this new version available.

However, reading through the previous posts before related to installation problems, I have not got the final point: should I really uninstall 1.22.1 first to avoid such?? ???

All the same, will I lose all the already created hundreds rules?? >:(

Also, still with 1.22.1, I am having a weird problem that might have to do with PS (if not, I can only think of GesWall): when my network connection is off, after starting Windows, I am not able to go past the initial user login / password as it starts logging in and immediately logs off back...?

[Stem]

-{ Quote: "I have some error with newest ProSecurity Free.

-Access violation at address 0040444E in module -RuleEditor.exe'. Read of address 000002F4.

-ProSecurity can't create communication with kernel driver!

-Create Communication with driver failed! Error Code: 2
" }-I can reproduce similar error, if the PC is unable to get an IP via DHCP.(PS does not initialize at all)
Should PS be dependent on this?

.

[nightingale]

-{ Quote: "You should have been able to recover from the recovery console or safe mode

PS uses a driver for protection - I have not tried this but you should be able to disable PS by stopping the driver loading. I'm not running at the moment will reload later.....and try...

To disable your driver boot to safe mode
Open Device Manager (Control Panel > System > Hardware > Device Manager).
Click View > Show Hidden Devices.
Expand the "Non-Plug and Play Drivers".
Find "PS driver and double-click it.
In DRIVER, change the Startup type to manual or disabled

It might be useful if Pro security posted some emergency recovery steps? May be there are some on the website ....

If people don't reboot a couple of times in learning mode there is a lot of potential for problems ..." }-


Hmmmm.Nope I could not recover at all and that is what was frustrating.It would have been nice to know what would have happened if a person does not reboot in learning mode.A warning post ,many of us need it lol .Seems to me that should have been been written as part of the installation to reboot now.Just my thoughts but it would help those of us who are not computer savvy .Lesson learned here by me the hard way again oi.Thanks all for your input .

[TECHWG]

-{ Quote: "I can reproduce similar error, if the PC is unable to get an IP via DHCP.(PS does not initialize at all)
Should PS be dependent on this?

." }-

This is caused because the system services take too long to load. I had same issue, Jie does know abou this but its a hard task to fix.
I had this problem after running somethings.

Try this after you reboot and login instantly run this commnd "services.msc" and look at your services by started ior not, and you will see services not started. This means something is causing your services to lag. My case was vmware and comodo

[TECHWG]

-{ Quote: "Hmmmm.Nope I could not recover at all and that is what was frustrating.It would have been nice to know what would have happened if a person does not reboot in learning mode.A warning post ,many of us need it lol .Seems to me that should have been been written as part of the installation to reboot now.Just my thoughts but it would help those of us who are not computer savvy .Lesson learned here by me the hard way again oi.Thanks all for your input ." }-

In fairnes it has ben mentioned several times on this forum and our own forum about rebooting with learn mode. Also when you instakll you are taken to a page that instructs you to do this step. We will try and add detault rules for the different OS that you can CHOOSE to install after PS loads the first time. This may take some time

[Stem]

-{ Quote: "This is caused because the system services take too long to load. I had same issue, Jie does know abou this but its a hard task to fix.
I had this problem after running somethings.

Try this after you reboot and login instantly run this commnd "services.msc" and look at your services by started ior not, and you will see services not started. This means something is causing your services to lag. My case was vmware and comodo" }-I do not understand your explanation of this. The DHCP service starts, it is just unable to obtain an IP.

[starfish_001]

-{ Quote: "Hmmmm.Nope I could not recover at all and that is what was frustrating.It would have been nice to know what would have happened if a person does not reboot in learning mode.A warning post ,many of us need it lol .Seems to me that should have been been written as part of the installation to reboot now.Just my thoughts but it would help those of us who are not computer savvy .Lesson learned here by me the hard way again oi.Thanks all for your input ." }-


The procedure I mentioned should allow someone to recover from this situation - I managed to do something similar after installing true image with the SSM beta installed. Stuck at the logon screen.


I agree an auto reboot would be helpful as part of the install.


In any case when problems occur it is always worth taking some time before reinstalling - A lot of people round here use Raxco First Defence, HDS rollback RX or a good imaging prog - True image or similar. I'd take a look at first defence - a useful safety net

Using one of these can make this type of situation a lot less painful....hopefully useful for the future.

[TECHWG]

-{ Quote: "I do not understand your explanation of this. The DHCP service starts, it is just unable to obtain an IP." }-

Im my experience , there are services that really slow down and fail to start quickly, in my case it was a vmware and a Workstation service this caused PS to complain about not communicating with driver

[TECHWG]

-{ Quote: "The procedure I mentioned should allow someone to recover from this situation - I managed to do something similar after installing true image with the SSM beta installed. Stuck at the logon screen.


I agree an auto reboot would be helpful as part of the install.


In any case when problems occur it is always worth taking some time before reinstalling - A lot of people round here use Raxco First Defence, HDS rollback RX or a good imaging prog - True image or similar. I'd take a look at first defence - a useful safety net

Using one of these can make this type of situation a lot less painful....hopefully useful for the future." }-

I agree very useful.
I use norton ghost and it suites me down to the ground

[Stem]

-{ Quote: "Im my experience , there are services that really slow down and fail to start quickly, in my case it was a vmware and a Workstation service this caused PS to complain about not communicating with driver" }-PS does not show any dependencies, are you saying this is incorrect? and that PS depends on other services correct startup,... in yes, then, what dependencies are required. (these should be correctly made with the O.S, and info given to the user for debugging).
I look at this as (if I was a baddie), I could cause a service stall (any by the look of this),.. this then would prevent PS startup/loading~ protection

[TECHWG]

No . . no dependancies, but the system in its self does not work well when services are lagged. for example load services.msc and sort it by started, and you will see 1 service stuck on starting or stopping, and the rest of the system services and drivers can not load wighouth that being resolved. Its nothing to do with a depandancy, its to do with the time it takes for the PS driver to be active, and the GUI of Ps thinks the driver failed because its timeout was reached

Jie knows about thsi and will fix if asap

[PSDeveloper]

-{ Quote: "I can reproduce similar error, if the PC is unable to get an IP via DHCP.(PS does not initialize at all)
Should PS be dependent on this?

." }-
Thanks for your testing!

I test on Winxp and Win2003. But maybe I misunderstand you, I can't reappear this even I stop DHCP and DNS service.(Actually except the update.exe which added in this new version, all other programs don't access network, and update.exe will not startup except people click on the "New ver" at the top right corner)

I have found the crash at "0x4051d6" is caused by multi-language function, while evaluation to a window which haven't initilized will cause this crash, this will be fixed in the next version.

But the "can't create commucation" problem shouldn't be reappeared on my testing computers, but from the error code "2", it seems the driver haven't been started or it initilized failed.

Anyone know how to reappear it?

[TECHWG]

i dont know how else to explain it

[Roger_]

-{ Quote: "I was away for a few days and just got back to find this new version available.

However, reading through the previous posts before related to installation problems, I have not got the final point: should I really uninstall 1.22.1 first to avoid such?? ???

All the same, will I lose all the already created hundreds rules?? >:(

Also, still with 1.22.1, I am having a weird problem that might have to do with PS (if not, I can only think of GesWall): when my network connection is off, after starting Windows, I am not able to go past the initial user login / password as it starts logging in and immediately logs off back...?" }-
As these questions remain unanswered, I have posted them at the PS own forum...

Nonetheless, I am still eagerly waiting for answers... ::)

[PSDeveloper]

-{ Quote: "As these questions remain unanswered, I have posted them at the PS own forum...

Nonetheless, I am still eagerly waiting for answers... ::)" }-
I'm very sorry for missing your questions, I have answered your questions:
http://www.proactive-hips.com/cgi-bin/yabb2/YaBB.pl?num=1164649122
http://www.proactive-hips.com/cgi-bin/yabb2/YaBB.pl?num=1164648842

[MikeNAS]

BACK TO MY PROBLEM

I change my OS to nLited Windows XP Professional. After installing OS, Drivers and all my programs I have same error. I have also some problems with Cyberhawk. It didn's start at all.

So then I try to reinstall ProSecurity. After uninstalling ProSecurity Cyberhawk starts immediately. Then I install ProSecurity again -> same error again, but now Cyberhawk starts with Windows. Yes I deleted ProSecurity folder manually before installing it again.

I don't believe that there is some problem with DHCP etc, services because all my services starts normally. Should PSSession.exe start with windows? In my setup it didn't start.


-MikeNAS

EDIT1: Now when I kill ProSecurity and start it again manually -> same error.

[MikeNAS]

I uninstalled Cyberhawk and reboot -> again same error

EDIT1: Maybe I have to change back to SSM Free.

[PSDeveloper]

-{ Quote: "BACK TO MY PROBLEM

I change my OS to nLited Windows XP Professional. After installing OS, Drivers and all my programs I have same error. I have also some problems with Cyberhawk. It didn's start at all.

So then I try to reinstall ProSecurity. After uninstalling ProSecurity Cyberhawk starts immediately. Then I install ProSecurity again -> same error again, but now Cyberhawk starts with Windows. Yes I deleted ProSecurity folder manually before installing it again.

I don't believe that there is some problem with DHCP etc, services because all my services starts normally. Should PSSession.exe start with windows? In my setup it didn't start.


-MikeNAS

EDIT1: Now when I kill ProSecurity and start it again manually -> same error." }-
I'm sorry, I can't reappear it in our testing, but if you like, could you help me to fix this problem together? If yes, please add my msn account, it's in my profile. Thank you!

[MikeNAS]

I'm quite busy now so I contact to you tomorrow. I hope that we can fix this problem because I really like this program. BTW is there any differences between free and paid version?

[PSDeveloper]

-{ Quote: "I'm quite busy now so I contact to you tomorrow. I hope that we can fix this problem because I really like this program. BTW is there any differences between free and paid version?" }-
no problem, thank you in advance!

[Perman]

Hi, folks: I am not a HIPS believer. But due to the overwhelming response to ProSecurity, I like to give it a test run. I will face a challenge; I am using DeepFreeze(sandbox/virtual), and run everything(except update,installations) within Frozen state. ProSecurity is no exception. Each single allow/deny or Yes/no to each prompt will be erased upon reboot, just resembling to building sand castle on beach and then been swept clean by next wave. I could have used ProSecurity outside DF(ie,within unfreeze state) without this worry, but this would beat the purpose of having a sandbox/virtual app. Therefore, this is a catch-22 situation, d.. you do and d... you don't. Any advice????

[TECHWG]

-{ Quote: "Hi, folks: I am not a HIPS believer. But due to the overwhelming response to ProSecurity, I like to give it a test run. I will face a challenge; I am using DeepFreeze(sandbox/virtual), and run everything(except update,installations) within Frozen state. ProSecurity is no exception. Each single allow/deny or Yes/no to each prompt will be erased upon reboot, just resembling to building sand castle on beach and then been swept clean by next wave. I could have used ProSecurity outside DF(ie,within unfreeze state) without this worry, but this would beat the purpose of having a sandbox/virtual app. Therefore, this is a catch-22 situation, d.. you do and d... you don't. Any advice????" }-

Nothing can beat a frozen state PC. Although most people would find that too bad. I love vmware to be like this :) best for testing since nothing ever is unfixable. My self i prefer a good HIPS for my main pc

[Alphalutra1]

-{ Quote: "Hi, folks: I am not a HIPS believer. But due to the overwhelming response to ProSecurity, I like to give it a test run. I will face a challenge; I am using DeepFreeze(sandbox/virtual), and run everything(except update,installations) within Frozen state. ProSecurity is no exception. Each single allow/deny or Yes/no to each prompt will be erased upon reboot, just resembling to building sand castle on beach and then been swept clean by next wave. I could have used ProSecurity outside DF(ie,within unfreeze state) without this worry, but this would beat the purpose of having a sandbox/virtual app. Therefore, this is a catch-22 situation, d.. you do and d... you don't. Any advice????" }-
Why don't you run it unfrozen, teach all of the rules to ProSecurity, then reboot in a frozen state ;)

Alphalutra1

[bellgamin]

I also use DeepFreeze. I have heard that there are certain types of malwares, such as keyloggers, that can do bad stuff even while computer is in frozen state. Therefore, I guess it's not a bad idea to leave my HIPS & AV running even when computer is in frozen status. Right?

[MikeNAS]

I just installed 1.22.1 Paid Trial version and everything is ok after installation. Then I reboot and again same problem. I killed all ProSecurity processes and waiting my "network computer" (I don't know the right name, hope you know what I mean) icons coming to the taskbar and the start ProSecurity manually -> everything is ok. So maybe the problem is long startup time of those "network computer" icons (is is some service?). I tried this idea with the latest version but it gave me same error.

[MikeNAS]

I disabled my Intel Wireless 3945ABG and reboot. After reboot it takes still long time that my Broadcom NetXtreme 57xx icon come to the task bar.ProSecurity intilizing that time and immediatelly after icon came it started normally.

Now we have to solve this problem?! Any ideas why it takes so long time to start to icons/services/etc.?

EDIT1: Hope you understand what I mean. My english is so bad...

EDIT2: I Googled that slow startup but can't find any idea to fix it.

[MikeNAS]

Now I have solution for that problem:

slow boot = Windows networking service looking for other computers in network which causes ProSecurity error. There are 2 solutions but those limit some network possibilities.

1. Uncheck File and Print Sharing in NIC properties. <- Fast boot

2. Disable Workstation service (more network problems). <- Very fast boot.


Can someone else try these if it helps?

EDIT: Just realized that my problems started when I add Linksys BEFSR81 (8-ports) between DSL modem (1-port) and my laptop.

-MikeNAS

[PSDeveloper]

-{ Quote: "Now I have solution for that problem:

slow boot = Windows networking service looking for other computers in network which causes ProSecurity error. There are 2 solutions but those limit some network possibilities.

1. Uncheck File and Print Sharing in NIC properties. <- Fast boot

2. Disable Workstation service (more network problems). <- Very fast boot.


Can someone else try these if it helps?

EDIT: Just realized that my problems started when I add Linksys BEFSR81 (8-ports) between DSL modem (1-port) and my laptop.

-MikeNAS" }-
Thanks for your testing, I know why you get those errors now, we will fix this asap.

[MikeNAS]

Disabling Workstation gives me lots of problems but unchecking File and Print Sharing is enough too. Still I have to disable my wireless NIC but it's not so big problem because I use it rarely.

EDIT1: I'm glad that I can still use this awesome program. Thanks!

EDIT2: BTW If I now like to buy this program can I get that 30% bug report discount?

[TECHWG]

i am glad we are ironing this out piece by piece. I knew what was causing it, but i did not know what was causing the cause :D so when we know why services are slow i guess it will be all fixed ;)

[PSDeveloper]

-{ Quote: "Disabling Workstation gives me lots of problems but unchecking File and Print Sharing is enough too. Still I have to disable my wireless NIC but it's not so big problem because I use it rarely.

EDIT1: I'm glad that I can still use this awesome program. Thanks!" }-
Thanks for your liking, I'm very glad you like it.
-{ Quote: "
EDIT2: BTW If I now like to buy this program can I get that 30% bug report discount?" }-
No problem, please send us an email (sales@proactive-hips.com) or register on our forum (http://www.proactive-hips.com/forum) at first. Thanks!

[Roger_]

-{ Quote: "I'm very sorry for missing your questions, I have answered your questions:
http://www.proactive-hips.com/cgi-bin/yabb2/YaBB.pl?num=1164649122
http://www.proactive-hips.com/cgi-bin/yabb2/YaBB.pl?num=1164648842" }-
Thanks a lot for the replies!
I will try both as soon as I have some freee time and will let you know the results.

[lu_chin]

Any update on possible discounts for folks who own other HIPS programs?

Thanks.

[TECHWG]

i personally am not sure, but i know he thought it was a good idea, i will find out for you when he is on and ask him to post here with his intentions

[[suave]]

-{ Quote: "I also use DeepFreeze. I have heard that there are certain types of malwares, such as keyloggers, that can do bad stuff even while computer is in frozen state. Therefore, I guess it's not a bad idea to leave my HIPS & AV running even when computer is in frozen status. Right?" }-
That's right! A frozen state wont protect you from everything (especially not DeepFreeze as it doesn't prevent untrusted apps from gaining access to anything they want on your system.). A HIPS + FW + AV will fill in most of the holes. The frozen state should be your last layer of defense, just incase something does manage to slip through. Well anyways, I don't want to get off topic, we're here to talk about ProSecurity but I just wanted to give you a quick answer to your question ;)

[Chuck57]

-{ Quote: "I also use DeepFreeze. I have heard that there are certain types of malwares, such as keyloggers, that can do bad stuff even while computer is in frozen state. Therefore, I guess it's not a bad idea to leave my HIPS & AV running even when computer is in frozen status. Right?" }-

Deepfreeze is a good program, but watch out for the clowns who are now running Unfreeze, a program developed by someone named Emiliano in Argentina. It can thaw all the versions of Deepfreeze including the current one.

Faronics lab is aware of Unfreeze but have done nothing to date to fix it, and Unfreeze has been around for a while.

*EDIT* CORRECTION: Apparently this thing with Unfreeze been fixed in the latest version of Deepfreeze.

[PSDeveloper]

ProSecurity 1.24 released!

What's new? December 02, v1.24
---------------------------------------
1. [New][BOTH] Enforce protection function for application rules.
2. [New][BOTH] Warning box can been disabled.
3. [New][BOTH] The delay time of warning box buttons configable.
4. [Fix][BOTH] Self protection function.
5. [Fix][BOTH] A bug may cause BSOD.
6. [Improve][BOTH] The driver starts earlier.(This will fix that "can't communicate with driver" bug too)

The online update will be effective hours later.

If you want to download directly, please access here:
http://www.proactive-hips.com/download.php

Any feedback will be appreciated!

[SystemJunkie]

I downloaded it, unchecked the learn process, after reboot Windows was no more able to read his own activation and quit from working. Then I disabled this HIP, evrything works fine again.

[Roger_]

-{ Quote: "I downloaded it, unchecked the learn process, after reboot Windows was no more able to read his own activation and quit from working. Then I disabled this HIP, evrything works fine again." }-
:o :o :o

You should have read the doc + info here a little further to learn how to work with it before trying, just like with any other piece of software.

You have to reboot with PS in learning mode to let it set the adequate basic rules for your system!!!

So, it is perfectly expected not to let it run otherwise since you have not done it...

Might this just be the Lodore syndrome again??... ;D ;D ;D

[kr4ey]

-{ Quote: "I downloaded it, unchecked the learn process, after reboot Windows was no more able to read his own activation and quit from working. Then I disabled this HIP, evrything works fine again." }-

I noticed with PS 1.24 even with saved rules you have to reboot in learning mode. I had system freeze with learning mode turned off after reboot.

Rick

EDIT: Had to uninstall in safe mode and reinstall in normal mode. Everything is working prefectly now.

[PSDeveloper]

If you have installed version 1.23 or use the old exported rules, please reboot with safe mode at first, this because from this version ProSecurity starts more earlier than before, so it's possible that some service programs can't work well with old rules.

[Clweb]

Version 1.24 causes some problem at the installation. I reported about it at the Prosecurity forum (username jo_Kerr).

[SystemJunkie]

I prefer not to read manuals, I like to test without further knowledge.
It´s much more direct, intuitive and creative.

Beside you should create a system that recognizes unadequate behaviour of users related to your software, in case windows boot is endangered.

[djg05]

-{ Quote: "I prefer not to read manuals, I like to test without further knowledge.
It´s much more direct, intuitive and creative.

Beside you should create a system that recognizes unadequate behaviour of users related to your software, in case windows boot is endangered." }-

I agree with you there - programs should be intuitive.

[Stem]

-{ Quote: "I prefer not to read manuals, I like to test without further knowledge.
It´s much more direct, intuitive and creative." }-For a paint program or similar, I would agree. From the point of a program that controls the OS, I certainly disagree.

-{ Quote: "Beside you should create a system that recognizes unadequate behaviour of users related to your software, in case windows boot is endangered." }-This of course would need for the addition of hard_coded rules, to stop the possibility of user making incorrect decisions. This as been mentioned for PS as a loadable ruleset, But I certainly hope that no hard_coded rules are added.

[theshadow247]

i just downloaded and tryed to install 1.24 free but i get a install driver failed.please enshure you have enough privilieg to install driver.iam the admin.has eny one else had this problem and know of a fix or workaround ??

i also get a box prosecurity can't create cummunication with kernel driver...
ive tryed three times to uninstall and clean reinstall but the same thing every time..

[TECHWG]

-{ Quote: "i just downloaded and tryed to install 1.24 free but i get a install driver failed.please enshure you have enough privilieg to install driver.iam the admin.has eny one else had this problem and know of a fix or workaround ??

i also get a box prosecurity can't create cummunication with kernel driver...
ive tryed three times to uninstall and clean reinstall but the same thing every time.." }-

Let me guess . . are you on Vista ? because win2k, 2k3 and XP do not have this problem. Vista has had this issue for me since VISTA does not support any of these softwares presently.

[TECHWG]

-{ Quote: "I prefer not to read manuals, I like to test without further knowledge.
It´s much more direct, intuitive and creative.

Beside you should create a system that recognizes unadequate behaviour of users related to your software, in case windows boot is endangered." }-

We all forget or prefer to not read manuals, but with these types of software, you are taking your computers safety and security into your own hands at your own risk. This in my opinion does not reflect on the developer since he does forewarn you in the documentation even on the first page that is opened for you.

Also i concur with the developers statement about the driver. This version startes the driver early , which can in turn perhaps protect against more things thus detecting more things thus will be blocked at bootup causing so many BSOD or freezups with old rules prior to 1.24. This is why its extreamly important to always reboot in learn mode when you install. Also i would suggest update too for this reason of enhancements to the driver to pick up more things.

Best regards

WG

[TECHWG]

-{ Quote: "For a paint program or similar, I would agree. From the point of a program that controls the OS, I certainly disagree.

This of course would need for the addition of hard_coded rules, to stop the possibility of user making incorrect decisions. This as been mentioned for PS as a loadable ruleset, But I certainly hope that no hard_coded rules are added." }-

I believe this will be a non issue stem :D i think there will be NO hard coded rules, however as you remember from previous talks about PS i think it will have preset import lists for the different OS, so you can import good working rules if you need or wish to.

[theshadow247]

you guessed wrong iam running xp pro.so it would seem that p.s does have the problem with xp.

[webster]

theshadow247 you`re not alone. I had the same problem (XP).

[TECHWG]

the developer knows about it and is working on it i think. Feel free to goto our forum for further details and help. but as for this problem, i feel it was a error just prior to compiling, and this means that PS is perfectly ok, but the problem can now be fixed with a 1 line edit and a recompile :D then you can use the update feature to upgrade.

[PSDeveloper]

We have fixed the free edition's problem of installing ProSecurity's driver failed while install ProSecurity, please download the new setup program here:http://www.proactive-hips.com/download/pssetup_free.exe

The problem of "can't refresh log automatics" fixed too[BOTH FREE AND PAID], but this problem only occured while install program, and if you have rebooted system, this problem will not reappear, so it's not needed to download a setup program of a paid version if you have installed it.

[theshadow247]

thanks.PSDeveloper.i just d/l and installed with no problems.keep up the good work.cheers...

[webster]

Still same problem here :'(

[TECHWG]

-{ Quote: "Still same problem here :'(" }-

please give details exactly what happened. Did you have a previous install? was it an upgrade ? how long ago did you download ? Perhaps your ISP transparently cached the download and you still have the same version.

[webster]

I tried the update, but it didn´t work well. Removed it completely, and cleaned registry with jv16. Installed the new version and got the error. I cleaned the registry again and downloaded again today, and did a fresh install. Same problem.

ISP caching ? I don`t think so. Have not heard about this.

[webster]

Just made a MD5. It`s ok. No ISP caching.

[TECHWG]

ok i see. Lets see what the developer can do about this for you

[PSDeveloper]

-{ Quote: "I tried the update, but it didn´t work well. Removed it completely, and cleaned registry with jv16. Installed the new version and got the error. I cleaned the registry again and downloaded again today, and did a fresh install. Same problem.

ISP caching ? I don`t think so. Have not heard about this." }-
Which version you installed, Free or Paid? Could you tell me the error message you got?

[webster]

Free version. It was the "driver failed" error. Tried to install full version, with no errors . Uninstalled again, and installed free version with no errors. Works fine now.

[webster]

No more boot problems. Runs very smooth :thumb:

[TECHWG]

:D i am glad

[Chuck57]

Very happy with ProSecurity. I'm running the latest free version alongside CyberHawk, Kerio 2.1.5, and Avira antivirus and Sandboxie. Everything is as smooth as I could ask for.

After install, I ran all the programs I normally use and rebooted then took ProSecurity off Learning Mode. After reboot, I got a couple of warnings from CyberHawk and ProSecurity when opening Opera in Sandboxie. I'd forgotten to run Sandboxie, and had not run it since putting in CyberHawk. Those warnings served to tell me both programs were on the job.

I think I'll stick with ProSecurity and CyberHawk for a while. After playing with nearly all of them the past few weeks, these two seem to be the best for me.

[trjam]

Just dont ask for a refund.>:(

[TECHWG]

-{ Quote: "Just dont ask for a refund.>:(" }-

Now . . what could you possibly mean by that comment? the guy says hes using freeware and is happy and you say dont ask for a refund . . I am thinking either you confused this thread for the wrong thread somewhere else, or i want some of what you are taking because its strong stuff! lol
Free = free . . no refund needed

[trjam]

-{ Quote: "Now . . what could you possibly mean by that comment? the guy says hes using freeware and is happy and you say dont ask for a refund . . I am thinking either you confused this thread for the wrong thread somewhere else, or i want some of what you are taking because its strong stuff! lol
Free = free . . no refund needed" }-
Sorry, maybe that was meant from someone who paid, had issues and asked for a refund and was denied. But hey, that is what they make credit card protection for with their credit card companies.>:(

Just figured paying consumers might want to know.

[kr4ey]

-{ Quote: "Just dont ask for a refund" }-

Kind of hard to ask for refund on a free product. The small price for the paid version is worth it, for this excellent software.

-{ Quote: "Sorry, maybe that was meant from someone who paid, had issues and asked for a refund and was denied. But hey, that is what they make credit card protection for with their credit card companies.>:(

Just figured paying consumers might want to know." }-

I am a paying consumer of PS, and have ZERO issues.
Any software will have some issues sometime in its development.
If there are issues the PS Developer is very very quick to fix them.

Rick

[Chuck57]

Free now, but the way I see it, as responsive as ProSecurity and CyberHawk is to customer suggestions and problems, I won't be running freeware long. Already hinting to the wife what she can get me for Christmas. I think the two would make a great present.

[Arup]

Three years back, I was using Avira, then called Anti Vir free, got infected with a virus that attacked a system file which was locked, since Avira doesn't have boot time scan, it couldn't clean it, posted at Avira forum, was told, use another anti virus, I did, used Avast and never looked back ever, I know Avira has better detection rates, but overall Avast rules, maybe I should have asked for a refund from free Avira :)

[TECHWG]

-{ Quote: "Free now, but the way I see it, as responsive as ProSecurity and CyberHawk is to customer suggestions and problems, I won't be running freeware long. Already hinting to the wife what she can get me for Christmas. I think the two would make a great present." }-

@Chuck57
Im really happy with PS my self. i do like cyberhawk since they both work together to compliment eachother :thumb:

@Arup
I am sorry for your loss Arup :'( but maybe you are better off using another antivirus when they suggest you use another. Its really bad when the owner/developers tell you to use another software product since i guess they were in a bad time or something perhaps? but i personally only used it for testing since it is not good as other antivirus in my own virus tests. I prefer NOD32 since its just seriously nice on detection and resources. But i feel some people forget and think HIPS software is a magic bullet. Its not people always need an antivirus and a firewall product WITH their HIPS and / or bahaviour blocker like CyberHawk.


I hope ProSecurity works well for you all, and hope you help when you can with comments and tell the developer or me when you get any problems.

[TECHWG]

I have to apoligyse incase someone has already said this, but this link was given to me today and it seems to have a huge review of ProSecurity v1.23 Paid and freeware.

http://wiki.castlecops.com/Prosecurity

Perhaps anybody interested in this product can read this and get some useful information about the product through the eyes of someone else.

WG

[Roger_]

-{ Quote: "I have to apoligyse incase someone has already said this, but this link was given to me today and it seems to have a huge review of ProSecurity v1.23 Paid and freeware.

http://wiki.castlecops.com/Prosecurity

Perhaps anybody interested in this product can read this and get some useful information about the product through the eyes of someone else.

WG" }-
Is there any planned fix for this particular weakness? ::)

-{ Quote: "Default mode automatically gives users the rights to start child process.

Prosecurity as a fairly tight setup, but one area in which it is somewhat loose is that, if you add a process to a ruleset (in response to a prompt + checking "away allow") it automatically gains the right of "Allowed to load applications". This gives it the right to start any child process which can be somewhat dangerous. As it stands there is no way to avoid this except to manually change it each time a rule is created." }-

[TECHWG]

I am not sure . . lets see what Jie says

[TECHWG]

I just sent a message to the developer about this.

Any other problems with 1.24 ? I personally dont have any actual prolems but apart from the slight niggle about when you have a huge list of rules and delete one at the bottom it takes a while to refresh. Any others?

[Roger_]

-{ Quote: "I just sent a message to the developer about this.

Any other problems with 1.24 ? I personally dont have any actual prolems but apart from the slight niggle about when you have a huge list of rules and delete one at the bottom it takes a while to refresh. Any others?" }-
Thanks much, TechWg, I asked the question on the PS forum and the developer already answered yesterday, I will paste it here:

'This is designed to reduce popups, because if all applications were not allowed to start other process, there would be some popups for this, actually if a process want to start another process that means the started process need to have privilege to start, this mean if the started process is a new process, there should be a warning box shown for this process starting action. If so there would be 2 popups to ensure a new process to start.

Actually there would be only a few application need to be restricted on loading other processes, such as Internet Explorer, Firefox and so on. But anyhow we will think about this, maybe PS need to provide a "default privilege settings" for this, then user can config what he(she) want. If so when a new app. rule is creating, PS will copy the default privilege settings.'

[Stem]

-{ Quote: "Any other problems with 1.24 ?" }-Yes, but I need time to check on the problem, it is currently based around the inclusion of the "over-ride" to enforce protection, which, well, is a possible problem, either due to incorrect implimentation, or incorrect reports for PS. I do not have the time to fully check on this at the moment (family illness) so will fully check/report when I can.

[TECHWG]

ok stem, no probs
As always he does his best to fix anything you guys can figure out.

[TECHWG]

-{ Quote: "Thanks much, TechWg, I asked the question on the PS forum and the developer already answered yesterday, I will paste it here:

'This is designed to reduce popups, because if all applications were not allowed to start other process, there would be some popups for this, actually if a process want to start another process that means the started process need to have privilege to start, this mean if the started process is a new process, there should be a warning box shown for this process starting action. If so there would be 2 popups to ensure a new process to start.

Actually there would be only a few application need to be restricted on loading other processes, such as Internet Explorer, Firefox and so on. But anyhow we will think about this, maybe PS need to provide a "default privilege settings" for this, then user can config what he(she) want. If so when a new app. rule is creating, PS will copy the default privilege settings.'" }-


I personally would really like this protection, BUT it is not important. although i do believe it would have real use, but at the end of the day its Jie's choice to not add a function he feels is not needed. Its usage would be so small and minor that its not really worth the time coding i guess.

WG

[Perman]

Hi, folks: I have been using its free version for the last 10 days or so, and very much impressed. It provides good protection and does not drag down system performance like other HIPS do. I know for extra $, it can be upgraded to pro(paid version), therefore I have a little question to ask. What is the rule of thumb to make this upgrade? Instead of the published chart of comparision, can someone use layman's language to describe it ? Thanks a million.:)

[TECHWG]

well firstly i would like to say im happy you like ProSecurity!.
Secondly, i would say if you feel you are more of a power user and would like to have more protection now, or like to have its ability to enable it when you need to beef up your security , i feel it may be the leap you are looking for. Else if you really feel comfortable with the freeware, then you may feel happy and stay with it.

WG

[Perman]

Hi,folks: An excellent advice. Thanks.:)

[TECHWG]

What do you think? Are you happy enough with freeware?

[Perman]

Hi, folks: Thank you for your concern. I think I am happy and ok w/ free version for now. The reasons being: I use ZASS(minus AV and AS), Avast Home, AVG AS plus and Deep Freeze standard, plus few AS scanner(on demand, such as SuperAntispyware). ZA has triple firewall; application,network and most importantly, O/S, these three would provide some coverages same as HIPS do . When I surf, I do it on DF's frozen state, very safe, coupled w/ proSecurity free 's protection, I think all areas I can think of are pretty much covered. Having said that, I may change my mind and upgrade to paid version in near future. It is always my pleasure to enjoy nice work produced by quality programs, just like sip a glass of Jonny Walker Blue label.:)

[TECHWG]

:thumb:

[Hyperion]

I tried the 1.24 free version.I think SSM free,is much better,can block much more leak tests out of the box.I think because PS allows by default a trusted application to do some things while SSM requests new permission?But for some reason i get the impression SSM asks me again for certain rules,as if it was "forgetting" them.Anyway.

2 bugs:

1)Visual,when using 1280x1024 with large fonts(120dpi) in LCD 60Hz 17":

http://img19.imageshack.us/img19/1446/20061216095321yd0.png

2)Upon uninstallation,i lost Firefox's bookmarks and every configuration setting in Firefox,even a Boolean rule i had added manually.

[kr4ey]

-{ Quote: "I tried the 1.24 free version.I think SSM free,is much better,can block much more leak tests out of the box.I think because PS allows by default a trusted application to do some things while SSM requests new permission?But for some reason i get the impression SSM asks me again for certain rules,as if it was "forgetting" them.Anyway.

2 bugs:

1)Visual,when using 1280x1024 with large fonts(120dpi) in LCD 60Hz 17":

http://img19.imageshack.us/img19/1446/20061216095321yd0.png

2)Upon uninstallation,i lost Firefox's bookmarks and every configuration setting in Firefox,even a Boolean rule i had added manually." }-

No problem here with losing Firefox bookmarks and configuration.
I have uninstalled a few times with no effect.

[kr4ey]

Christmas and New Years 35% discount on ProSecurity till January 15, 2007

http://www.proactive-hips.com/purchase.php

[PSDeveloper]

-{ Quote: "I tried the 1.24 free version.I think SSM free,is much better,can block much more leak tests out of the box.I think because PS allows by default a trusted application to do some things while SSM requests new permission?But for some reason i get the impression SSM asks me again for certain rules,as if it was "forgetting" them.Anyway.

2 bugs:

1)Visual,when using 1280x1024 with large fonts(120dpi) in LCD 60Hz 17":

http://img19.imageshack.us/img19/1446/20061216095321yd0.png" }-
Thanks for your liking! This problem will be fixed in the next version!
-{ Quote: "2)Upon uninstallation,i lost Firefox's bookmarks and every configuration setting in Firefox,even a Boolean rule i had added manually." }-
Thanks for your reporting, we haven't found this problem, could you tell me which version of ProSecurity and Firefox you are using?

[Hyperion]

-{ Quote: "Thanks for your liking! This problem will be fixed in the next version!" }-

No problem.For a HIPS that's new,it's very good and the free version offers more than PG Free and runs lighter than SSM Free from what i ve seen,specially CPU-wise,where SSM spikes to 2% of my CPU every few seconds.

-{ Quote: "Thanks for your reporting, we haven't found this problem, could you tell me which version of ProSecurity and Firefox you are using?" }-

I used the 1.24 and Firefox 2.0.I use italian windows XP and english firefox btw.Thankfully,my bookmarks were backed up,but it was a bit annoying.I think i was running AVG Free too at the time and Ashampoo free firewall.I say "think" because i had decided to format,so i tried various security programs lately.Maybe some of the previous ones left something behind,but i m sure i had the firefox issue once i uninstalled PS.

[farmerlee]

-{ Quote: "Christmas and New Years 35% discount on ProSecurity till January 15, 2007

http://www.proactive-hips.com/purchase.php" }-
Sweet! Thanks for the great offer team prosecurity

[Stem]

-{ Quote: "Sweet! Thanks for the great offer team prosecurity" }-Yes, I will certainly agree.

[TECHWG]

:thumb: i am drunki and dont want to post, but i have to day i am pleased wiht the offer of 35% and i am pleased that issued are being found! beucase when they are found, this means they are fixes very quickly! i am so proud of the creator aqnd his great skills in programming since he can do so much and he has no other job to hinder his work ! good work Jie and keep it up. :thumb:

-{ Quote: "Yes, I will certainly agree." }-

Did you get to test ps with anything that you nedded to test stem ?> or have you had no time at this time?

[theshadow247]

iam not shure if its just me or if this has happend to enyone else.but i tryed to install ps.free with kis 6.0.1.411.and kav 6.0.1.411.but wheen i try to restart my comp after install of ps.my comp just keeps on restarting over and over.....

[kr4ey]

-{ Quote: "iam not shure if its just me or if this has happend to enyone else.but i tryed to install ps.free with kis 6.0.1.411.and kav 6.0.1.411.but wheen i try to restart my comp after install of ps.my comp just keeps on restarting over and over....." }-

Did you try disabling KAV or KIS proactive defence before installing PS?, there may be a conflict betwwen the two.

[theshadow247]

no i didn't try that yet.iam just wondering if that is the problem.how will the two play together when i turn the proactive defense back on...

[Perman]

-{ Quote: "no i didn't try that yet.iam just wondering if that is the problem.how will the two play together when i turn the proactive defense back on..." }-
Hi, folks: If your O/S is window XP home sp2, and Kr4ey's method did not work, please post back here, I have a cure which has helped me before, perhaps it will save you this time too. Good luck.:)

[PSDeveloper]

-{ Quote: "iam not shure if its just me or if this has happend to enyone else.but i tryed to install ps.free with kis 6.0.1.411.and kav 6.0.1.411.but wheen i try to restart my comp after install of ps.my comp just keeps on restarting over and over....." }-
Thanks for your replying! We have found this problem, and this problem has been fixed on our testing, so it will be fixed on the next version.

[Perman]

Hi, folks: I have heard from somewhere before that the risk of running two HIPSs simultaneously is as bad as turning on two AVs w/ realtime sacanner. It appears to be the case. And I am glad that the author of this great app will take an extra length to fix it, which often lands on deaf ears of some self-proclaimed big apps. Nice approach, proSecurity!:)

[theshadow247]

i agree with Perman.the developer of this fine program realy does listen to what the user's have to say.i can see ps going far...

[TECHWG]

-{ Quote: "i agree with Perman.the developer of this fine program realy does listen to what the user's have to say.i can see ps going far..." }-

I hope very far. Its my favorite program and with all everyones help it will be amongst the best, if not THE. But all things take time, and i can assure you than the developer spends most of his day on PS so i can see it maturing very quickly i think.

[PSDeveloper]

ProSecurity 1.25 released!

What's new? December 24, v1.25
---------------------------------------
December 24, v1.25
1. [New][BOTH] Auto check updates.
2. [Fix][BOTH] Compatibility problem with Kaspersky Internet Security 6.0.
3. [Fix][BOTH] Some other small problems of GUI.
4. [Fix][FULL] Detecting Keylogger function is too sensitive.
5. [Improve][BOTH] Improved locking function.

If you want to download directly, please access here:
http://www.proactive-hips.com/download.php

Any feedback will be appreciated!

[Perman]

Hi, folks: Thanks for the updates. On other thread re; antirootkit, TECHWG has mentioned to this effect; it is a piece of cake for HIPS programmer to add antirootkit feature onto existing HIPS program. Is his comment/suggestion feasible? if it is, will you be interesting in implementing it? Thanks. Season's Greetings.

[farmerlee]

Just tried the autoupdate feature, it downloaded the update, then after installation told me it had failed to copy two files. I clicked ok and then it told me the update was successful. It seemed a little strange but 1.25 has been running good so far so i guess the update worked ok.

[poirot]

Happened the same here, with the same end result.
It must be a couple of files take longer than others and the system cant wait,???
Nice way of updating,anyway and all's well that.....

[TECHWG]

well after testing that rkdemo i had to reformat because i was too lazy to fix it , so i installed 1.25 fresh, just check if you want to, and export your rules, uninstall and install 1.25 fresh and see what happenes? I had no issues with 1.25 at all and my bugs i found are fixed in this released so good work Jie!

WG

[TECHWG]

-{ Quote: "Hi, folks: Thanks for the updates. On other thread re; antirootkit, TECHWG has mentioned to this effect; it is a piece of cake for HIPS programmer to add antirootkit feature onto existing HIPS program. Is his comment/suggestion feasible? if it is, will you be interesting in implementing it? Thanks. Season's Greetings." }-


Yes this functionality is basically, listing of hidden exe, and also what driver or process are hooking the kernel functions and giving option to unhook them. i think this would be a nice addition for another version perhaps

[kr4ey]

Very small GUI bug. 06 is missing. I noticed this in the last few builds, may have been there from first release.

186322

[TECHWG]

It looks normal on my computer, but in testing this i found a different GUI bug haha i will get on to the developer abou this

EDIT i think i am in 24 hour clock and do not have AM or PM so thats why it look normal for me. Thanks

[PSDeveloper]

-{ Quote: "Hi, folks: Thanks for the updates. On other thread re; antirootkit, TECHWG has mentioned to this effect; it is a piece of cake for HIPS programmer to add antirootkit feature onto existing HIPS program. Is his comment/suggestion feasible? if it is, will you be interesting in implementing it? Thanks. Season's Greetings." }-
Thanks for your suggestion, we planed to add this feature.:)

[PSDeveloper]

-{ Quote: "Just tried the autoupdate feature, it downloaded the update, then after installation told me it had failed to copy two files. I clicked ok and then it told me the update was successful. It seemed a little strange but 1.25 has been running good so far so i guess the update worked ok." }-
Thanks for your reporting, we have found this problem, this will be fixed in the next version!
Please don't worry, this problem have no any effect on using ProSecurity.

[PSDeveloper]

-{ Quote: "Very small GUI bug. 06 is missing. I noticed this in the last few builds, may have been there from first release.
" }-
Thanks for your reporting! This bug will be fixed in the next version.

[TECHWG]

hmm i guess at some point hes going to be adding anti rootkit tech to PS then cool. i did mention helios in passing a while ago and i was not sure if he would or not.

Nice :thumb:

[danny9]

Let me start by saying I've tried just about every hips type program out there with no luck.
Excessive memory usuage , blue screens and terrible slowdowns.
Decided to give it one more shot and downloaded ProSecurity based on what I've been hearing about it. The free version to start and I'll be damned!
Working Great on my system so far.
No trouble installing, the learning mode cycle or the protection mode it's in now. Memory usuage is very low and no slowdowns whatever.
Running great with KIS mp1 and BoClean.
Impressive, so far.
May be a definite keeper!:)

[TECHWG]

I am very glad to hear PS is helping you !

Please remember that you should use learn mode for at least 1 day really and about 2 reboots etc and user accoutn switches etc, this is to make sure you dont get locked out of your own PC. PS gives you control in this way and you have to tell it how to behave by using learn mode for this time.

[danny9]

-{ Quote: "I am very glad to hear PS is helping you !

Please remember that you should use learn mode for at least 1 day really and about 2 reboots etc and user accoutn switches etc, this is to make sure you dont get locked out of your own PC. PS gives you control in this way and you have to tell it how to behave by using learn mode for this time." }-

Thanks for the advise and the reply! :thumb:

[Long View]

-{ Quote: "Very small GUI bug. 06 is missing. I noticed this in the last few builds, may have been there from first release.

186322" }-

strange - just goes to show that there are benefits in 2006 12 25 ;D
backward dating works fine for me.

[TECHWG]

Yes 1.25 does not have this issue, i guessed it was because i was running 24 hour clock with no AM or PM, but even when i use these settings it still looks good . . Hmm well the dev knows about this and will make it fixed :thumb:

[duke1959]

Just a quick question. How can you lock yourself out of your PC? I like what I've read here so far, and the idea of using ProSecurity Free to protect my AV and FW from termination seems like a good idea. Plus I heard PS is an easier HIPS program than SSM to learn and understand. I'm just worried about the locking yourself out of your PC part. What if learning mode doesn't learn everything it's suppose to? Whoops that's two questions.

[Long View]

Not sure if I could do it again but when I first installed 1.24 I didn't bother to use
learning for very long and didn't perform the fast user switch so when I screwed up and my machine froze I had to reset reboot and now I was locked out. Fortunately I had made a system image before testing.

[TECHWG]

Yes,
Most HIPS software has preset rules for the main operaing system functions. ProSecurity does not do this and gives complece control to the advanced user. I actually MUST SAY that in the next version or version soon, there will be new functions added to ProSecurity that will aid in this matter by having at least 1 function of an import of system rules based on your Operating system - IF you choose this. This will help the new people to HIPS software to be secure with less clicking in the begining.
Hope this helps

WG

[duke1959]

And without locking ourselves out of our PC's too, correct? LOL

[TECHWG]

lol this is the goal . . to not lock your self out :D but if you use learn mode as described in the help file that comes up after install you also will be ok. There however have been cases where people did not take this advice and did just that! got locked out .:P

[farmerlee]

-{ Quote: "lol this is the goal . . to not lock your self out :D but if you use learn mode as described in the help file that comes up after install you also will be ok. There however have been cases where people did not take this advice and did just that! got locked out .:P" }-
I've had many adventures locking myself out of my computer with prosecurity. 99% of the time its a result of me experimenting too much. Its good fun and good learning :)

[duke1959]

If I were to try ProSecurity Free and would somehow "lock myself out". Is there a fix for it? Also I have tried an earlier version of SSM Free and liked it, but uninstalled it because at the time I shared my PC with my wife. Does anyone know if PS Free is easier to use than SSM Free is? I read in another thread here, (Cyberhawk or DSA) about PS hosing someones system. A possible software conflict or something. It was pretty frightening with something about their add/remove programs missing and what not.

[TECHWG]

-{ Quote: "I've had many adventures locking myself out of my computer with prosecurity. 99% of the time its a result of me experimenting too much. Its good fun and good learning :)" }-

I agree totally 100%. Throughought my life i have learned mostly myself through trashing things and experimenting. I am 22, with a CompTIA A+ qualification, and i have the knowledge in my head to beat the tutor in this course and i prove very useful to a friend of mine who is A+ N+ MCP :D and all i did was start on windows 3.1 and break things. However if you experiment with high level security software like PS too much and you dont have a good background in IT you may be stuck. you can always try booting the PC while holding F8 and selecing last known good config, in a bad case OR try and boot in safe mode and uninstall PS then reboot. Sometimes i have played with security software especially Tiny personal firewall back a while ago, and had to use ERD commander and hirens boot cd to access my system again. :blink: Boggling!. So only experiment to the degree you feel comfortable and always ALWAYS read the lable :D by this i mean as long as you do the learn mode as suggested you should be fine.

[Long View]

Although my preference is for Acronis True Image any image program will do.
Before "playing" with ProSecurity , or any new program really, it is a good idea to make a system image. Then when things go wrong you simply restore the good image. Having this level of protection allows for all sorts of dumb what if scenarios and really helps learn what a program will do and perhaps more what it will not do.

[TECHWG]

i have an answer for you . . . Vmware Server "FREE"

With this you can take your windows disk and install windows into it and keep a backup saved on cd. And then you can do what you want and then overwrite your vmware with the backed up one. This can all be done on your pc with no reboots to your main PC.

Useful

[farmerlee]

-{ Quote: "If I were to try ProSecurity Free and would somehow "lock myself out". Is there a fix for it? Also I have tried an earlier version of SSM Free and liked it, but uninstalled it because at the time I shared my PC with my wife. Does anyone know if PS Free is easier to use than SSM Free is? I read in another thread here, (Cyberhawk or DSA) about PS hosing someones system. A possible software conflict or something. It was pretty frightening with something about their add/remove programs missing and what not." }-
If you lock yourself out you can try booting into safe mode and uninstalling it. Its worked some of the time for me. Other times locking myself out has resulted in me having to restore an image of my hdd. I find PS is generally easier to use and its UI a lot better. PS free would probably be easier to use as i believe it doesn't have quite as many features as ssm free.

[TECHWG]

If you do the recomended 2 reboots and user switches if you have different accounts then you should be fine totally.

[TECHWG]

Global mod / Admin

Any chance we can have the topic renamed to v1.25 ?

WG

[TECHWG]

I have confirmation, The developer is implimenting certain features to enhance the usability to PS for the newbie user for HIPS and also the same old functionality for the seasoned professional/power user. Maybe this will take 2 versions, but i do know the next version will help the new users to HIPS softwares. I do not have a clear cut feature list but i would assume that default imports as an option would be one feature that a user can opt to use. Keep checking your updater to see if it gets updated in the next days or week etc, or check the forums to find an updated version.

WG

[PSDeveloper]

ProSecurity 1.26 released!

What's new? January 08, 2007
--------------------------------------------
1. [New] Rule Generator Wizard.
2. [New][BOTH] Trust/Distrust/Custom rule types.
3. [New][BOTH] French language supported.[Thanks Atomas31]
4. [Fix][FULL] A bug may cause BSOD while importing non-standard format registry rules.
5. [Fix][BOTH] A bug may cause BSOD while uninstalling or updating.
6. [Fix][BOTH] Can't get the real process information while terminating process from WinStationTerminateProcess in some case.
7. [Fix][BOTH] Some other small problems.
8. [Improve][FULL] More information of registry protection warning.


If you want to download directly, please access here:
http://www.proactive-hips.com/download.php

Any feedback will be appreciated!

[B]If you are admin or moderator, please help me to update the title of this thread to: ProSecurity v1.26 released! [as of Jan 08, 2007]

Thank you very much!

[TECHWG]

I really quite like the new wizard. It opens up more control and ease of use

[TECHWG]

Any feedback on the wizard thing that was added to this version ?

[smith2006]

-{ Quote: "Any feedback on the wizard thing that was added to this version ?" }-

It took quite awhile to perform the scan.

It also tried to connect out to crl.microsoft.com several times during the scan. May I know the reason?

[nick s]

-{ Quote: "...It also tried to connect out to crl.microsoft.com several times during the scan. May I know the reason?" }-Hi smith2006,

The wizard is querying the certificate revocation list at Microsoft (crl.microsoft.com) to verify digital signatures.

Nick

[TECHWG]

-{ Quote: "It took quite awhile to perform the scan.

It also tried to connect out to crl.microsoft.com several times during the scan. May I know the reason?" }-

It is checking for microsoft certificate. It only allows authentic microsoft certificates. if you block it checking the MS website you can lack rules.

[TECHWG]

I am beta testing a new version of PS with a fantastic new feature thats very cool and extreamly powerful! i cant tell you what it is, but what i want to tell you (if you dont already) keep checking the PS website or forum for the next update, because i guess it will be there in a few days. And the feature is more worthy than waynes world and bohemium rhapsody !

:lurking:

Sorry i cant tell you about it but i had to let you know to watch this space so to speak, because i would not want to ruin the suprise :D

[danny9]

Thanks for the teaser!:)
I'll be watching for the update.

[TECHWG]

well as with anything, somethings are useful to some and useless to others, however this feature is powerful in the way that i mean its a major function not a minor function. great for those people who want total control over their Pc. those people who would like a check box in real life to block a person when they are being anoying :). Dont tell me that nobody out there would not wish for a white list/black list function for reality for blocking PEOPLE ! lmao these types will love any powerful features :D

;D

[TECHWG]

I was in need of "doing something" so with my un-used time, i made an interactive flash file so people can a)see 99% or more of the interface and tick tick boxes , click combo boxes and see all the screens and options including the rule generator wizard in settings/other and b) see a virtual test PS where you can use start/programs to load a program and see how PS works for simple function - good for newbies to HIPS. Also in that mode the Internet explorer has exe launch protection and network protection. Its taken me 3 days and nights to make this staying up till 6 AM :)

Im making this because i learned some new things during its creation and i think it will be so much better than screenshots if someone wants to have a really good look at it before they download it. and as i say if someone is new to HIPS software, they can see its basic functions in action by clicking the text at the bottom of the screen to change modes.

let me know what you think, also if you find any bugs.

http://proactive-hips.com/techwg/gui.html

[Kees1958]

TechWG

Nicely done, add some comments so people can interpretate what they are seeing.

When PS offers disconnected interface I will swith from SSM to PS