PDA

View Full Version : System Safety Monitor - for Win9x and above


peakaboo
November 27th, 2003, 08:12 AM
anyone know where I can get a clean working copy of SSM version 1.9.1

optigrab
November 27th, 2003, 08:46 AM
Hi Peekaboo

Would it be okay to ask why you want v1.9.1?

I'm having problems with v1.9.3b2 (documented on another thread), but I didn't have problems with v1.9.3b1.

Just wondering what your situation was and how an old version will help. This thread is nearly a year old.

Regards
Optigrab

peakaboo
November 27th, 2003, 09:26 AM
Hi Opti'

I'm on an old OS and anything above 1.9.1 does not work.

version 1.8.9 works ok but not as well as the later versions. The kernel which really hooks those API calls was added in the 1.9+ versions

Do you have a working config file for 1.9+

optigrab
November 27th, 2003, 09:45 AM
Hi Peekaboo

I see. Unfortunately I only have the config file for the latest beta, and as I said I'm having problems with it:

http://www.wilderssecurity.com/showthread.php?t=16272

Regards,
Optigrab

peakaboo
November 27th, 2003, 10:24 AM
good info opti'

i'll be on the look out for this...

peakaboo
November 27th, 2003, 11:32 PM
-{ Quote: " quoting: peakaboo link=board=23;threadid=5354;start=15#msg104647 date=1069943181]

version 1.8.9 works ok but not as well as the later versions. The kernel which really hooks those API calls was added in the 1.9+ versions

" }-

I like this program. Unfortunately it is difficult to near impossible to find a version above 1.8.9 which works on older pc's (beta's expire after certain date which is understandable).

This program stops programs not on trusted list dead in their tracks, also appears effective at catching dll injections.

other options for older pc's may be to see what a-squared brings to market. Process guard is another option but not for older pc's.

latest version of SSM is 1.9.3b2

c Opti's linked post above.

author's website here:

http://maxcomputing.narod.ru/ssme.html?lang

you can get the latest version here
(direct download link):

http://kormushkin.narod.ru/ssm.zip

_____________

once you get SSM running you may want to test it against the various leaktests out there... 8)

AAP
November 28th, 2003, 12:51 AM
Hello,To all

Hmmm problems what problems i'm using
this great program on all my puters & have
had nothing go wrong at all using 1.9.3 b

i started with 189 & again on all my puters
not one problem for once hehe

Good luck ;D

Hi,Paul

peakaboo
November 28th, 2003, 01:04 AM
-{ Quote: " quoting: AAP link=board=23;threadid=5354;start=15#msg104796 date=1069998662]

Hmmm problems what problems i'm using
this great program on all my puters & have
had nothing go wrong at all using 1.9.3 b

i started with 189 & again on all my puters
not one problem for once hehe

" }-

i'm talking above SSM version 1.8.9 ; this is where Max gives you the kernel which hooks those API calls so well... 8)

glad 4 u but what Max is doing with this program is complex and not 100% for all Win9x OS... and he doesn't claim to be 100% if you look at his site he even gives probability of success for current version:

OS Compatibility (for most current version)

Win 95 / OSR - 70%
Win 98 / SE - 95%
Win ME - 95%
Win NT 4.0 / SP4-6 - 95%
Win 2k (5.0) / SP1-3 - 99%
Win XP / SP - 100%

Great concept and great effort by Max on this difficult task of stopping dll injections and unauthorized programs... 8)

burma69
December 1st, 2003, 11:10 AM
This executable is supposed to work on Win95. Not sure how about hooking advantages though (kernel and other stuff should be copied from the latest 1.9.4)
http://mcom.fatal.ru/1.rar

peakaboo
December 1st, 2003, 07:33 PM
-{ Quote: " quoting: peakaboo link=board=23;threadid=5354;start=15#msg104786 date=1069993922]
-{ Quote: " quoting: peakaboo link=board=23;threadid=5354;start=15#msg104647 date=1069943181]

version 1.8.9 works ok but not as well as the later versions. The kernel which really hooks those API calls was added in the 1.9+ versions

" }-

I like this program. Unfortunately it is difficult to near impossible to find a version above 1.8.9 which works on older pc's (beta's expire after certain date which is understandable).

This program stops programs not on trusted list dead in their tracks, also appears effective at catching dll injections.

_____________

once you get SSM running you may want to test it against the various leaktests out there... 8)

" }-

Excellent Program. 8)

All I can say is Thanks to the author of this great program for making a special build so that older pc's can be protected too.

If you go to the author's website here:

http://maxcomputing.narod.ru/ssme.html?lang

you will see Max is making a valiant effort to make his program available to all versions of Windows (Windows 9x and above).

OS Compatibility (for most current version)

Win 95 / OSR - 0% (special build available upon request)
Win 98 / SE - 95%
Win ME - 95%
Win NT 4.0 / SP4-6 - 95%
Win 2k (5.0) / SP1-3 - 99%
Win XP / SP - 100%

so bottom line is if you try the latest version of SSM and for some reason you run into a problem, contact the author and he will work with you to resolve.

as noted above there is a special build available for below Windows 98.

Once you get SSM running and configured do the following:

1) download GRC leaktest here: http://grc.com/lt/leaktest.htm

2) connect to the internet & run the GRC leaktest without SSM

3) if it did not get thru your firewall try the following find the exact name of the .exe for your firewall, also find the .exe name for your browser (Iexplore.exe if you use IE). Rename the GRC leaktest to your firewall.exe run the leaktest again, afterwards try it again by renaming the leaktest to your browser.exe, and run the leak test.

4) if steps 2 or 3 was successful (you failed the leaktest), fire up SSM and try it again.

you can also go to the link below and try your luck against the leaktests there:

http://perso.wanadoo.fr/jugesoftware/firewallleaktester/eng/index.html

peakaboo
December 1st, 2003, 09:09 PM
title of thread was a little misleading for last 3 or so relocated posts... but no biggie

For those interested, the special build is not an older version adapted to fit older pc's (below Win98) as the thread name may imply (older version available?).

Older SSM versions are obsolete either because they are timed out betas or they do not have the kernal intercept (1.8.9 or below).

The special build is based on a current build SSM build 1.9.3 or above (nice interface BTW) adapted to work on older pc's...

and yes it is the real deal... IMO

http://www.wilderssecurity.com/showthread.php?t=5354;start=0

;)

LowWaterMark
December 1st, 2003, 09:18 PM
-{ Quote: "title of thread was a little misleading for last 3 or so relocated posts... but no biggie" }-

Well, the other thread is a full year old now, and bumping it didn't seem exactly correct either. Since you made the first post in this new thread, feel free to edit the title to anything you think more appropriate to what it ended up being about. I just wanted to separate the old thread off the new material posted here. ;)

bigc73542
December 2nd, 2003, 11:03 PM
I found ssm 1.9.1 it may be in russian or maybe not but it is 1.9.1




http://content.mail.ru/arch/8216/249464.html

peakaboo
December 3rd, 2003, 12:05 AM
bigc,

Thanks for taking the time to find this.

bigc73542
December 5th, 2003, 11:45 PM
No problem at all I like a challenge :)

zorro zorrito
October 12th, 2004, 08:27 PM
Hi all, I have been trying SSM, the newest one, and it goes on very well, but when I open yahoo messenger, it freezes my PC, I use windowsXP SP2, this is the only one problem that I have with it. Somebody knows why? would it be better to use an older version?
Another question is, could it be use it with abtrusion protector?
if not, which one do you prefer and why?
thanks

dukebluedevil
October 13th, 2004, 07:23 PM
You may try contacting the author at DivineGlitch@mail.ru , and telling him about this so he is aware of the problem and can fix it if need be. There also is a forum now you can visit and post problems or ask question at http://mc.webm.ru/bb/forum.php

I noticed a new version was put out yesterday. SSM 1.9.5 beta 3 now. Are you using this one?

Im not too familiar with Abtrusion protector, but I think it does similar things as SSM so it is probably not a very good idea to run both at once since you could get some conflicts.

zorro zorrito
October 13th, 2004, 10:16 PM
Thanks for answering dukebluedevil, it happends to me with ssm 1.9.5. b2, but if you say there´s a new one, b3, I am going to try it, and I´m going to the forum and send to to author the problem I found.

srfox
October 18th, 2004, 11:54 PM
I used SSM for over a year and found it to be a very useful program. Currently, I'm not using it but have some of registry stops (changes) effected by AdAware Pro, which I'm now testing.

I stopped using LeechGet because I found (or rather, SSM did) it was trying to inject itself into every process going on on my computer. Supposedly this is an adware free software, but I notice, it doesn't say so anymore. And since you have to have the paid version in order to have any kind of support, I was unable to ask LeechGet people about it.

Maybe I'll go back to using SSM, but for right now I'm happy just blocking registry changes, which the New version of Spybot will do as well. with it's Tea Timer.

dukebluedevil
November 21st, 2004, 06:36 PM
New version of SSM out today. Version 1.9.6 beta 1.
http://maxcomputing.narod.ru/ssme.html?lang=en

Whats new: prolonged evaluation period (till March 2005). It also includes some improved compatibility options for kernel-mode driver and allows usage of this driver even in non-admin profiles (in 1.9.5 SSM will not load driver if it was started in a limited user profile). Also there are some other bugfixes.


Any problems or suggestions can be reported to the developer at DivineGlitch@mail.ru , or at there forums http://mc.webm.ru/bb/forum.php