A couple of questions before I try EQS

[tepe2]

Is 3.41 the latest version?

Why can I not read the website? It is full of "??????? ?????".

[Kees1958]

Yep 3.41 is the last, in English that is. There is site with its own forum, but you have to read Chinese. So that will problably not help you, could someone who is the chinese language capable, help Tepe out?

Those are chinese characters I presume. DOwnload the program from this post http://www.wilderssecurity.com/showpost.php?p=1152637&postcount=10

When installing click on the drop down box of the opening screen and choose English

[tepe2]

Thanks Kees

I have downloaded EQS now and imported the file and registry protection filters you posted in another thread. And since I now have OA free I have also set the protection mode like you did here:

http://www.wilderssecurity.com/showpost.php?p=1163738&postcount=9

-{ Quote: "Next select this imported filter and unselect the default System File protection filter." }-
Maybe I did something wrong at first, but I think I had to delete the default System File protection before I could import the filter. But it does not really matter because when testing is finish I will restore an image and start all over again.

In the main window "System Protection" should I disable the Application Protection? (And let OA do this part)?

[Kees1958]

Tepe,

Yes you should disable the default file protection.

I have played a little with EQS and the best application protection is (together with OA)
- Excution of application IGNORE
- Load Library File IGNORE (short IGN)
- Load driver IGN
- Access to physical memory IGN
- Low level disk operation Prompt + Allow (after some time you can set it to block)
- Creat remote tread Promot + Allow (short = P+A, ditto = set to block after some time)
- Modify memory etc IGN
- Terminate suspend Process IGN
- Shutdown restart IGN
- Terminate/Suspend thread IGN
- Instal gloabal hook IGN
- Log keystrokes P+A (ditto)
- Modify System Time P+A
- Debug etc P+A
- Imitate keyboard P+A

Note that Mike Nash said that the next OA release will have all the startup entry protection of Toni Klein. I more or less copied Toni's filters for Regdefend. So when OA offers advanced (and not limited) protection in the free version, you can disable the registry protection. In fact when OA free should offer Toni's registry protection set + file protection + low level disk access protection OA free is the only thing you will ever need.

Mike is a nice guy, but I can not imagine he would offer this registry protection in the free version.

Regards Kees

[tepe2]

Thank you so much Kees :)

OA improves all the time :thumb:

I agree with what you have said earlier that EQS+OA free may be the strongest free protection for XP. But if I pay for OA after the next release it will offer same protection as EQS? No need for EQS? If so I prefer to pay for OA. More convenient updates and backup/restore settings. And I could use one, instead of two applications. That would be perfect for me :) And I guess in the next release of OA I can import filters?

[Kees1958]

Tepe,

You still would not have low level disk warning. For ease of use it is a good idea to pay for OA. Considering the fact that Toni Klein has adviced them in startup protection.

When you run OA with warn when unknown program starts option, you will be fine. Another option is to uncheck warn when unknown program starts and run OA together with SafeSpacePersonal. Now you would not need SafeSpace Personal all the time, only for nasty browsing (searching for cracks, visiting pron sites),

With Avast and its Web module (check incoming data streams) I recon that with a normal surfing behaviour you even would not need SafeSpacePersonal.

So YES: buying OA's next release is a smart thing to do (skip EQS in that scenario). When you use a freeware AV, use Avast in this case (because of the Web, P2P, Network. Mail shields)

[tepe2]

Kees you are very helpful, so thanks again.

-{ Quote: "You still would not have low level disk warning." }-
I want that so best to keep EQS even if I pay for OA, and I think I will.

-{ Quote: "When you run OA with warn when unknown program starts option, you will be fine." }-
I do and will do in the future so no need for SafeSpace.

-{ Quote: "So YES: buying OA's next release is a smart thing to do (skip EQS in that scenario)." }-
But then I miss low level disk warning, so better keep EQS.

-{ Quote: "When you use a freeware AV, use Avast in this case (because of the Web, P2P, Network. Mail shields)" }-
I thaught OA paid covers all this so why Avast? If Im wrong maybe I use Avast instead of Avira which I try right now.

Hope the next release of OA is soon :)