Light Weight HIPS for 64 bit OS

[Noob]

WinPatrol is more like a system change notifier for me.
I don't really like it because it is not as granular as a real HIPS and because depending on what happens it only alerts you of the changes but does not prevents it.

[mattbiernat]

Originally Posted by J_L

UAC still helps, unless your HIPS can manage user rights.

still not sure what the difference is... UAC prompts me every time I want to start an .exe while HIPS does the same.

[Noob]

Well if you have used a real Classical HIPS you would know that HIPS prompts you for . . . every single change in your system. Not only exe's.

[mattbiernat]

Okay OA got removed. It was really slowing down my system. I have moved on to Spyware Shelter, we will see if the system is gonna get bugged down or if its going to remain as fast and snappy as it is right now.

[jmonge]

Spyware Shelter gave a bluescreen today and i have to removed it

[mattbiernat]

yes Im testing it out. im still not sure If im gonna buy the full version. last update was almost 9 months ago...
so far SS gave me trouble with Rollback Rx, after I added Rollback to exclusion list, I had no problems.

[ESQ_ERRANT]

On my machine, I have found the following software that I presently use, or have in the past used, to be compatible with my WIN7 PRO 64BIT OS:

1) "ZEMANA"
2) "WINPATROL PLUS"
3) "ONLINE ARMOR" (BUT NOTE: OA IS NOT COMPATIBLE WITH MY FIRETRUST "MAILWASHER PRO" ANTI-SPAM PROGRAM AND, AS I DO NOT WISH TO DO WITHOUT "MAILWASHER," I HAVE RESORTED TO USE OF THE MS FIREWALL ALONG WITH MY NETGEAR NAT ROUTER).

I have never used and so cannot comment on the other software that you mention in your post.

[ComputerSaysNo]

$25 for Emsisoft Internet Security pack over @ malwaretips. Can't go wrong, I'm not sure why everyone has problems with OA. It runs perfectly on my system with Emsisoft Anti Malware. Together they make a great combo I think.

[Amit]

Originally Posted by ComputerSaysNo

$25 for Emsisoft Internet Security pack over @ malwaretips. Can't go wrong, I'm not sure why everyone has problems with OA. It runs perfectly on my system with Emsisoft Anti Malware. Together they make a great combo I think.

My thoughts exactly. Emsisoft Internet Security Pack is the best security suite imo. It's runs very smooth, fast and provides solid protection.

[ComputerSaysNo]

yeah me too, I'm wondering if people are not letting learning mode run on OA. It's probably a good idea to let it run first. I only get popups on my USB tool kit when I connect my USB stick but otherwise not a beep. So my tip let learning mode run.

Otherwise it could be ancient hardware, I just suspect everyone has at least 8GB of DDR these days. Even 16GB is the norm even for high end laptops, lowend 8GB so I'm stumped why people are having troubles with Emsisoft software and I'm the harshest critic there is when it comes to putting my $ in security software.

[Amit]

And furthermore I've hardened both OA and EAM! Still it's absolutely no hassle and runs light.

[lordraiden]

WinPatrol and Zemana are not HIPS.
The development of PatriotNG and Spyshelter seems to be stopped.

The matousec tests showed that on 64 bit systems the HIPS of Comodo has no rival, and IMO is the lightest one and it's free.

http://www.matousec.com/projects/pro...64/results.php

[Amit]

Originally Posted by lordraiden

WinPatrol and Zemana are not HIPS.
The development of PatriotNG and Spyshelter seems to be stopped.

The matousec tests showed that on 64 bit systems the HIPS of Comodo has no rival, and IMO is the lightest one

http://www.matousec.com/projects/pro...64/results.php

WinPatrol is a classical HIPS.

[lordraiden]

Originally Posted by Amit

WinPatrol is a classical HIPS.

Well if you want to call HIPS a product able to block/detect the 1% of things than OA, Comodo, or privatefirewall are able to block...
Is not even able to work as an anti executable so to call it an HIPS is completely wrong.

[mattbiernat]

Originally Posted by lordraiden

WinPatrol and Zemana are not HIPS.
The development of PatriotNG and Spyshelter seems to be stopped.

http://www.matousec.com/projects/pro...64/results.php

how do you know Spyshelter development stopped?

[Amit]

Originally Posted by lordraiden

Well if you want to call HIPS a product able to block/detect the 1% of things than OA, Comodo, or privatefirewall are able to block...
Is not even able to work as an anti executable so to call it an HIPS is completely wrong.

No it is not wrong to call WP a classical HIPS. You see HIPS is a more general term. Today's HIPS like OA and Comodo D+ may have evolved and improved tremendously over the years, but things like winpatrol are still HIPS to some extent. You may have forgotten that in 1997, WinPatrol was the first program to use a behavioral approach to detecting Zero-Day attacks and infiltrations of your computing environment. Now HIPS has evolved so much that Winpatrol seems to be doing in your words, detecting the 1% of things than OA........

That's why it is still called a classical HIPS. If you don't like calling it a HIPS because it's a system monitor like app then fine, call it a classical HIPS. No problem you see. Have a nice day!

[jmonge]

webroot has a hips engine

[Amit]

Originally Posted by jmonge

webroot has a hips engine

Yes but you've got to disable all the three heuristics then- advanced heuristics, age heuristics and popularity heuristics. Whereas a suite like CIS or KIS offer both heuristics and HIPS at the same time.

[jmonge]

oh well

[Amit]

Originally Posted by jmonge

oh well

Yeah in that aspect WSA is

[jmonge]

i see

[Noob]

Personally i wouldn't call WinPatrol a HIPS i feel it's more like HIDS which means it's detection instead of prevention. Just my personal opinion.

[Amit]

Originally Posted by Noob

Personally i wouldn't call WinPatrol a HIPS i feel it's more like HIDS which means it's detection instead of prevention. Just my personal opinion.

Then don't call it HIPS. Call it a classical HIPS. Truce.

[jmonge]

i will call it scotty

[Amit]

Originally Posted by jmonge

i will call it scotty

LOL. Okay then J let's call it by it's original name- scotty. Truce everyone.