Wilders Security Forums  

Go Back   Wilders Security Forums > Official BrightFort Forum > BrightFort Retired Apps > FileChecker & ID-Blaster Forum
User Name
Password
Register FAQ Members List Calendar Search Today's Posts Mark Forums Read

 
 
Thread Tools Search this Thread
  #1  
Old June 7th, 2006, 10:05 AM
bktII bktII is offline
Frequent Poster
 
Join Date: Apr 2006
Posts: 224
Default FileChecker and JAR Files

Hi,

I am a very happy user of Spyware Blaster (have made a 'donation' for this) and downloaded FileChecker yesterday in an attempt to provide protection for JAR files in my system area. My original post (yesterday) at Wilders is here (due to the fact that I also use ProcessGuard and Prevx Pro 2005):

http://www.wilderssecurity.com/showthread.php?t=134327

When I enable FileChecker as a service it seems to work well enough in my Admin account; however, in my restricted user account it literally hogs all of my CPU so I disabled running as a service. Any recommendations as to how I should configure for JAR files?

Have lots of JAR files as I have Sun's JRE and JDK, Netbeans, Eclipse along with more than a handful of add'l Java apps.

Edit: Have decreased my file count to just over 50 (instead of a few 100). The restricted user account problem regarding CPU usage persists. Thus, it seems to be independent of the file count, unless I still have too many files.

Addl Question: If I run FileChecker in my Admin account on-demand occasionally (as opposed to continuously, so not as a service) to check for file changes, will I be able to determine if one of the files was changed while logged in as a restricted user?

Another Edit: Created a test file as Admin user and added to FileChecker check list. Logged out and into restricted account and added text to the test file. Logged out and back into Admin account and started up FileChecker and received no alert message when started and no file change was noted in the log. Then made another change in the Admin account while FileChecker was running and recieved an alert and changes were noted in the log file.

Bottom line: I cannot use FileChecker for monitoring my JAR files as I spend most of my time in the restricted user account, esp. when on the internet.

If I am wrong and there is another way to approach this with FileChecker, please let me know.

Regards,

bktII

Last edited by bktII : June 8th, 2006 at 05:46 PM. Reason: Spelling
  #2  
Old June 9th, 2006, 02:01 PM
bktII bktII is offline
Frequent Poster
 
Join Date: Apr 2006
Posts: 224
Thumbs up Re: FileChecker and JAR Files

OK,

I believe that I have found a workable solution for monitoring JAR Files with FileChecker.

Instead of running FileChecker as a service, I placed FileChecker in my startup list as HKEY_LOCAL_MACHINE so that it starts up "as an application" for all users. I have restarted, logged out/into my Admin and restricted user accounts and it works just fine. No CPU issues whatsoever.

Currently, I have 53 JAR files that I am monitoring.

bktII
 

Wilders Security Forums > Official BrightFort Forum > BrightFort Retired Apps > FileChecker & ID-Blaster Forum « Previous Thread | Next Thread »

Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Settings
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

vB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Forum Jump


All times are GMT -4. The time now is 02:46 AM.


Powered by vBulletin® Copyright ©2000 - 2013, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2013, Wilders Security Forums