Free behavior blocker?

[Cvette]

Hi folks, I'm in the process of re-working my security setup, and although I have Comodo with D+, I would like some sort of customizable behavior blocker to do the things Comodo can't. I simply do not like ThreatFire, have had bad experiences in the past with it quarantining files without asking (something that really bugs me).

Can anyone recommend a good, customizable, free, behavior blocker for me?

[Cvette]

Or if you even call what I'm looking for a behavior blocker... I would like something similar to ThreatFire's "If something does (this) or (this) (here) or (there)".

[Ibrad]

I think Threatfire is the only free behavior blocker around.

[Watasha]

What "can't" D+ do that you want to do exactly?

[Cvette]

Hi Watasha, well, I liked the way in ThreatFire that you could add rules such as, alert me if a file is placed/modified/executed (here).

[bellgamin]

Originally Posted by AlanMcAlan

Or if you even call what I'm looking for a behavior blocker... I would like something similar to ThreatFire's "If something does (this) or (this) (here) or (there)".

Try Outpost-free (firewall + HIPS). It's somewhat open-ended for rule-setting (but not as open-ended as TF). Also, it's more of a classic HIPS than a behavior blocker. The only other pure behavior blocker AFAIK is Mamutu, but it isn't free.

[Watasha]

Originally Posted by AlanMcAlan

Hi Watasha, well, I liked the way in ThreatFire that you could add rules such as, alert me if a file is placed/modified/executed (here).

Okay. If you're happy with Comodo other than wanting another BB then the Outpost suggestion doesn't apply. D+ isn't actually a BB, it's classical HIPS with a BB aspect. A Behavior Blocker (eg ThreatFire, Mamutu) is not as secure as Classical HIPS, but does a good job, and is more suitable to the novice user.

Policy Restriction HIPS (eg DefenseWall, GesWall) is many times seen as secure as Classical HIPS, yet (most of the time) as easy to use as a BB.

Besides Threatfire (which seemed heavy on my system) and Mamatu (not free) there isn't much more that I know of I'm afraid.

[Cvette]

Originally Posted by Watasha

Okay. If you're happy with Comodo other than wanting another BB then the Outpost suggestion doesn't apply. D+ isn't actually a BB, it's classical HIPS with a BB aspect. A Behavior Blocker (eg ThreatFire, Mamutu) is not as secure as Classical HIPS, but does a good job, and is more suitable to the novice user.

Policy Restriction HIPS (eg DefenseWall, GesWall) is many times seen as secure as Classical HIPS, yet (most of the time) as easy to use as a BB.

Besides Threatfire (which seemed heavy on my system) and Mamatu (not free) there isn't much more that I know of I'm afraid.

Aww shucks, well thank you very much for the answer. I had a feeling ThreatFire and Mamatu were my only choices, though I'm running x64. I wish DW and GW would come to x64

[Mongol]

ProcessGuard free is still rattling around and even though it hasn't been updated in a few years it is still pretty darn good. You can get it at: http://download.cnet.com/ProcessGuar...-10333974.html ...

[wutsup]

im using threatfire at level 5 sensitivity(just changed it from 4 to 5 yesterday and it gives you a ntofication on every little single thing you do on your computer lol. but once you answer allow this with remember this for that certain app, it doesnt pop up again

[Saraceno]

The latest ThreatFire works great. But I'd use it with a simple AV (panda cloud), or with an on-demand scanner (Hitman Pro).

People have problems when running ThreatFire, with an advanced firewall, and an advanced AV. System slowdown and lockup. Almost like having a virus installed yeah?

To me, using ThreatFire on its own is enough. ThreatFire has an advanced feature to alert with connections, and you can remember answers, so it can be setup like a simple firewall.