strong standalone security apps?

what apps do you think can work and do it's job as standalone for realtime protection againts all kind of malware?any coments?thanks

 

Given a fully patched system with a beefed up Browser (Firefox w/WOT & NoScript, etc.) DefenseWall is the first one that comes to mind, then Malware Defender. I still want a layered approach though firewall, AV & HIPS.

 

cool agree

 

GesWall

 

i will say Malware Defender cause it covers alot

 

I really like GESWall or Defensewall as stand alones.

 

I use ShadowDefender on my desktop. I do have some other stuff for backup, just in case. So far, nothing has gotten through ShadowDefender.

Laptop is about the same, with Sandboxie for additional protection. Not sure I need SD and Sandboxie but they work.

 

cool what about keyloggers?

 

They are gone when he do a restart or in sandboxie case - flush the toilet

 

With Vista's defaults (Firewall, UAC, Windows Defender) my first choice would be a good imaging program: ShadowProtect Desktop.

 

NEVER had a problem on this setup using Sandboxie and Returnil in the last full year running this setup

 

i am testing malware defender i feel this app has alot of potential in it's engine it protects:registry,apps,files,network,etc,etc in real time

 

Would running in LUA fit into this standalone description? Or how about SRP with the Basic User approach? Can't beat the price that is for sure.

Sul.

 

yeap the software restriction policy it is a cool option to be a heavy heigh condender

 

As long as there's a router or hardware firewall out front, SSM would be very capable of securing Windows by itself, provided that the user has implemented a strong set of rules. That said, no security app should be expected to stand alone, no matter how good it is. No security apps does everything well. SSM has long been at the core of my security package but I also use a software firewall (Kerio 2.1.5) for traffic control and web content filtering (Proxomitron) to remove unwanted content from the permitted traffic. The 3 complement each other very well. I've used this combination for going on 4 years now on several operating systems and have never had to clean or remove malicious code from any of them.

 

i believe that a good hips with firewall will be a strong choice here or a pure sandbox/policy base sandbox

 

As most members know by now i am highly favorable toward a STRONG well designed HIPS with no fluff and stuff, just basics and features to add and Import/Export either individual rules or full backup & restore of complete RuleSets.

My WISH list?

A pure & "Lite" SUPER HIPS on the order of the EQS i fell head over heels for, that not only terminates identified potential threats, but like anti-rootkit tools, also offer to wipe the offending and found/aborted file or files preferably with an option to use ERASER! Same for registry items should something wedge itself to add to Enum\Root or even hidden blasted question mark items ??/blah blah bla with removal permissions made/set empty. DefenseWall offers registry rollback protections to this effect.

Integrated also a new undocumented but untouchable super self protection, like an alternate HIPS kernel as well as an Anti-Executable WhiteList like Anti-Executable employs and to a point now RETURNIL RVS, but without sandboxing or virtualizing at all. We're talking HIPS here not virtual systems LoL

Boy do i have an imagination, but a talented programmer could draw up a master blueprint to impliment and create such a pure classical SUPER HIPS! of this form.

 

nothing is imposible

 

As most members know by now i am highly favorable toward a STRONG well designed HIPS with no fluff and stuff, just basics and features to add and Import/Export either individual rules or full backup & restore of complete RuleSets.

My WISH list?

A pure & "Lite" SUPER HIPS on the order of the EQS i fell head over heels for, that not only terminates identified potential threats, but like anti-rootkit tools, also offer to wipe the offending and found/aborted file or files preferably with an option to use ERASER! Sane for registry items should something wedge itself to add to Enum\Root or even hidden blasted question mark items ??/blah blah bla with removal permissions made/set empty. DefenseWall offers registry rollback protections to this effect.

Integrated also a new undocumented but untouchable super self protection, like an alternate HIPS kernel as well as an Anti-Executable WhiteList like Anti-Executable employs and to a point now RETURNIL RVS, but without sandboxing or virtualizing at all. We're talking HIPS here not virtual systems LoL

Also a separate but somwhat integrated MD5/SHA1 checksum database that could be checked at will against certain extensions for changes and alerted on by color detail or audible alert.

I absolutely detest using on-line checking of system modules like EQS employed. NO accessing internet checking databases at all. Just me, but i hate this potential compromise because too many websites are easy to break into. A local list is more sound solution IMO.

Boy do i have an imagination, but a talented programmer could draw up a master blueprint to impliment and create such a pure classical SUPER HIPS! of this form.

 

A linux distro

 

cool