Old CyberHawk version request

Does anyone has the CyberHawk version 1.2.0.36 for me?

Reason: this is the last version with custom rules and I want to test which features were working at the time.

I have the previous version (which is fast), registry and outbound traffic custom rules do not work, but file blocking (e.g. preventing avnotfy.exe to run) and suspicious data creation (e.g. *.scr or all other vulnarable extentions like *.drv, *.sys) are working.

Thanks in advance

Regards K

 

Re: OLd CyberHawlk version request

Googled, and found this: http://moshax.com/download/details_35794.html

you can check it out.

edit: nah, it's also 2.0.3. sorry.

yeah, I am also looking for it for some time now, but I guess the only way is thru other members who still have a copy of it (if it's legit to share it, i guess so )

 

Re: OLd CyberHawlk version request

I have got 1.2.0.39 on my second hard disk. How can I send it to you?

 

Re: OLd CyberHawlk version request

Thx CET,

The 1.2.0.39 version is the first which does not have the custom rules in it. Otherwise I would have PM-ed you my e-mail adres. May be I will get the 1.2.0.36 version of CyberHawk support.

I will do some test and will let you all know, when they send it to me.

Regards Kees

 

Re: OLd CyberHawlk version request

Ok, I am glad you found it.

 

CyberHawk Support only recently announced another new version was due for release soon. Like others i found the very first early beta or two far more effective and light on the system then the following versions afterwards.

They need to get crackin' because although this market isn't as crowded (yet), as say AntiSpyware or AntiVirus app, another new entry in this scene is working their way ahead of the pack and even giving some SSM users good results.

 

I hope the new version comes soon. Unlike the early versions of CH, the current version seems heavy, & is less friendly toward my other security programs.

It seems to me that the CH folks (who used to post here quite often) are keeping a very low profile nowadays -- TOO low, in my opinion, considering the plethora of competing behavior blockers nowadays.

 

Version 1.2.0.36 can still be downloaded from topdownloads.net. Click HERE (Direct Download)

I've got an earlier versions, of 1.1.1.3 & 1.1.3.2 just give me a shout if you want either.

 

Thats right bellgamin and theres really no sense in their periodic withdraw from the forums because they have nothing to fear or be ashamed about. Cyberhawk entered this scene with ferocity and drew plenty of positive attention in their favor. This is no reason for them to lay back in the easy chair and contemplate matters, rather they have something which is already showed great promise at the start and they need to exercise all the effort they can to get it precisely as users are expecting from it.

 

I am using the latest beta version and am having good results with the rules with respect to outbound activity blocking. In particular, you might try the following:

Network Connections - flag any attempt to make one (1) connection
Network Listening - flag any attempt to listen for a network connection
Registry Write - flag any attempt to write to the registry
File Rename - flag any attempt to rename a file

Do not specify any ports (i.e. skip that section) - this will limit the rule(s) to only the port(s) that you set. Set the exceptions on each rule to Trusted Processes and populate the Trusted Process list using the file selection tool provided - you do need the FULL PATH to the file/process that you are declaring trusted (this is an "issue" if you wish to think of that way but, it does make masquerading app names somewhat more difficult from a malware perspective). The 2.03 (current) version will block outbound activity and the upcoming version will be somewhat more solid.

Some folks may find that this rules regime is potent enough to eliminate using third party firewall software (use just the XP Firewall...although you may want some additional CH rules configuration) and thus reduce your system/CPU overhead. Personally, I seek to avoid the "Tower of Babel" approach to security software - KISS "keep it simple & solid"

Note that you WILL experience CH pop-ups with these rules until you get your Trusted Process populated. Note also that the Trusted Process list is not the same as the "remember" checkbox on the pop-ups - that is an Allow/Deny tool that functions similarly to Trusted Processes but is unique to each specific action/activity rather than each specific app or process.

Post back with your results on outbound activity blocking....it is useful to find out what might not be working....

And yes, it would be nice if the Novatix folks made an appearance more often.....hint

 

With each version that we release, we try and encompass better methods for catching malware. That being a given (I hope for most anti-malware companies) we are working like mad hatters to get this latest release out. We monitor the forums, (me especially) and again apologize for the absence, however with so much going on here, it is a little difficult.

We do respond to Support issues a quickly as possible, so we are not idle here, just trying to get a solid product out the door.

Dan

 

Greetings again CyberHawk Support! Your key word is "SOLID PRODUCT". It can be Xtremely formidable in what it's designed to offer customers and free users alike. Thanks for monitoring our posts and replying in kind. This gives us renewed encouragement to expect even better results with your newest release.

All The Best! Stay Focused and Keep The Course. Cyberhawk "IS" still one of the few HEAVYWEIGHTS in behavioral blocking protections and many of us are waiting with baited breath to turn your latest model loose in our security scheme.

 

There was a time when Cyberhawk (version 1 days) was the only HIPS I use...

 

Hi all,

I got the support reply of Dan (CyberHawk support). I did some tests, but decided to use 1.2.0.39 (together with WinPooch, Antivir, DefenseWall paid) on my son's PC.

Combo works real nice, only protection against terminination could be better (especially WinPooch). CyberHawk service is real hard to shutdown, so that is good. WinPooch is not used much (which is strange, because it has the same capabilities as Regdefend + data protection like SensitiveGuard + basic network control like DSA), so the chance that it will be targetted in a malware is low.

Next release 2.04 of CyberHawk should be slimmed down again (for programming it is easier to have one set of source code, for ram-usage it should be better to have two, but I am not complaining on a free security product).

When we switch to Vista, CyberHawk pro will be on my wishlist, for the time being the combo Winpooch and CyberHawk 1.2.0.39 offers simular protection as CyberHawk Pro (only with less code snipletts of known malicious software).

regards Kees