Defensewall 3.0 goes Gold

I seriously suspect DW v3 crashed my system yesterday and made it so hard to me to boot Windows again.

 

I image and backup with Karen's daily. I have been trying Comodo Time Machine also. I have been using DW for a few years now with various AV's and not too many places that I would be nervous of going. DW has become my cornerstone over the years.

 

Imaging programs (such as Macrium Reflect & Image for Windows) make byte-by-byte images that can be restored EXTERNALLY from Windows, so that they can rescue you from such things as:

(1) Major screw-ups to your system disk because of infections, bad installs, etc.

(2) Total hard drive failure.

Comodo TM is NOT a full-on imaging software, but is more like Rollback.

AFAIK Karen's Replicator is primarily backup software and does not make externally restorable, byte-by-byte images. (Please correct me if I am wrong.)

I recommend you do a Wilders search on "imaging". Such a search will produce comparative &/or informational threads about imaging software. Example: HERE.

Good hunting.

 

Karen's Replicator i think it can do full partitions, i think. she says it can back up whole hard drives. never tried it tho. its is a good free back software tho. very easy to use.

 

@ Bellgamin

Been using Acronis for full images for years. Karen's Replicator is used to back up "My Documents" to external HD. Just trying CTM for quick roll backs.

@ Greg S
Reproduce your issue and make logs of it with Defensewall while you are doing it and then export them and send them to Ilya for a look see. He might just have to do a simple tweak to fix it. At any case I am sure it is something he will want to look into.

 

That's strange. What's your security setup?

 

Find .dmp files into your c:\windows\minidump folder, zip and send them to me.

 

question. when installing a program like foxit reader,will DW or OA prevent the installation of ask toolbar and other threats?

 

So far so good the time I've tested it - no problems or anything and it's proven its effectivity previously.

Would you guys and maybe the dev. say that the settings out-of-box are optimal as well?

 

Yes,

After resource management became available, I have done some extensive playing with it. The good thing is that Ilya has made the default config very strong, so normally DW works great out of the box.

I would check a few things
a) do you want dvd/cd to run trusted or untrusted (advanced options)

b) are the default download area's the ones that you want?
Reason for checking is that DW offers two proection mechanismes
- the policy HIPS limitation (comparable with user profilles and SRP) through trusted - untrusted setting
- the access limitation (comparable with ACL) through the protected unprotected option

By default untrusted items are protected after (I thought 2 weeks) in the download areas. This means that they are still untrusted, but newly downloaded items are not allowed to tamper with them. So you have to make up your mind whether you want that (I consider you more a power user than an average user, Raven). It could also be that you want this automatic protection mechanismes on other directories.

The other thing which download areas facilitate is the fact that signed executables are allowed to install. The advantage is that you do not need to set a downloaded executable as trusted (only for signed execs/trusted vendors).

c) In the past when DW ran fine, I used to unselect the logs (a tiny bit higher performance).

Be sure that all optimalisations passed to Ilya by users will be pushed through the updates when Ilya thinks they make sense.

Regards Kees
regards

 

If you mean running the FoxIt Installer as Untrusted, yes. If you install FoxIT Reader as Trusted, then Ask Toolbar would still be installed without warning.

 

Thank you. I have sent it to you.

 

I've mentioned on another topic here that with the help of CTM, I started out with Malware Defender, Windows 7 Firewall Control Plus, Avast 5 with File system shield and Behavior shield. I used another snapshot which had Windows 7 Firewall Control Plus removed. W7FCP is broken by DW for some reason. It can be installed after DW is installed though. Anyhow, I eventually used a clean snapshot with nothing but DW installed for security and got the same results as mentioned in my last reply. My suspicions as to the problem is that it's a svchost.exe process which includes the Base Filtering Engine and Diagnostic Policy Service. I'm capable and willing to test it further but don't really know what else to look for.

 

THis case you have to send me an e-mail and I'll send you test drivers set back.

 

@ Ilya

I added [EDIT: removed] two keys to Internet Explorer resource protection (and System)

HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main
HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings


I should have known