SpyShelter 4.x releases...

Re: SpyShelter 4.0 releases...

agree with you budy

 

Re: SpyShelter 4.0 releases...

So, would you recommend it over OA with the following setup:

Shadow Defender
DefenseWall v3.01
Windows XP Firewall
AVG 9.0 Free
PeerBlock
Sandboxie (on demand only)

 

Re: SpyShelter 4.0 releases...

IMHO, you do not need any more layered protection with your present setup

 

Re: SpyShelter 4.0 releases...

IMO, Spyshelter (SS) isn't essential to your set-up because DW has good keylogger protection.

OA is another non-essential because DW is a HIPS/FW combination that gives ~equal protection to that provided by OA (but by a different method).

WinXP's firewall is yet another non-essential because DW has an effective firewall built in.

However, if you would feel more comfortable by having an added layer of real-time protection (over & above that provided by DW & AVG) you wouldn't go wrong by using SS, especially if you do such things as online banking & stock trading.

 

Re: SpyShelter 4.0 releases...

Some preliminary testing with SS and my software, suggests that you may find conflicts if you install it alongside other HIPS programs.

So with your present setup, when taking SpyShelter on a trial, you may need to disable the system defense module.

 

Re: SpyShelter 4.0 releases...

SS Version 4.15RC (advanced beta) has been released. Final 4.15 version should be released in the near future. Version 4.15 offers the OPTION to install new versions over the previous version, with retention of all prior settings, & also gives advance notice when a restart is required.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

After further trial runs of SS, I have found that it has 3 main capabilities:

(1) anti-keylogger

(2) behavior-based process monitor ("system protection")

(3) "Autoblock suspicious behavior" option, available at the "Settings" tab of SS. Checking this option will cause SS to automatically block all dangerous actions except for auto-allowed Certified Applications.

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

When I have trialed SS in real-time, TOGETHER WITH Online Armor & Prevx, my computer has remained quite stable. Per Blackcat's post (#55) -- your mileage may differ.

NOTE: Just to refresh memories, SS runs on XP, Vista, & Win7 -- 32-bits AND 64-bits. Its license (not free) is "lifetime". Support is via email & is excellent (fast, friendly, competent). Website is over yonder.

 

4.15 (07/Jun/2010)


- Few new system protection functions (HIPS)
- Improved clipboard protection module
- Installer improvements: Update mode added, other
- Improved self defence
- GUI: New toolbar in BWList tab
- Minor bug-fixes
http://www.spyshelter.com/download/release/setup.exe

 

Thanks for the update bro...

 

no problemo

 

New Update;

And their new changelog page;
http://spyshelter.com/change_log.html

 

@Guest - Thanks for the notification!

P.S. I have a question about the white/black list tab of SS. Namely: does anyone know how to change a whitelisted program to be blacklisted? On the right-click menu I found no such option.

 

I think there is no way yet.

 

I sent them a request about this. They said they think it could be dangerous to revert from "allow" to "deny", because the process might already have done something bad, such as hooking the kernel. Merely changing to Deny status would not remove the hook.

They said that changes should be made by deleting the old rule & making a new one when the process tries to execute again.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

NEW QUESTION for whoever has an answer (or a comment)---

BACKGROUND: Spyshelter's pop-up alerts ask the user to Allow or Deny, & to check a "remember my decision" block. That much I understand. What I do NOT understand is another option presented on Spyshelter's pop-up alerts. Namely, there is a check box with the label . . .

"Apply this choice to all actions for current module."

QUESTION: What exactly does that mean? Does anyone know (or have a SWAG)?

 

The answer - SpyShelter GUI > About > Help > Alerts

“Apply the choice to all actions for current module" - when this option is selected SpyShelter will not ask you again for other action type for current listed module and will be allowing or blocking all activities depending on choice.

"Remember my choice" - When this option is selected rule is created in program Black/White lists tab and it's stored so next time you will run program program will automatically make decision basing on stored rule

 

Thanks for the reply.

I had already read the Help file, but it doesn't really EXPLAIN what it means. I have used lots of different security apps but I have never run across similar terminology. Here is the Help file on this item:

What is meant by "current listed module"? "Module" means part of something. What part? Part of what?

What is meant by "allowing or blocking all activities"? "All activities" means anything & everything. It is a dangerously broad term.

I am reluctant to check a block the effects of which are defined by unclear terminology. Further, I cannot suggest better wording until I understand what exactly the Help file is trying to say.

 

Thanks. IMO, your interpretation is correct.

Based on further communication with the friendly folks at Spyshelter headquarters, they have used "module" in the sense of "process" -- meaning an executable such as iexplore.exe, svchost, exe, lsass.exe, and so forth.

Therefore the check block "Apply this choice to all actions for current module" basically means to always trust or untrust the process which was the subject of the pop-up.