Hey I like the way learning mode is so easy to use. Whenever something will not launch and run because of the "new and changed file" feature, I just hit learning mode, launch it, then turn LM off. I have everything under the MAIN Tab checked. Under the PROTECTION Tab everything is still just whatever it defaulted to. I'm not sure what is a good rule of thumb for those. Okay here's the deal. My system is in my home. So I'm not too worried that someone will sit down at it and do something I don't want them to. If they do, then they've broken into my home in my absence, and will likely just steal the thing anyway. I use LM that way so that my system learns everything that I want to do over time, and allows it. But I'm confident that if a new PRG made it onto my system, that it couldn't do anything anyway. Because I would just deny it permission. So does this constitute safe and reasonable practice? I have the whole gammet of security stuff running, bla bla bla. So it's been pain and problem free for a long long time.
Hi Mercurybird, The easiest way is to check if your important programs AV, AT, Firewall etc can be closed down allowing malware to disable your defences. Try Advaced Process Termination from here: http://www.diamondcs.com.au/index.php?page=products To test against your processes. You can then make a Judgement about what level of protection you need to apply based on the given test results. For instance if you can easily kill your firewall using the close message than you may want to enable Secure message handling to it's .exe HTH Pilli
