No Defensewall, GeSWall, Sandboxie, Appguard on 64-bit systems - What can you use?

Since you can't run Sandboxie, Defensewall, GeSWall, or AppGuard on 64-bit systems:

What can you run on a 64-bit system that provides similar protection to the software mentioned above?

 

Re: No Defensewall, GeSWall, Sandboxie, Appguard on 64-bit systems - What can you use

Use OS-internals, see http://blogs.technet.com/richard_macdonald/archive/2007/05/18/990366.aspx and http://www.windowsecurity.com/articles/Protecting-System-Files-UAC-Virtualization-Part2.html, see also http://www.cs.fsu.edu/~breno/CIS-5930/slides/class07.ppt (direct download). Another way is to hack something in the header of the executable to ensure it starts visualised

Edit 1: since spawned processes inherite the rights of their parent, you could exclude bat or script files (via the registry hack) and virtualise them this way.

Edit 2: Using Chrome or Iron (Portable preferably) with its own Sandbox, you are pretty safe.

Edit 3: KIS and Zone Alarm ForceField seem to work on 64 bits

Edit 4: HauteSecure (now gone and giving problems with Vista Sp2) was the only one for 64 bits protection (called soft sandboxing, like AppGuard does)

 

Comodo Internet Security.

 

Re: No Defensewall, GeSWall, Sandboxie, Appguard on 64-bit systems - What can you use

so CIS now has a sandbox/rights restriction ability now?...

 

Re: No Defensewall, GeSWall, Sandboxie, Appguard on 64-bit systems - What can you use

DeepFreeze (recommended), Anti-Executable V3 (I'm trialling with x32 Vista, but it runs on x64), First Defense PC Rescue.

 

Re: No Defensewall, GeSWall, Sandboxie, Appguard on 64-bit systems - What can you use

Oops. Didn't read that part. Thinking of v4...

Cheers,
Josh

 

Re: No Defensewall, GeSWall, Sandboxie, Appguard on 64-bit systems - What can you use

Speaking of which, do you've any plans on when to release it or so, and will it include my wished "Smart Mode"?

 

Re: No Defensewall, GeSWall, Sandboxie, Appguard on 64-bit systems - What can you use

what do u mean by "smart mode"?

 

Re: No Defensewall, GeSWall, Sandboxie, Appguard on 64-bit systems - What can you use

Josh knows the details, not me, but it's basically that CIS is able to make decisions by itself for all its components, greatly reducing pop-ups and prompts for the user. This is something which suits me.

 

Re: No Defensewall, GeSWall, Sandboxie, Appguard on 64-bit systems - What can you use

hmm sounds interesting

 

Re: No Defensewall, GeSWall, Sandboxie, Appguard on 64-bit systems - What can you use

from what I read v4 will arrive at the end of 2009,beginning of 2010.

 

Hi Raven,

I'm not aware that "Smart Mode" will CERTAINLY be included in v4. However, It was introduced to the Comodo Forum Moderators by Egemen (Lead Developer of CIS) when v3.9 was in beta.

I would say version 4... But we will see first. As Andyman said, v4 is scheduled end of the year or beginning of 2010. Current CIS version is the last version of the v3 series... It's all v4 now.

Cheers,
Josh

 

Any "New" Suggestions/Additions?

Thanks in Advance.

 

How about ShadowDefender and KeyScrambler

 

ZA forcefield supports 64bit

Fax

 

Spyware Terminator is coming out with a 64 bit version for its Real Time Shield so we can have HIPS on 64bit soon.

 

yup sometime this Jan. will be beta

 

are they going to be using same antivirus engine?

 

yes, Clamav, useless you know of a opensource AV that better they would use that but right now Clamav is the best open AV i think not sure.

 

i see the best thing of SpyWare Terminator is the hips shield

 

i agree if ST doesn't catch it the HIPS for sure will.

i have yet to see anything at alll get past the HIPS in ST.

 

cool application

 

yeah i do offer a 'Game Mode' which just stop popups but not protection.

also with 'Deny Mode' it makes ST just like AppGuard no new applaction can start.

 

and does it have pasword protection?

 

Your best bet is ShadowDefender 64 bit. Use it along side MBAM or Hitman Pro for any files or documents you want to exclude. You really dont need a real time scanner with it as MBAM or Hitman Pro will scan those areas excluded before you reboot just to be sure. I am amazed more 64 bit users just dont use this setup.

MBAM is free but not as encompassing as Hitman Pro. To me is is the most logical and sensible solution for 64 bit that I have found. Spyware Terminator and Forcefield just plain suck. Sorry but its true. And dont even get me started on Comodo. Proper name though.