Abtrusion Protector

Discussion in 'other anti-trojan software' started by Dazed_and_Confused, Mar 4, 2004.

Thread Status:
Not open for further replies.
  1. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    Does anyone out there have experience using Abtruson Protector? I've been using it for a couple of days now, and seems to work great! Wouldn't this be considered an Anti-Trojan application? I didn't see it on this site's list.
     
  2. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Hi Dazed_and_Confused, Abtrusion Protector is a sandbox, basically it vets all applications and asks if you want to allow it, if a programme file then gets changed either by an update or a Trojan then you will be re-asked if you wish to allow.
    Most sandboxes also watch the registry and sporned processes, so not exactly an AT but another layer of protection never-the-less. :)
    All sandboxes suffer one major caveat IMHO, they mainly rely on the user to make the right decision regarding allowed processes etc.

    System Safety Monitor is a free example http://maxcomputing.narod.ru/ssme.html?lang=en

    BitGuard, Tiny and Kerio firewalls now include Sand boxes at some level - Tiny's is realatively complex, Kerio's a lot more basic, Bitguard's is promising new firewall using a special driver hooked into a sandbox. There may be others that I am not aware of. :)

    I am sure the experts here will add more useful informatiom :)

    HTH Pill.
     
  3. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    Pilli,

    Thanks for the response. Prior to installing Abtrusion Protector, I considered System Safety Monitor as an alternative, and numerous folks recommended the former. They do basically the same thing, right?

    I guess my original question is: If I have a Firewall (Zone Alarm), Adware (Ad-Aware), Spybot, (Search & Destroy & Spyware Blaster), and a Sandbox, do I really need an Anti-Trojan as well? If so, what product do you recomend?

    And thanks again.
     
  4. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    I will have to say Trojan Defence Suite from DCS for the best AT software available, if you just want a resident scanner then BoClean is recommended.
    Be aware that there are new Trojans around now that can overcome firewalls, ATs and Avs - DCS also produces Process Guard. Process Guard can prevent many modern threats that no other software can. Use the link in my sig to visit DCS and see for yourself.
    DCS public forums are here at Wilders also :)
     
  5. 4A6F4A6F

    4A6F4A6F Registered Member

    Joined:
    Dec 23, 2003
    Posts:
    34
    Hi Dazed_and_Confused,

    TDS can detect a lot of trojans thats right and other stuff which is very malicious, like developing tools of visual C from microsoft (btw this was a funny false positiv) but the signatures are not really ehm strong. I prefer at scanners which use better signatures with an better qualitiy so an attacker is not able to pach a trojan to make it "undetect"..for TDS it is guite simple, like in the past for Trojan Hunter. There are also other anti-trojan scanners, like ewido, tauscan etc..try also these scanners.
     
  6. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    I appreciate everyone comments. But before I add yet ANOTHER piece of security software (especially a stay-resident), I would like to know what types of threats (in laymans terms) that I am not protected against. Again, here is my current portfolio of apps:

    - Zone Alarm Free Edition (Firewall)
    - Abtrusion Protector (Sandbox?)
    - Ad-Aware (Anti-Adware)
    - Spybot S&D (Anti-Spyware and maybe Anti-Trojan?)
    - SpywareBlaster (Anti-Spyware, and maybe Anti-Trojan?)
    - Active Ports (Port Monitoring)

    Again, isn't this enough?? What am I not protected against (assuming I have the above apps setup correctly)? Or do you recommend replacements for any of the above?

    Thanks again from a security novice.
     
  7. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Anti Trojan and Antivirus software, worms & probably browser exploits.
    New dangerous malware such as rootkits.
    A layered defence is what is needed as there is no such thing as 100% security.
     
  8. Dazed_and_Confused

    Dazed_and_Confused Registered Member

    Joined:
    Mar 4, 2004
    Posts:
    1,831
    Location:
    USA
    Oops. I forgot to add anti-virus software! Here is updated list.

    - Zone Alarm Free Edition (Firewall)
    - Abtrusion Protector (Sandbox?)
    - Ad-Aware (Anti-Adware)
    - Spybot S&D (Anti-Spyware and maybe Anti-Trojan?)
    - SpywareBlaster (Anti-Spyware, and maybe Anti-Trojan?)
    - Active Ports (Port Monitoring)
    - AVG Anti-Virus

    Sorry for the oversight. Just goes to show how rediculous this is getting!
     
  9. Pieter_Arntz

    Pieter_Arntz Spyware Veteran

    Joined:
    Apr 27, 2002
    Posts:
    13,330
    Location:
    Netherlands
  10. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Hi Dazed_and_Confused
    No, It just shows how dangerous the Internet has become especially from Operating Systems point of view, although MS gets a lot of stick for it's weaknesses, Linux has become almost as big a target.
    It was stated in PC Pro recently that one of the things driving hardware growth ie. CPU speed, memory etc. is the increased necessity to provide for more and more security softare. It used to be gaming! :)

    Your AV is quite a weak one, Nod32 is fast low resource and well liked as is Kaspersky though it is more resource hungry.

    You will get many opinions here on all manner of security software, my advice is to try as much as you can and select what you feel comfortable about.

    Have fun. Pilli :)
     
  11. WilliamP

    WilliamP Registered Member

    Joined:
    Jun 1, 2003
    Posts:
    2,201
    Location:
    Fayetteville, Ga
    I used SSM for a while and gave up on it. I have gone to AP and so far I like it a lot better. The thing that I liked is it copied all the files on the computer after it was loaded. Where SSM it only delt with what was running at the time. So it was a continuous process of clicking on a program then telling it that it was ok. Now all I have to worry about is new programs.
     
Thread Status:
Not open for further replies.