Any good alternatives to replace anti-trojans

Discussion in 'other anti-trojan software' started by Wai_Wai, Aug 16, 2005.

Thread Status:
Not open for further replies.
  1. Wai_Wai

    Wai_Wai Registered Member

    Joined:
    Dec 28, 2004
    Posts:
    556
    Previosuly discussed at:
    https://www.wilderssecurity.com/showthread.php?p=533721&posted=1#post533721

    Since anti-trojans only provide a bit extra help to the resident AV ANd are only focussed on trojans only, here's the question:

    - Does anyone have any good alternatives to introduce to prevent trojans and also other malware?
    If so, what are they? And any good security software to introduce?
     
  2. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    3,943
    Location:
    California
    As I mentioned in the other thread, anti-intrusion/execution protection is as good a preventative measure as any.

    As I understand it, AT programs detect, not prevent from getting in, and would only be necessary if one wasn't confident enough in his/her good judgment and other preventative measures. (Same thing with AV)

    There are many good products - just search these forums for anti intrusion, etc. and read about the products, go to the web sites, etc. Personal recommendations are not as useful as on-hands testing, etc.

    (lots of etcs, etc)

    regards,

    -rich
    ________________
    ~~Be ALERT!!! ~~
     
  3. richrf

    richrf Registered Member

    Joined:
    Dec 11, 2003
    Posts:
    1,907
    Ditto,
    Rich
    ________________
    ~~Be ALERT!!! ~~[/QUOTE]
     
  4. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    Online Armor is a superb Host Intrusion Protection System (HIPS) that protects against a very broad spectrum of malware.
     
  5. Starrob

    Starrob Registered Member

    Joined:
    Apr 14, 2004
    Posts:
    493

    Online Armor also has excellent customer service. MikeNash is also willing to listen to questions/suggestions/problems and actually responds to them.

    Online Armor also appears to be heading to be more "user-friendly" than a lot of the other HIPS products ot there. This might possibly be a product that combines excellent protection with ease of use. It is a product to research.


    Starrob
     
  6. JerryM

    JerryM Registered Member

    Joined:
    Aug 31, 2003
    Posts:
    4,221
    Can I use Online Armor with Snoop Free? Are they essentially the same?

    Thanks,
    Jerry
     
  7. JRCATES

    JRCATES Registered Member

    Joined:
    Apr 7, 2005
    Posts:
    1,203
    Location:
    USA
    Hi Jerry,

    They provide coverage for basically the same thing in regards to keylogger detection (using "behavior based" detection rather than signatures"), and while I know that Snoop Free is able to detect and prevent "screenshot capturing", I'm not absolutely certain if OA does this (Mike hasn't mentioned or indicated this for sure). But my guess is that YES, it absolutely does (because it would likely PREVENT the program from being installed on your machine *at the very least, alert you to it* and if it was installed before OA was, OA would likely catch it as it was activated to run). OA could also remove the offending program and all of the files that it created, if it was allowed to run by mistake.

    OA provides more coverage in more areas than Snoop Free, and is definitely a product on the rise. While Snoop Free IS free and OA comes with a price....considering the additional protection that OA provides and areas that it covers (which could save you the headache of possible financial loss as well as valuable personal information and data), it is worthy of the cost.
     
  8. shadowatcher

    shadowatcher Registered Member

    Joined:
    Aug 17, 2005
    Posts:
    8
    Hey there! Just downloaded Online Armor and like it so far. What firewall to you use with it? I was going to use Tiny Firewall 2005 but there is a problem with compatibility between the two. I can't stand ZA and Sygate hasn't been updated in two years. I don't lke how much resources Kerio takes up. Any suggestionso_O Also are there any other good programs to compliment Onlne Armor?

    Thanks! :D
     
  9. Notok

    Notok Registered Member

    Joined:
    May 28, 2004
    Posts:
    2,969
    Location:
    Portland, OR (USA)
    OA is planning on putting in a firewall, among many other things, in an upcoming version soon. FileSecLab makes a good free firewall, but I've been very very happy with Look n Stop. Mike has stated that you will be able to disable the firewall and use whatever one you want, should you decide to do so. To supplement OA I use NOD32, Ewido, and do some hardening (including using PreEmpt). I do use some other behavior blockers as well, but since they're still in beta I won't recommend anything until they're finished.
     
  10. Acadia

    Acadia Registered Member

    Joined:
    Sep 8, 2002
    Posts:
    4,048
    Location:
    SouthCentral PA
    Hmmm, interesting bellgamin, thanks for mentioning OA, I had never even heard of it. How does it compare to ProcessGuard (which I have never used)? Does OA work with Opera? Thanks again.

    Acadia
     
  11. World Industries

    World Industries Registered Member

    Joined:
    Jul 28, 2005
    Posts:
    29
    Heres the thread on OA

    https://www.wilderssecurity.com/showthread.php?t=83899&page=1&pp=25

    World Industries
     
  12. Wai_Wai

    Wai_Wai Registered Member

    Joined:
    Dec 28, 2004
    Posts:
    556
    Hi, bellgamin.
    I know you are the beta tester of OA.
    Have you tried ProcessGuard or System Safety Monitor or Viguard as well?

    How will you compare it with the above?

    And one more question:
    - can I run more than 1 intrusion detection system in my computer?
     
  13. Wai_Wai

    Wai_Wai Registered Member

    Joined:
    Dec 28, 2004
    Posts:
    556
    Hi.
    Tiny Firewall 2005 is not simply a normal firewall which people refer to. Normal firewall here means Network Firewall. It also deals with many other things, and it's both network and application firewall.

    So it's possible for OA to conflict with Tiny Firewall in this regard.
     
  14. MikeNash

    MikeNash Security Expert

    Joined:
    Jun 9, 2005
    Posts:
    1,654
    Location:
    Sydney, Australia
    Hi Acadia,

    OA *should* work with Opera, but at the moment there is a known issue whereby the WebShield is somehow bypassed by Opera. We're looking into it - the idea is that OA should work with ALL browsers (its implemented as a transparent proxy).

    Best way is just to grab a copy though - no need to mail me any more, there's a key on the site - although, I love to get feedback email, keep that coming guys :)

    Hope that helps

    Mike
     
  15. MikeNash

    MikeNash Security Expert

    Joined:
    Jun 9, 2005
    Posts:
    1,654
    Location:
    Sydney, Australia
    JR, you do us too much credit - Screen Capture is not in there yet - but it's on the (ever growing) list. I'm finalising the 1.2 feature list this weekend - ScreenCapture protection is on it.

    You are of course, absolutely correct that if the program is not allowed to run then it cannot snag screenshots - OA's webshield and program blocker will at least give you the opportunity to prevent it initialising.

    (My favorite demo of OA was visiting Citibank's website with a keylogger installed - it initialised as soon as we got to the login page - it could have been doing screencaps as well, but the keylogger warning was enough to make sure I didnt type in real details - that, of course, and my lack of Citibank account).


    Mike
     
Thread Status:
Not open for further replies.