Tried Comodo HIPS( installer version126.96.36.199 ) on XP SP2 shortly and I though of sharing my impressions. Main GUI seems washed out but GUI of popups is nice. Seemed to cause a bit slow down though not too much on my system but learning mode is definitely slow. It,s very chatty with lot of popups if u want to make ur own rules. Memory usage minimal though. Seems it has no MD5( or some other hash) checksum ATM( but I am not sure). A very nice feature is pre-defined or custom-made policies that can work as a policy based Sandbox. However the policies are bugg at the moment, they don,t work as expected and when I tried too restrictive policies, they almost hang the system due to almost 100% CPU usage. It still needs work but sure it will be a real nice feature. In additiuon to Execution Defence and Registry Defence, it has a strong File protection feature as well that works well. I tried some crude tests and the results are as follows. 1- APT and SPT all passed( excpet two of them) 2- AKLT- first two methos of logging failed 3- Prueba malware- passed nicely. 4- Home keylogger passed 5- It detects attempts to read screen directly( I am not aware of any other HIPS having this functionality but I might be wrong). 6- Detects keyboard access and hard disk access( seems like same functions in SSM though I cannot be sure) 7- A very special termination method by VideoLinkParser, detected and blocked successfully- Pass. 8- Termination by Spy.exe detected successfully- Pass 9- I tried one SSDT unhooker rootkit that was blocked successfully. Pass 10- Start up registry protection- Pass 11- Start up folder protection - Pass 12- KillDisk virus- not tried( may be someone can try in VM). These results seem impressive to me as it,s a rather initial beta version. BTW it seemed to have strange behaviour. On popup if I deny an executable( even without remember this option), I will be unable to launch this executable again until I rebooted my system. I killed its service but still sam- may be driver based protection?? not sure at all. I found few more glitiches as well. Also it gives too frquent memory modification popups as compared to other HIPS. These bugs/ features( ??) were big turn off to use this beta ATM. Not tried latest version yet.