defensewall - possible set and forget for girlfriend's computer?

Discussion in 'other anti-malware software' started by chrome_sturmen, Dec 29, 2009.

Thread Status:
Not open for further replies.
  1. chrome_sturmen

    chrome_sturmen Registered Member

    Joined:
    Apr 29, 2006
    Posts:
    785
    Location:
    Sverige
    hey guys - i recently got the free 1 year license for defensewall (thank you softsphere).

    i'm setting up my girl's system, and i wondered if defensewall can be configured basically just to harden the browser, as a type of semi-set it and forget it type of thing? i noticed that once it was installed, it kept running any installer as untrusted - that wont work once i turn the system back over to my girlfriend because she doesnt know enough about computers to properly deal with these type things - but it would be nice to have firefox run as untrusted, that would probably keep her out of alot of trouble. i have avira free on the system, im just looking for a secondary defense layer. im out of town alot and cant run to her place to fix/tweak her computer everyday, so i'd like to set it as somewhat self-sufficient.

    thoughts are appreciated!
     
  2. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    DefenseWall is set out the box and forget;) it is ready for your girlfriend:)
     
  3. chrome_sturmen

    chrome_sturmen Registered Member

    Joined:
    Apr 29, 2006
    Posts:
    785
    Location:
    Sverige
    is it? after i installed it i installed firefox and defensewall ran the installer as untrusted. what happens when 2 weeks from now she gets a firefox update? o_O
     
  4. chrome_sturmen

    chrome_sturmen Registered Member

    Joined:
    Apr 29, 2006
    Posts:
    785
    Location:
    Sverige
    i ran the installer from a usb drive, it mayve been that the option was selected "run untrusted anything from a usb source" i'll have to check that
     
  5. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    you can always check to see if the usb is configure too for extra protection;)
     
  6. waters

    waters Registered Member

    Joined:
    Nov 8, 2004
    Posts:
    934
    Very bad idea unless you give her a talk to explain how to use it .
     
  7. dw426

    dw426 Registered Member

    Joined:
    Jan 3, 2007
    Posts:
    5,543
    Forget it. Defensewall is not "hard", but it isn't set and forget either. Download the free version of Sandboxie, or, if you're in a giving mood, pay for the "pro" version of it. You don't even have to screw with any settings to harden it, tell her to right-click Firefox and select "run sandboxed" (it will automatically force IE to run sandboxed) and away she goes.

    When she's done surfing, show her how to right-click the Sandboxie icon in the system tray to delete everything except files she wishes to save, and she'll stay safe as can be. If she needs to update any Firefox extensions or the browser itself, simply run it as normal for that instance and then go back to using it sandboxed.
     
  8. nikanthpromod

    nikanthpromod Registered Member

    Joined:
    Oct 9, 2009
    Posts:
    1,369
    Location:
    India
    Avira free would be enough for her.

    also use a free antispyware like adaware free
     
  9. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    What is it with FireFox that people prefer it over better designed browser as Opera or Iron? I once have gotten into a detailed discussion about this, so I won't go into that anymore. From Vista and onwards IE8 in protected mode is a hassle free and safe browser (a quality phising filter, smartscreen and cross site scripting protection which browser has got that out of the box?).

    On top of that when you run DefenseWall IE8 is secured and sealed. It does not matter whether you use FF, Opera, Chrome/Iron or IE8 with DefenseWall.

    Choose for IE8 it will update with Windows without problems. My mother of 76 understands how DefenseWall works, my mother in law also uses it (and yes my wife also).

    My mother in law only e-mails and plays on-line bridge, my mother likes to play mind games and she downloads a lot of games.

    Wife and mother in law
    a) right click an installer and set it to trusted. (which they never do by the way, most women use a computer and are not playing with it, they are not interested in what cpu it has got, what software etc, they look upon as purely functional, not a toy)

    My mother
    a) right click and scan with hitman Pro
    b) right click and set it to trusted.

    Regards Kees

    Note all PC's have Avast in Dutch with file shield only to check at writes.
     
    Last edited: Dec 29, 2009
  10. Ilya Rabinovich

    Ilya Rabinovich Developer

    Joined:
    Sep 13, 2005
    Posts:
    1,543
    With V3, installing new software as trusted is even simpler.
     
  11. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Ilya,

    Small change request. I would like a seperate log for programs set to trusted. Please list location and file name, plus date. I do not mind when they were installed, because I know that 9.999 out of 10.000 times it will be immediately after.

    When I combine this info with freeware programs like Comodo Time Machine or Paragon Backup and Recovery Free, it is much easier for me to backtrack changes and restore to a previous image after a 'shoot in the foot' incident for PC's which I am the sysadmin.

    Thanks
     
  12. Ilya Rabinovich

    Ilya Rabinovich Developer

    Joined:
    Sep 13, 2005
    Posts:
    1,543
    Separate log in the registry or a separate log entries with the "Events log" sheet?
     
  13. Blackcat

    Blackcat Registered Member

    Joined:
    Nov 22, 2002
    Posts:
    4,010
    Location:
    Christchurch, UK
    OT but care needed in using CTM; at least on some systems.
     
  14. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    I would opt for a seperate log, so it is not cluttered with other (daily operating) information. I do not mind where you store it, as long as it is possible to view it with a few clicks.

    When you stream line the GUI in release 3.1 (grouping simular items in a more logical way), you can also choose for a security status report in which you would include it (for instance where you explicitely tell that USB/network drives are auto protected, which directories are excluded from protection, which directories are marked as download, whether auto protect downloads is active, auto allow whitelist is active, etc), which applications are run untrusted, which applications are allowed outbound, in stead of a screen you can make it a pdf with quick link references to the help file on where to change this in the GUI).
    This is a way to provide a helicopter view of all the settings.

    Regards Kees
     
  15. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Yeah I know, using paragon image backups ;)
     
  16. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    17,047
    With the exception of CTM, DW, SBIE, even SD will work, but they all will require a little bit of thinking.

    I don't buy that older people, or girl friends can't learn, and if they don't want to be bothered, the will ultimately do something that causes them grief.

    The girl friend can't get into a car and drive with out thinking, and unfortunately today a computer on the internet is the same.

    Pete
     
  17. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Well for the record I agree. It just has to be simple, like with DW, when you want to install, trust it, or for my mom, check it first with 5 AV engines of Hitman Pro to get a second opinion (besides auto check of Avast). Such a simple instruction can be learned by everyone. Besides that most functional users hardly install something (my wife only installed a photo book application for digital printing of a service provider, my mther in law only skype to phone cheaply to Australia, I guess my mother is an exception = installing a lot of mind/memory/puzzle games)

    Regards Kees
     
    Last edited: Dec 29, 2009
  18. chrome_sturmen

    chrome_sturmen Registered Member

    Joined:
    Apr 29, 2006
    Posts:
    785
    Location:
    Sverige
    kees, i actually myself use opera almost exclusively and have for about ten years now, but i do keep firefox as a secondary browser for those few sites that don't work properly with opera. firefox has a slight edge on opera as regards ubiquitous compatibility, so in setting up my girlfriend's computer, i thought it might be better in the longhaul, to leave her with firefox.

    i have told her to leave her computer on overnight on wednesday nights, as early thursday morning i have set avira to scan, then superantispyware to scan, and also a system file cleaner to scan, so early thursdays is when her computer will clean and maintain itself. i think this should work out fairly well.

    i still havent decided on whether to put defensewall or sandboxie on her system, it may be easier for her to remember how to click "recover to desktop" for files downloaded through a sandboxed browser, than to try and explain the workings of defensewall - i better decide soon because she'll be here in a few hours to pick up her system, she's hounding me for it as she uses it both for her studies with nursing school and to make money with ebay on occasion :doubt:

    any other automated tasks you guys recommend instituting on the system, or any other measures i should set in place?

    thanks to all for the replies and tips!
     
  19. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    with sandboxie it is very risky to save or recover files to any folders,if this files are open/run they will no longer be sandbox,with defensewall if you saved any file type to any folder when you open them they are runing untrusted,for her defensewall is the safer way to go;)
     
  20. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Chrome_sturmen,

    With DefenseWall you basically won't need an Anti Virus, you can basically trim down on complex scannning schedules. Also when two women in their seventies can remember INSTAL = Right click + Trust this file, it would be an insult to you girlfriend thinking it would be to complex for her..

    The choice between Sandboxie and DefenseWall is simple, base it on user behaviour

    a) when she buys music SBIE is not an option (complex digital rights recovery)

    b) when she installs a lot of programs, choose Sandboxie, when she is on a fairly static set up choose DefenseWall. Reason is simple they provide the same protection while surfing and mailing, SBIE requires some attention when saving attachements and downloaded files (a restore), DefenseWall needs some attention (a trust) before installing software which requires Admin rights (the V3 will have a whitelist, so it is less of an issue). So what does she does more?: saving files/attachments or installing programs, make you choice.

    When you let her browse with IE8, she does not has an issue with correct rendering of pages and she will have one of the best phising filters, a download check through smart screen and cross site scripting protection. Do your self a favour, have a look at the PC's of her girl friends. I would install the browser they have. The last thing you want to be characterised is as the geek friend, who puts on funny programs to save her from (imaginary) cyber criminals and threats :ouch:


    Just my 2 cents, good luck deciding

    Regards Kees
     
    Last edited: Dec 29, 2009
  21. chrome_sturmen

    chrome_sturmen Registered Member

    Joined:
    Apr 29, 2006
    Posts:
    785
    Location:
    Sverige
    well, and that's a wrap - i've just sent her off back home with her system - i decided in the end to put defensewall on the system, i checked it out awhile and it seemed fine - and firefox was running as untrusted. so with a hardened browser, and weekly scans with avira, her system should maintain itself - or so i would hope (for her sake),

    much obliged to all for the input and advices!

    chrome
     
  22. nanana1

    nanana1 Frequent Poster

    Joined:
    Jun 22, 2007
    Posts:
    947
    ........and a very lucky and happy girlfriend tonight:p
     
  23. chrome_sturmen

    chrome_sturmen Registered Member

    Joined:
    Apr 29, 2006
    Posts:
    785
    Location:
    Sverige
    and thats not the lot, by the time i put a file manager on for her (directory opus), office, did basic tweaks,disabled useless services, themed the os for her, scheduled scanning for her,i guess it took me 10 hours of work ;( im always glad to help others with their computers, but at this point im glad to have her and her computer out of my house, and to spend some time with a beer and my guitar :D
     
  24. PC__Gamer

    PC__Gamer Registered Member

    Joined:
    Dec 26, 2009
    Posts:
    526
    yep, thats fine.

    however, you should explain to her how to install programs and updates with it and i see no reason why anything would get past DW. :)

    its a shame i use x64 now, because i miss DW in a way. :)
     
  25. Chuck57

    Chuck57 Registered Member

    Joined:
    Sep 2, 2002
    Posts:
    1,422
    Location:
    New Mexico, USA
    I run only Defensewall 3 and Sandboxie on my laptop, with Windows Vista firewall enabled because I haven't bothered turning it off. For routine Internet use, checking the too many forums on which I participate, I run Opera with just DefenseWall.

    If I'm going to a site I don't often visit (presumed safe, no porn, gaming, Twitter or any of those social places), I engage Sandboxie for that added edge. I've learned that some 'safe' sites aren't always completely safe any more.

    At this point in time, I view antivirus as an option rather than a necessity. It's probably wise to have but, with DefenseWall and Sandboxie, geswall, ShadowDefender or one of the others available, I don't think an AV is needed.
     
Loading...
Thread Status:
Not open for further replies.