EQSecure 3.41 Settings

The ruleset is only for Windows XP and EQS v3.41.

 

mkay :/ thanks for the quick reply!

 

IS HIPS a better way to manage against nefarious use of RPC, IDL, TLBs and COM components?

 

Here's another ruleset update:

eqsecure.v3.41.winxp.rules.v20081219-exp.zip

http://drop.io/eqsecure

Enjoy,

~Alcyon~.

 

Thanks!

 

I just installed the last one. Thanks Alcyon.

 

Keep rollin 'em out there Alcyon

You're mastering this rule making for EQS like a machine

Finally starting to gather up all the rules released over the months and with any luck i might just achieve some order over here in having them categorized.

We should start a new thread for EQS loyals as to your favorite rules. Mine is many because there are so many fantastic rules, but one i think i fancy right up there with my favs is the New Folder Guard one. LoL Brilliant addition Alcyon!

EASTER

 

One that i like a lot is "Make Specific Files Read-Only (All Drives)" aka "Kiosk Mode". Btw, i'm still working on an Enhanced ruleset edition. A good amount of new algorithms will be added

 

Indeed another good one Alcyon. We'll be watching for these excellent new rules

EASTER

 

Merry Christmas,

Been having an issue that involve EQS. Between 4 n 5 in the morning the computer locks up. There is this image of a window when I can close other windows. It's the EQS alert. It's been occuring since I upgraded the rules to 20081207, don't have the latest installed yet. Don't know what the alert is about because of the lock up. Have to remove power in order to fix.

@Easter,

If you could figure a way to get it to start pre-boot, that would be amazing.

 

Checking!

If you encounter a slow down or other glitch on any rules just switch over to a different set untill theres time to nail down the prob, EASTER.

HAPPY HOLIDAYS! ​

 

A little Christmas gift for all

eqsecure.v3.41.winxp.rules.v20081226-exp.zip

http://drop.io/eqsecure

@ Searching, if you always have your eqsecure log files, you can privately share them with me by making a temporary drop (drop.io). This way, i'll probably be able to isolate the problem.

 

I took Eqsecure for a test drive and really lliked it...........until I found out that it was not working on any of the limited user accounts on the computer. Is there any way around this?
Thanks

 

try assigning full permissions to eqs's installation dir

 

Hi thanks for the reply. Although I am not sure how to go about this, could you assist?

Thanks

 

by default the location should be C:/Program Files/Eqsecure or something like that..right click that folder and go to the security tab...under users tick the checkbox for full control.try restarting the pc after to see if its any better.

 

Runs excellent with the LUA app SuRun 1.209, tested by me. Quirking on occasional however at start up, you can always use "start as administrator" and EQS will run fine for that session.

EASTER

 

Here's a new beta ruleset for your testing pleasure:

eqsecure.v3.41.winxp.rules.beta.v1.33.081230-exp.zip

December 27th 2008 ruleset should be removed soon.
This beta ruleset works pretty good so far!

http://drop.io/eqsecure

Enjoy,

Alcyon.

 

Functions are all stable as granite and rules are just as responsive as ever Alcyon. Again a congrats for another roll out of super-rules to better beef up EQS security HIPS.

EASTER

 

Alcyon,

With so many rules, in what context/purpose are you using EQS at the moment?

When all HIPS are moving to less pop-ups, one man is fighting back (Don Alcyon) with his loyal friend (San Easter)

Cheers Kees

 

Ah, kee mo sabee

But you miss the mark with san easter. It's not more pop ups as new coverages to set then forget by injecting ever more new rules, and for san easter for that added SRP 100% LockDown Security and torquing the screws ever so more tighter adding to a higher percentage of safety and greatly reduced sudden sneak invasive code, be they net sourced or local testings.

Gotta luv that EQS (HIPS). Always "Lite" as a feather and severely "Heavy" on defensive posture thanks to Sir Alcyon's Rules as a 20 ton iron tank.

 

Protection only What else? I don't think there's too many rules... There could be a lot more!
Try it and see by yourself, it's pretty light on popups.

 

Even heavier like a Leopard 2 Main Battle Tank Ok let say something lighter

 

Alcyon, Easter

I have installed Malware Defender (with Avast). Due to the transparent priority levels in MD, you can make nice subsets of rules using application groups (combining application, file, registry and network control).

I have a contained application group in which P2P program, Mail and browsers are restricted to the bare limits of functioning (parent-child startups limited to a few, data access limited to a few directories, regsitry access limited to a few keys/values, so a pure default deny, with allow exception).

I have all intrusions limited for 'normal' programs, with no execution control (I run LUA with SRP, so that is no big deal), further more I have given Avast, Paragon, Windows Restore full permissions (the full permissions application group).

The contained application group is always limited/always protected (even when in learning mode, a nice feature of MD).

New beta of MD works fine with network protection. After ProcessGuard, AppDefend, SSM, PS/RealTimeDefender it is good to see new security programs from China. MD's programmer Xiaolin communicates in English which is a big advantage over EQS for me. EQS is a nice program (I posted the first how to of EQS, so still favour them), but their internal Chinese market is more important than a small (free ware) English speaking market.

Cheers

 

No doubts, Malware Defender is a superb hips and i'll take a deeper look at it once i'll not be using Windows XP anymore. Meanwhile, i'm extremely comfortable with EQSecure. Thanks for the infos anyway