How To Protect My Documents Defense+

Discussion in 'other anti-malware software' started by TerryWood, Jul 10, 2008.

Thread Status:
Not open for further replies.
  1. TerryWood

    TerryWood Registered Member

    Joined:
    Jan 14, 2006
    Posts:
    703
    Hi All

    Are there any tutorials floating around that will explain simply how to Protect My Documents via Comodo Defense+.

    I did not find the help file informative. I want initially to learn how to completely block access to MD then lessen the constraints by allowing read & write access for me for specific applications.

    Help gratefully received
    Thanks

    Terry
     
  2. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
    Add My Documents to protected files. Allow programs that need to change files within My Documents to change whatever subset of My Documents that you desire; you'll know which ones need to change files because you'll get alerts, but you'll often want to make a more general rule than covered by the alert. You cannot protect against reading in CFP in an analogous manner, unfortunately; you may wish to look into TrueCrypt for that purpose.
     
  3. Kees1958

    Kees1958 Registered Member

    Joined:
    Jul 8, 2006
    Posts:
    5,857
    Alternative the coming Vista OA free release with Drive Sentry
     
  4. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    Per the "Katie thread" Drive Sentry has a LOT of issues. BSODs etc. Not all that stable.
     
  5. trjam

    trjam Registered Member

    Joined:
    Aug 18, 2006
    Posts:
    9,057
    Location:
    North Carolina
    And no one took my "hints" for the last 4 weeks.
     
  6. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    U can add My Documents folder to protected files list in CFP. But I think CFP has no READ protection. It will however give u MODIFY/ WRITE / DELETE protection for my documents.

    07-14_0024.jpg
    07-14_0026.jpg
    07-14_0027.jpg
     
    Last edited: Jul 14, 2008
  7. TerryWood

    TerryWood Registered Member

    Joined:
    Jan 14, 2006
    Posts:
    703
    Hi Aigle

    Thanks for responding. I did everything exactly as you show in your pictures, BUT when I open my documents with my browser, I DO NOT GET any Pop ups.

    Any ideas why not?

    I am in Clean PC mode in Defense+

    Thanks

    Terry
     
  8. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Just opening it will not give a pop up as CFP does not intercept READ operation. Open it via ur browser, then right click any file in it and try to rename or delete it. Then seee if u get a pop up?
     
  9. TerryWood

    TerryWood Registered Member

    Joined:
    Jan 14, 2006
    Posts:
    703
    Hi Aigle

    I did exactly as you said Using browser then open file. When the file shows I right click on it then select delete and the file deletes No pop ups show

    Terry
     
  10. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Try switching to paranoid mode. It,s the mode I use.
     
  11. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
    The default policy for Windows Explorer (explorer.exe) allows modification of any files, if my memory is correct.
     
  12. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    He is modifying through his browser, not the explorer.
     
  13. TerryWood

    TerryWood Registered Member

    Joined:
    Jan 14, 2006
    Posts:
    703
    Hi Everybody and thanks

    Something seriously wrong here!!

    I reset Comodo to Paranoid mode.

    Made sure that My Documents is showing in MY Protected Files as Per Aigles post.

    Opened IE7 opened My Documents and proceeded to delete a file.

    Nada, nothing in the way of pop ups

    Why?

    When Aigle asked me to put My Documents in My Protected Folders, was that all that was required?

    Thanks

    Terry
     
  14. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Are ur settings same? Pls post screenshot how u put My Documents as protected folder?
     

    Attached Files:

  15. TerryWood

    TerryWood Registered Member

    Joined:
    Jan 14, 2006
    Posts:
    703
    Hi Aigle

    I have added two attachments showing 1) My Protected Files and My documents therein 2) Protected Files&Folders.

    Please NOTE I have edited out my user name (I dont know how to overwrite with blocking red ink

    Hope this is ok

    Terry
     

    Attached Files:

  16. TerryWood

    TerryWood Registered Member

    Joined:
    Jan 14, 2006
    Posts:
    703
    Hi All

    Third shot Paranoid mode

    Thanks

    Terry
     

    Attached Files:

  17. MrBrian

    MrBrian Registered Member

    Joined:
    Feb 24, 2008
    Posts:
    6,032
    Location:
    USA
    Some things to check:
    a) Defense+ is turned on - right-click tray icon to find out
    b) Defense+ Settings - make sure you're monitoring Protected Files/Folders
    c) Is the location of My Documents on your system really c:\documents and settings\my documents ?

    If none of these things are amiss, then look at the Computer Policy for both iexplore.exe and explorer.exe and remove any paths that might overlap with the My Documents location.
     
  18. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    Your first screenshot is the problem. You have permitted some application( or all applications) to modify files in My Documents. This rule is for what application? Let us know.
     

    Attached Files:

  19. TerryWood

    TerryWood Registered Member

    Joined:
    Jan 14, 2006
    Posts:
    703
    Hi Aigle

    Thanks very much for your reply. The first glimmer of hope emerges.

    1) Internet explorer is the answer your question. I put it there for two reasons a) I when it would not work after inputting My Documents to My Safe Documents I also added My Documents to allowed files. b)One of your pictures seem to suggest that was needed.

    2) I have now removed My Documents from the Allowed Files tab, there is nothing else there.

    3) If I now put the mode on paranoid I get a pop up, BUT it is NOT the same as in your picture (upload for your info).

    4) This pop up only appears to work in Paranoid mode

    Any ideas why pop ups are different why it only works in paranoid mode?

    Thanks

    Terry
     

    Attached Files:

  20. aigle

    aigle Registered Member

    Joined:
    Dec 14, 2005
    Posts:
    11,047
    Location:
    Saudi Arabia/ Pakistan
    That,s must to do in order to get the alert. If u keep it that means u allow IE to change anything in My Documents.
    Two thing I can,t understand.

    1- Why no pop up unless u r in paranoid mode. May be it,s the way CFP is supposed to work.

    2- It,s weired that it does not recognize IE.

    I will suggest u to post at Comodo forums.
     
  21. TerryWood

    TerryWood Registered Member

    Joined:
    Jan 14, 2006
    Posts:
    703
    Hi Aigle

    I did post at Comodo before Wilders. Seemed the sensible thing to do. I was wrong

    Thanks for your help

    Terry
     
Loading...
Thread Status:
Not open for further replies.