Let's Talk About System Safety Monitor:):)

Jmonge, what about Comodo leak tests and SSM ?

 

https://www.wilderssecurity.com/showpost.php?p=861938&postcount=5

 

Same issue, these are only possible if that code is allowed to execute to begin with. If the users security policy is allowing unknowns to execute (default-permit), the HIPS should be supplemented with some form of real time malware detection, an AV. HIPS should not be the sole defense with default-permit based security policies.

Vitaki released an unlimited license for the paid version that's freely available. The app itself is also available on several sites.

 

If the learning mode is never enabled and if all SSM dialog is limited to DON'T or ALLOW JUST ONCE, it does protect from low level disk access, reads and writes. Also it helps to enjoy propmts given by SSM and by editing the SSM config in order to add as many exploited exe's and dll's and other files as possible. In THAT mode, it seems to be very good.

Dave

 

like i said before i have it like this, it's a malware killer when using this mode i tested againts some nasty malware,i tried the free version of PG and SSM Pro and SSM Pro did way better blocking low level attacks even keyloggers and trojans that try to put themself in the start up location

 

I was test SSM before, on xp sp3.

 

Just add the appropriate exe's, sys's, dll's etc. to the SSM config file and those vulnerabilities can be prevented. Set dialog to ask, but never learn.

Dave

 

did you test the free version or paid?

 

Paid 2.4
But not remember .621 or .622-beta

 

"do you feel protected with it?"

I use it together with among other stuff PG (also free) and feel protected with it. One of my favorite softwares.

 

@get i have it with winpatrol plus,malware bytes and snoopfree

 

i read some where in the internet that SSM can be use in vista i think it was service pack 1 and not 2,but i didnt find SSM is compatible with vista/seven but any ways for my old unpatch xp2 is more than enough

 

MeFer, thanks : I've been used SSM until last Yanuary, but I had not tested it with Comodo Lks.

 

it did very good not bad at all

 

I'm not positive, but I believe the paid version works with Vista-SP1. The release notes mention that fast user switching on Vista isn't supported.
The free version definitely works on XP-SP2, but not SP3.

 

thanks buddy for the info it helps

 

@jmonge : Same here, but Malwarebytes free, thus only for on demand.

 

yeah that is true i have the pro version running in memory and i use my hips to protect it for now

 

I use SSM free, but I take the liberty of modifying () a few files.

Dave

 

I tried downloading the free version a couple of weeks ago off CNET and it wouldn't install it came back and said to reinstall 'driver missing'. The beta is around but that says it is a 30 day trial and the gui didn't seem as friendly as the older version which I have used before.

Does anyone have any experience using SSM along with Geswall as far as conflicts go? I'm happy with my current set up but SSM would add a another layer with low use of resources.

 

When I used SSM I also ran GesWall and I had not problems. I had some problem running KAV 7 together: SSM, GesWall and Kav 7 were too much heavy.

 

Thats my no driver installed error I'll wager. I now have SP3 and when I ran it before I had SP2.

 

That's the one. Somewhere I read that there's a way to fix this but I don't know what it is.

Regarding using SSM with another HIPS or security app with kernel level components, you do so at your own risk. There will be a huge duplication of protection at the least and the risk of a low level conflict is much higher. If one of the apps is updated, you could find a crashed system or BSOD with no warning. When AntiVir released their rootkit module for the AV, it initially ran fine with SSM. When it was updated, they conflicted and the PC was unusable. HIPS are like firewalls, one is best.

 

it is very simple just run both in learning mode and add/rule them each other reboot in learning mode i tried PG and SSM cool i did it just for testing

 

For the testing or for the fun? This I ask as I place about 10 more things on startup!

Dave