Malware Defender advice

Discussion in 'other anti-malware software' started by Noob, Oct 5, 2010.

Thread Status:
Not open for further replies.
  1. Noob

    Noob Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    6,468
    Just need a recommendation :p
    Since so many programs uses svchost.exe to connect to the internet.
    I'm wondering if it is a good idea to give it FULL ACCESS to any ip/port :rolleyes:
     
  2. Cudni

    Cudni Global Moderator

    Joined:
    May 24, 2009
    Posts:
    6,956
    Location:
    Somethingshire
    with so many progs using it, not allowing full access would break the functionality. Of course, some limitation can be imposed with some firewalls but in the end best to concentrate on not allowing malware on the machine
     
  3. Noob

    Noob Registered Member

    Joined:
    Nov 6, 2009
    Posts:
    6,468
    What type of configuration you recommend me me for svchost.exe then :rolleyes:
     
  4. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
  5. wat0114

    wat0114 Guest

    Not sure about the sarcasm emoticon, but anyway, here's a starting point if you like:

    Really "loosy goosy" rules:

    or a bit tightened up ruleset (samples):

    It's up to you what you choose to do, but as Cudni advises, it is best to obviously keep malware off in the first place. If you are on a network and sharing files, then you need additional rules as well.
     
    Last edited by a moderator: Oct 5, 2010
  6. arran

    arran Registered Member

    Joined:
    Feb 5, 2008
    Posts:
    1,139
    Like what? what programs?

    svchost.exe on my pc is totally blocked and internet app's works fines.
     
  7. MeFer

    MeFer Registered Member

    Joined:
    Dec 16, 2008
    Posts:
    89
    You may think disable DNS Client from Service.
     
  8. curious george

    curious george Registered Member

    Joined:
    Jun 24, 2007
    Posts:
    218
    Dont mean to hijack this thread, but, i too have a question.

    Under the default permissions, i am unable to change the rules. i can only change all of them at once. now i know this wasn't the case in the older versions
     
  9. LODBROK

    LODBROK Guest

    Here's my MalDef network rules for svchost.exe.
    I've had similar rules for every firewall I've eve used.
    All other settings (drivers, hooks, etc.) are default.
    No probs.
    Anything but UDP port 53 lookups to hard coded IP addresses prompt an "Ask" at which point you make a decision.
    BTW - I've always used the DNS Client service.
    My 2¢ - If you don't use DNS Client then these should be the first three rules for any app used to access the Internet.
    All in "Normal" mode, of course.
     

    Attached Files:

Loading...
Thread Status:
Not open for further replies.