PrevXPro Advice

Discussion in 'other anti-malware software' started by Tracccker178, Jun 28, 2005.

Thread Status:
Not open for further replies.
  1. Tracccker178

    Tracccker178 Registered Member

    Joined:
    May 16, 2005
    Posts:
    34
    Advice

    I need to know if anybody can tell me if PrevXPro is any good. I need
    a good Anti-Intrusion detection application that is free. I have allready
    spent over 100 greenbacks on anti-this and anti-that and still cant keep
    out the hackers. It seems like open season on the normal home users PC.
    In fact its actually open season on everybody in Cyberspace so it looks
    like everybody needs to batton down the hatches and monitor all ports. :mad:
     
  2. Notok

    Notok Registered Member

    Joined:
    May 28, 2004
    Posts:
    2,969
    Location:
    Portland, OR (USA)
    Re: Advice

    Prevx is very good. It can defeat many attacks on several different fronts. The one thing it covers that none other does (that I know of) is file system changes.. all malware pretty much has to create or alter files on your system to work. The downside of this is that, although Prevx has made it as easy as possible, it may be overwhelming to many new/novice users. The combo of ProcessGuard and Prevx (along w/ the standard anti-virus and firewall) would give you nearly unbeatable protection used properly :)

    It should be noted, however, that the Pro version is paid ($20) and the Home version is free. Pro has some extra goodies, but Home can give you plenty of protection as well. The most notable differences are that the Pro lets you edit rules created for allowed processes (home you have to scrap them all and start over), has a few extra protected areas, and lets you turn off PAWS (that anonymously sends alert data back to the server for the "get advice" function as well as attack data for paid enterprise subscribers)
     
    Last edited: Jun 29, 2005
  3. Tracccker178

    Tracccker178 Registered Member

    Joined:
    May 16, 2005
    Posts:
    34
    Hi Notok,
    Thanks for the quick reply and I allso need to know if it will protect
    my Winsock connectivity so that it dosent get corrupt every time a hacker
    thinks its funny to damage Winsock. I have had to fix winsock 4 times in
    2 months. I have SBC DSL and dont seem to get any good tech support,
    just keep getting the run-around if you know what I mean. You know if
    people would ask the questions no matter how stupid they may seem,
    everybody gets the answer and sometimes the profesionals get ideas. :rolleyes:
     
    Last edited: Jun 29, 2005
  4. richrf

    richrf Registered Member

    Joined:
    Dec 11, 2003
    Posts:
    1,907
    Hi Tracccker178,

    Would you want to describe your current real-time security programs. It would seem like you are having lots of problems with malware, which Prevx may help to address by protecting your system files, but on the otherhand, there shouldn't be that many successful intrusions on your system (to co-opt your files) to begin with. Once it gets to that point, malware can do lots of things besides corrupt your system files.

    It might be helpful to know what you are using: e.g. firewall (do you have a hardware router, software firewall), anti-malware software (anti-virus, anti-trojan, anti-spyware, etc), as well as what operating system, browser, java system you are running and are they fully patched?

    Rich
     
  5. Tracccker178

    Tracccker178 Registered Member

    Joined:
    May 16, 2005
    Posts:
    34
    I am running PG Free,NAV2005,TDS-3,RegistryGuard,Spysweeper,
    Sygate Personal,Pestpatrol,Spyware Guard,SpywareBlaster,Port Explorer,
    and I have all the latest patches for WinXP Home. This last time they
    hacked me the only thing they did was damaged my winsock. What they
    are doing is spoofing there IP with the 00.00.00.00 which is kind of hard to track down. I have allso scanned for rootkits and so far clean. I have talked
    to several private techs and they say that this machine is positivily being
    hacked. I have the log file to prove that while updating the framework 1.1
    somebody installed an ASP.NET account on this machine within 10 secs.
    The account showed up as an unkown account that was PSW protected.
    So the next phone call to SBC is to cancel the service.
     
  6. Notok

    Notok Registered Member

    Joined:
    May 28, 2004
    Posts:
    2,969
    Location:
    Portland, OR (USA)
    ASP.net gets installed with the .NET framework, it's part of it. If winsock is getting damaged, I would be more suspicious of spyware than any direct attack. It is also entirely possible that one of your security apps is having a hard time w/ the LSPs (additions to winsock), such as Port Explorer. Try uninstalling and reinstalling any network related security software first, and be aware that Port Explorer will show "System" processes with an address of "00.00.00.00" for ports that are not yet closed after the owning process has exited.

    To answer your question, however, Prevx will protect it, among many other things. As a tech, however, I can say that it's very questionable as to whether you are being hacked or not, my first inclination is no. Directed hacks are not common anymore unless you go around making script kiddies mad or have something really worth taking.

    You may want to take a look at the first link in my sig and do some system hardening. This will close a lot of entry points.

    BTW, you're not using the NAV firewall along with Sygate, are you?
     
  7. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    17,039
    First PrevxPro is good. I find it does overlap with PG Regdefend, etc. I would recommend you upgrade from PG free to the full version. Offers some significant protection.

    Also are you on a wireless network. If so take a look at lucidlink (www.lucidlink.com). It's free and really locks down a wireless network.

    Pete
     
  8. Tracccker178

    Tracccker178 Registered Member

    Joined:
    May 16, 2005
    Posts:
    34
    I only run 1 firewall like you only need to run only 1 AV because if you run
    more than 1 anti-v your system will hang do to both scanners scanning
    at the same time. I am very carefull about how many things scan at startup.
    If there is to many at startup you run into problems with system resources.
    I have seen people fry the old 386 chips by putting too much of a load on
    there processor. That was a long time ago when everybody was living in
    caves. I may have made one of those kids mad after turning in my logs to
    SBC abuse and after I did that it was real quiet for a long while. I included
    a text that should tell you if I have any conflicting apps in the system. I
    do regular scans at least once a week.
     

    Attached Files:

    Last edited: Jun 30, 2005
  9. Tracccker178

    Tracccker178 Registered Member

    Joined:
    May 16, 2005
    Posts:
    34
    Well I have had to repair winsock once and that enabled me to log on to
    the internet. I had to call SBC twice to reset password and one of those times
    I had to change the password. Everything will be quiet for a short time now.
    The reason I know that Im being hacked is I get 6 pings every 10 seconds
    and the only thing that is on is the modem and after about an hour of that
    the activity light goes crazy. Then when I connect to the internet I cant
    logon do to damaged winsock or changed password. Thank you guys for
    all the good help because if you would not have given the advice I would
    have had to wipe the hard drive. You guys are good at what you do. I was
    ready to cancel the DSL because of games being uninstalled,log files being
    deleted before I could turn them in etc. etc. etc. You guys have been a
    great help. :D :D :D Diamondcs is the best : I think the rest needs there
    help. ;)
     
    Last edited: Jun 30, 2005
Thread Status:
Not open for further replies.