Three Questions

I really appreciate all the invaluable advice I get from the Wilder's community, so I would like advice on three questions:

1. I currently run BOClean active and have SAS and MBAM for on demand scanning. I also have on board a-squared. Is there anything that a-squared covers that is not covered by the other three apps? Could I uninstall it and not miss anything important?

2. My GesWall license expires on 8/8 and I'm trying to decide whether to download and install it again or try SandboxIE. I don't use GesWall all the time, but it has run stable on my box and plays well with my other security apps. I fully understand that GesWall is a policy sandbox and SandboxIE is an application sandbox. My question is whether there is any advantage to either approach. Do they both provide the same basic protection or does one do more? Does SandboxIE have any issues with any other security apps (see my sig for my running apps)?

3. I've been reading and thinking about installing SuRun. It seems that a large number of members recommend running under a limited user account. Is it really as easy to setup and run as the numerous threads indicate? I, and don't laugh too much, sometimes hesitate before doing simple things like setting up two accounts for logging into. I suppose I envision somehow locking myself out of my computer! Seriously, this type of program is totally new to me and it always takes me a long time to make a decision. And if it seems simple, I hesitate even more. Just a quirk of mine I guess.
It is recommended at https://www.wilderssecurity.com/showthread.php?t=196737&highlight=SuDown&
styleid=2 that you should also download FajoXP if you have XP Home. Does this also work on XP Media Center Ed.? Calling tlu (Thomas) ........

Thanks in advance for any advice or comments!

 

Where's everyone? I know these may seem to be simple and seemingly unimportant questions, but they are important to me. I don't expect replies to cover all three questions, just comment on whichever one you want. At least I'd like some comments on #2 GesWall and SandboxIE, Thanks in advance.

 

I'll answer a few of those, first one completely second one partially:

#1:I don't think that A-Squared will really find anything that your Avast, SAS and MBAM don't
#2:Sandboxie shouldn't be incompatible with anything except for these here http://www.sandboxie.com/index.php?KnownConflicts

 

SAS, MBAM and A-Squared are all 3 excellent apps, but to say that one is better or worse then the other is difficult to say without in depth testing. I wouldn't classify BOClean in the same category as SAS, MBAM or A-Squared because BOClean is more a resident memory scanner.

I don't know enough about GeSWall to make any comments about that. But SandboxIE is a pretty nice and easy to use program that even my grandmother could use. Although you can configure very specific rules, the default ones are also safe for the average user. I do notice myself that if you run many resident programs that require Internet Explorer in one way or the other, that it can slow down browsing in SandboxIE. Also without very specific rules you can still get temporary infected with the harmfull effects of keyloggers if you were to get infected while browsing sandboxed, but of course when you close the sandbox the keylogger will be deleted to.

Dunno this program, is it something like "Smart UAC replacement" from http://www.replaceuac.com/ ??

 

Yes it is that easy. Personally I think that most of those who complain about LUA never actually used it
It isnt the end of the world to run installations as admin for those apps that require that. Really.
It wont cost you anything to try LUA and make your up own opinion about it. If you for some reason dont like it (please try it for more than 10 minutes though ) you just log on into your admin account and change back to admin for your main account.
I suppose you are running XP? If you run LUA with SuRun it will be more comfortable (even though I personally dont mind running LUA as it is)
You have the excelent postings here at wilders by tlu and others on how to setup LUA and Surun.
If you want to find out more about limited account look here.
About SuRun here

 

You can wait for the next thread. The problem with the present one is that there are posts spread out.
But i think i can answer 2 things - you don't need Fajo with both PCWELT scripts, and you won't be locked out - simply because you still have an admin account if you need it, and SRP does not apply there.

SuRun 2.0 will surface in the meantime as well.

 

Thanks everyone!
I think I will jettison a-squared, as SAS and MBAM should provide all the protection I need.
I will read more about GesWall and SandboxIE. I may try SandboxIE and see how it runs. I can always go back to GesWall.
Ok, I will give LUA and SuRun a try. I want to run a tight box.
Thanks again!

 

GesWall and SBIE offer similar levels of protection. They have been tested with the meanest malware around and have passed with flying colors.
It comes down to what you feel comfortable with.
Try sandboxie for a while and you'll see the difference

 

I have uninstalled GesWall and installed Sandboxie. I like the straight-forward and easy way of saving files, etc., with the recovery options in Sandboxie. I also like the very tight email integration. It is also not a somewhat crippled version like GesWall free was. It's more logically organized, easy to understand, and very easily configured. I can see myself always surfing sandboxed now. It seems light on resources, stable, and so far it is playing very nicely with my other security apps. I had no particular issues with GesWall but I just didn't find it conducive to everyday surfing.

 

Just remember 2 things:
1.- be careful when you recover downloaded files. Once recovered, you loose protection. If you want to run an untrusted file; right click, "run sandboxed". GesWall has the advantage that downloaded files stay untrusted so if you run downloaded apps, you are automatically protected.

2.- If you can afford the $30 for registering SandboxIE, do it. Paid version has more features (for example: force programs you choose to always start sandboxed, setting multiple sandboxes). Also, after 30 days sandboxie starts displaying a nagscreen.