What is your security setup these days?

are you running sandboxie too?

 

Nope but I'm thinking about it.

 

it's good for protecting the browser to block those nasty rouge malware and rootkits

 

it can also works as a firewall if you want too, protecting your outbound conection from leaking the sandbox good for blocking keyloggers

 

Gmer
NoVirusThanks AR
F-Secure BlackLight
SanityCheck
AVZ Antiviral Toolkit
& RootKit Unhooker to name a few.

 

Thanks While I agree with you I like have layered defenses even if it is redundant. I feel much safer with Eset + Virus Barrier On demand Scanner + MacScan.

Anti-Spyware was exactly what I wanted. Something I can run with Eset for additional protection I really wish there was a way to use Default Deny on a Mac though

 

As much as it pained me, I had to let DefenseWall go. Whilst I cannot deny its effectiveness, I couldn't abide it slowing the startup of my browser and media apps.

So, without DefenseWall I've gone back to using an antivirus. It's pretty hard to go past avast! for this. Paid or free it's hard to beat.

Since uninstalling, I began to look for an app to monitor my outgoing connections. I tried a few (Privatefirewall, Outpost, OA) but wasn't keen on having a HIPS feature in my firewall, so I've gone for ZoneAlarm Free (minus the toolbar). I must say, I'm impressed with its small footprint - was expecting it to be a little heavier.

I've also reconfigured AppLocker as I think it's one of Windows 7's killer features. Whitelisting is the future I suspect.

 

I see, so you got Virus Barrier Express as an on-demand scanner.
That's much better, since running VB X6 in real-time is too heavy I think.

BTW, there is a firewall available for Mac OS X called Hands Off! that has a very slim I guess sort of HIPS feature inbuilt with Allow/Deny. Maybe you have heard about it already?

 

AVZ is a bit out of date... 2008. Not very useful for today's rootkits:
http://sce.uhcl.edu/yang/research/A Comparitive Analysis of Rootkit Detection Techniques.pdf

 

Hello RJK3
I enjoyed reading (skimming) the Comparative Analysis of Rootkit Detection Techniques that you linked.
Thanks for that.
I did notice that on page 48-49 where Arnold is discussing MBAM, he states that, "MBAM provides on demand scanning as well as real-time protection", but 5 sentences later he contradicts himself by saying, "This means that MBAM does not have any self-protection mechanism built-in, and nor any real-time protection."

 

VB Express is great! Loving it so far. VB X6 is bloated that's why I bought Eset instead (2-years). Eset was the fastest and best AV I could find. It didn't miss anything in my tests and only 1 FP too!

Hands OFF! is great too. I will be buying tomorrow thanks for that


Do you know of anything similar to Anti-executable or sandboxie for Mac? That's the last layer I need to fill

 

Hands Off! is gone Rebooted and took forever to boot. Guessing it's a conflict with something but not the only one who had the issues. Anyways back to the drawing board I guess.

 

Have you tried Little Snitch?

 

No but isn't made by the same people? The mention little Snitch on their site. I will give it a shot. I think the issue with HandsOff was the read/write settings I turned on (Set it to ask). I am on a macbook air so maybe It used to much resources. I had to reboot 5-6 times before it started up (which took 5min).

Thanks for the help though

 

Protection...

 

Dude.

 

I just have to be on the 666th page

 

Zemana AL, works very light, checked its logs and it seems to be doing its job well. I changed to Expert Mode just now and clicked OK. We'll see how it does.

EDIT: And now Mamutu.

 

Yes I'd noticed the same, slightly confusing turn of phrase talking about the free version. The next sentence after that does point out that the self-protection is included in the Pro version, "A commercial version of MBAM can be purchased that includes these features.", which is true from what I've read.

Otherwise it's a good read.

 

I didn't think it was. I just thought they were similar in design except Hands Off seem to have a few more features than what Little Snitch has. Maybe I'm wrong?

 

what a lifetime combo mbam pro and sandboxie

 

nice combo J

 

thanks man
i noticed sandboxie is working better here in my 64 bit better than before it improves alot
it doesnt slow my browser anymore

 

yeah its flying on my 64bit
try 3.57.01 Beta, it has fix for w7 64bit (12 July windows patch problem)

 

thanks