Avast WEBforum

Other => General Topics => Topic started by: Waldo on January 22, 2004, 10:17:52 PM

Title: Who is running a layered defence ?
Post by: Waldo on January 22, 2004, 10:17:52 PM
HI,

Whe all run a firewall (i hope so) and Avast.

But do you guys also run OTHER security software besides our great Avast.

I mean excecutable blockers (like Abtrusion Prot & SSM) or dedicated AT's (like TDS or Trojan hunter) or process shutdown protection (process guard) ?

I believe that running a extra layer in your defence could safe you when some nasty manages to disable your FW or Avast. I know it did safe me many times.

I personally use SSM (like it :)) now (for a few months) on my main box and Abtrusion prot on my test box.

I also run Process guard freeware to protect Avserv. (AVAST) from being remotely shutdown. And Pest-Patrol v4 on all my pc's.

Waldo
Title: Re:Who is running a layered defence ?
Post by: CoJo on January 22, 2004, 10:47:43 PM
 ;D
ok, Waldo...you are sending me to the computer dictionary for some of these things!
I'm trying to set up a good layered defense now...
I'm thinking that my Dell from Hell is actually MS from Hell and all its stinkiness...

cojo
Title: Re:Who is running a layered defence ?
Post by: MWassef on January 22, 2004, 10:50:39 PM
AV: avast4 (main), Nod32/F-prot for dos (backup)
AT/Anti-malware: a2 free
Anti-adware: Spybot S&D, Ad-aware and SpywareBlaster..
FW: Kerio PF 2.1.15
Browser: Mozilla 1.6

Title: Re:Who is running a layered defence ?
Post by: techie101 on January 25, 2004, 07:59:53 PM
Waldo,

Layered defense is actually user choice by need.
I can suggest a "practical" layered defense but it can vary widely by how much and by what the user does with their computer:

Proxy filter (Proxomitron is a nice one)
Firewall (Rule and Application based (Sygate/Kerio.....give versatility; Application based is much easier to learn.....Zone Alarm is the only one I recommend in this category)
Antivirus (You know the answer to this one!  AVAST)
Anti-ad/spyware (SpywareBlaster and Spyware Guard work flawlessly together;  Adaware and Spybot SD are nice manual scanners to include in the "anti" package)
Script Blocker (Script Sentry or Script Defender)
Cookie filter (Cookie Wall is my choice)
Popup killer (for IE engines.....use Window Shades; for AOL, Opera, Netscape......use NoAds)

Optionals:
Anti-trojan (resident is nice, but a manual necessary......Trojan Hunter and Trojan Guard seem to work well)
Process guard (many available)
Non-MS browser (I recommend Mozilla, MyIe2 or Avant)
Non-MS OE-mail client (Pegasus is excellent but unfortuantely no longer supported; Eudora is another fine client)
Tracks erasers
Encryptors
etc etc etc........

General rule:  Select programs that require minimum of monitoring and run resident!  You'll use a bit more memory, but will end up with less headaches.

There are thousands upon thousands of programs available in each of the above categories.....some freeware, some shareware, others payware.  I have given you suggestions of the freeware that I personally use with excellent results, but you can choose similar software of other titles.
The main thing is TOO HAVE THEM!

No matter how much you install, and no matter how hard vendors try to protect your computer, there are those out there in computer land who spend their endless time  trying to defeat those things that you have done and hack into your system.

Just like protecting your car.......
if you can make it difficult enough for them to get in and slow them down, they often just go someplace else!

Good luck,
techie101


Title: Re:Who is running a layered defence ?
Post by: mr.morden on January 26, 2004, 12:00:03 AM
Process guard

if i wanna protect my avast,what file i should add to that prosess guard?

there is many exe files in avast directory and i dont know which one is right..pliz someone help meh!

thx ::)
Title: Re:Who is running a layered defence ?
Post by: techie101 on January 26, 2004, 12:57:18 AM
mrmorden,

A Process Guard is not essential to protecting Avast, but some people feel that they need to protect their AV from a remote shutdown.
Although this is rare, and I have never had such an occurrence, the possiblity does exist.

The file Ashsrv.exe starts Avast and would be the most vulnerable file for a remote shutdown.  However, I can give you a list of all the relevant files that run Avast and you can enter them all into the list.

Send me an IM if you need further info.

techie
Title: Re:Who is running a layered defence ?
Post by: stevejrc on January 26, 2004, 01:01:35 AM
ashServ.exe I think

Does the password setting, protect from shutdown in Avast Home (right click on icon)?  Sygate firewall (free) also has this option.
Title: Re:Who is running a layered defence ?
Post by: Tipton on January 26, 2004, 06:07:14 AM
Here is my list of items I use for a layered approach at keeping my PC safe.

Zone alarm firewall

Avast Home edition AV

Spyware Blaster

Spyware guard

NAT router

Ad-Aware

Imaging software

IE spy ads

Proxomitron


Realistically, I could give up all these items, except two, and I would be totally fine. The two most important things in my list, are my NAT router, and my imaging software. Even if I got a virus, I would not try and use the AV to remove it, or even try and manually remove it. I would just research the virus, and image back to before it existed. I mainly use an anti-virus for scanning exe's before I run them.

Douglas
Title: Re:Who is running a layered defence ?
Post by: mr.morden on January 26, 2004, 09:33:20 AM
techie101,stevejrc,Tipton

muchos thx to all of you :P

it's good to have such of peeps like you all,helpfull and smooth ;)


Title: Re:Who is running a layered defence ?
Post by: shiver on January 26, 2004, 08:31:05 PM
Sorry to barge in here like this, but couldn't help but notice this general misconception.


Non-MS browser (I recommend Mozilla, MyIe2 or Avant)


Of the three listed above, only Mozilla is non-MS as both MyIE2 and Avant browser are extensions to Internet Explorer and rely on the MS browser to do the dirty work. There is, however, another independent browser, that many have considered to be a dark horse in the long gone browserwars, Opera. The only problem I have with opera's free version is the adware that comes bundled with the app...

Cheers,

Shiver
Title: Re:Who is running a layered defence ?
Post by: techie101 on January 27, 2004, 12:32:27 AM
Shiver

Quote
ashServ.exe I think
Hey....where did my "e" go?  Thanks.

Quote
Does the password setting, protect from shutdown in Avast Home (right click on icon)?  Sygate firewall (free) also has this option.
Um....truthfully, I am not sure at this point.  The password is intended to prevent unauthorized changes to Avast's "frontend".  I do not believe that it would stop a hacker who could access the ashserv file.

I will ask one of the A team for a more correct answer.

techie
Title: Re:Who is running a layered defence ?
Post by: CoJo on January 27, 2004, 03:27:22 AM
it's good to have such of peeps like you all,helpfull and smooth

peeps...I like that term!

cojo
Title: Re:Who is running a layered defence ?
Post by: mr.morden on January 27, 2004, 07:34:50 PM
 :-*
Title: Re:Who is running a layered defence ?
Post by: Culpeper on February 14, 2004, 06:11:26 AM
Avast AV
Sygate FW
Script Sentry
Spybot S&D Immunize

That's all folks!
Title: Re:Who is running a layered defence ?
Post by: Iso-G on February 14, 2004, 01:27:15 PM
One Japanese user,

AV:         avast!4(main), ANTIDOTE(jp), BitDefender7 Free
AT:         a2 free, SwatIt free
AntiSpy: Ad-aware, Spybot, SpywareBlaster, SpywareGuard
cookie:   Cookie escaper(jp)
Others:  HijackThis, RegCleaner, Sygate (& router)

In residence: avast!, SpywareGuard, Cookie escaper(jp), Sygate

(jp) : only Japanese language.


Iso-G  
Title: Re:Who is running a layered defence ?
Post by: bbfi on February 14, 2004, 07:58:31 PM
Here are my items I use for a layered approach at keeping my PC safe.

Zone alarm firewall

Avast Home edition AV (resident)

BitDefender Free Edition (secondary scanner)

ANTIDOTE for PC Viruses - SuperLite (secondary scanner)

eScan Antivirus Toolkit Utility (secondary scanner)

Spyware Blaster

Ad-Aware

Spybot S&D

Bazooka Spyware Scanner

HijackThis - scan and log for spyware

WinPatrol 6.5

a2 free

Script Sentry

Mozilla Firefox .8 Browser

Mozilla Thunderbird .5 Email

SpamPal spam checker with many plugins including HTML Modify (gets rid of web bugs and changes harmful html coding and executable and script files to plain text files)

Title: Re:Who is running a layered defence ?
Post by: Waldo on February 15, 2004, 06:19:19 PM
Here are my items I use for a layered approach at keeping my PC safe.

Zone alarm firewall

Avast Home edition AV (resident)

BitDefender Free Edition (secondary scanner)

ANTIDOTE for PC Viruses - SuperLite (secondary scanner)

eScan Antivirus Toolkit Utility (secondary scanner)

Spyware Blaster

Ad-Aware

Spybot S&D

Bazooka Spyware Scanner

HijackThis - scan and log for spyware

WinPatrol 6.5

a2 free

Script Sentry

Mozilla Firefox .8 Browser

Mozilla Thunderbird .5 Email

SpamPal spam checker with many plugins including HTML Modify (gets rid of web bugs and changes harmful html coding and executable and script files to plain text files)



Seems you got  a very good setup...but what about something like SSM or Abtrusion protector to deny launch-access to file's not known (in the safelist) on your pc ?

These programs could be your second line of defence (after Firewall) for your PC.

After that comes AV's & AT's to indentifie strange or downloaded programs, so they can be included in your "safe list" or on your "black list" ,so that they don't get a change to excecute on your box.

Waldo
Title: Re:Who is running a layered defence ?
Post by: bbfi on February 15, 2004, 06:47:50 PM
Waldo,

Tried SSM, but it is too flaky on my system and with each upgrade it would wipe out all previous settings even if I exported them.   >:(

Have not tried Abtrusion protector.  Could you give a link for that.  I know that I could search for it, but I'm busy working on a Weather and Health Monitor using True Launch Bar.   ::)

Thanks.
Title: Re:Who is running a layered defence ?
Post by: Waldo on February 15, 2004, 07:14:15 PM
Waldo,


Have not tried Abtrusion protector.  Could you give a link for that.  Thanks.



http://www.abtrusion.com/abtrusion_protector.asp

They offer a lifetime freeware version called : Abtrusion Protector Personal.

Waldo
Title: Re:Who is running a layered defence ?
Post by: bbfi on February 28, 2004, 05:36:29 PM
Waldo,

I decided to give Kerio's updated version 4.0.13 a second chance (tried an earlier version which was full of bugs :o ).  It works for me and quite nicely too.   :D  

I am using it as freeware (no web blocking, etc.) but I get that from Firefox .8 so that does not matter to me.

I also get the added system security like System Safety Monitor (which was very flaky on my system  :o ) or Abtrusion Protector (not free for those with broad band access :'(  ).

Been using it for three days with no problems and system resources are similar to ZoneAlarm (about 18,000 k).   ;D

So, I think my protection has improved and the only reason I switched to Kerio was for the extra system safety monitoring as you suggested that I need but the recommended programs either didn't work for me or had to be paid for.

Thanks Waldo.   ;D