Author Topic: WinPatrol with Windows Defender  (Read 14555 times)

0 Members and 1 Guest are viewing this topic.

Go Pack Go

  • Guest
WinPatrol with Windows Defender
« on: October 14, 2008, 02:41:26 AM »
Is there much of a point in using WinPatrol if I use Windows Defender on Vista?

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48550
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: WinPatrol with Windows Defender
« Reply #1 on: October 15, 2008, 02:21:50 AM »
The programs have different functions.
Winpatrol watches for any changes on your system.
Since this is built into Vista,  ( UAC ), Winpatrol isn't really needed IMHO.
Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: WinPatrol with Windows Defender
« Reply #2 on: October 15, 2008, 04:13:27 AM »
Since this is built into Vista,  ( UAC ), Winpatrol isn't really needed IMHO.
In fact, a lot of users are tired of UAC and have it disabled or allow anything to run with admin privileges... for such users, WinPatrol could help.
The best things in life are free.

Hard_ROCKER

  • Guest
Re: WinPatrol with Windows Defender
« Reply #3 on: October 15, 2008, 08:05:23 AM »
Winpatrol is designed more to complement you AV and AS programs.
I use both Winpatrol and Defender + UAC is up and running. Winpatrol has some cool features that Defender doesn't have. Plus it's very cool that you can see HijackThis logs, hidden files, ActiveX, IE Helpers, registered file types, secret startup locations etc. all in one program. Damn usefull for any malware fighter is also their PLUS knowledgebase.

A bit off-topic but i have something for my buddy Tech to try out. And anyone else using Vista that wants a different and better UAC and like me doesn't want to wait for Windows 7 to come out before they get it. Symantec(your favorite company Tech ;D ) released this UAC tool recently, don't know if you tried it yet but i will just say that this is how UAC should have looked like in the first place.

@Tech: You're gonna love this one trust me ;)

Description:

User Account Control (UAC) is a new security feature in Microsoft Windows Vista that changes the architecture of the access token creation process and prevents users from logging on with full administrative rights.

While the intent of this feature may have been enhanced security, all too often users need administrative rights for tasks like installing/updating programs, and many software applications need access to run properly.

The User Account Control tool has been designed to replace the Vista UAC, to simultaneously make your system more secure while significantly improving user-friendliness.

By default, any application launched by an administrator is running with a filtered, standard user access token. When the administrator attempts to perform a task, the UAC prompts the user to approve the action. This can lead to poor user experiences because the prompts can be slow to display, and appear frequently and without warning. What’s more, because the UAC may give a false sense of security since other processes can still access the desktop, it actually raises security concerns.

The net effect is that many users find the UAC security clearance and prompting process annoying, especially those who are a computer’s only user and have all the latest Norton Internet Security software installed and updated.

The User Account Control tool will collect user input as well as information on applications causing prompts. The data will be processed to improve the comprehensiveness and robustness of the white list, which will be updatable while running the tool online.


Link: Norton UAC

Tell me what you think people ?  ;D

P.S: Both 32bit and 64bit versions are available ;)

EDIT: Screenshot:
« Last Edit: October 16, 2008, 07:06:58 AM by darth_mikey »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: WinPatrol with Windows Defender
« Reply #4 on: October 15, 2008, 04:11:54 PM »
Robustness of the white list, which will be updatable while running the tool online.
Is this a joke? Robustness of a white list? This must be a joke from Symantec...
The best things in life are free.

Hard_ROCKER

  • Guest
Re: WinPatrol with Windows Defender
« Reply #5 on: October 15, 2008, 04:47:58 PM »


From the FAQ page:
Quote
Q: What does Norton Labs get out of my testing?

A: DATA! Each time you see a prompt, the Norton Labs UAC Replacement sends meta information about what caused the prompt, and why, to our server. This data will be used, in aggregate, to help Norton Labs build a white list that can be shipped with the UAC replacement and LiveUpdated as needed.

Q: What do you mean by "meta information"?

A: The meta information contains file name and file hashes for the EXE that caused the prompt and the EXE that is to be the recipient of the elevated privileges. In addition, the meta information contains file name and file hashes for DLLs that were active in either of the two EXEs, response information (what option did the user choose, how quickly, and did they choose "do not ask me again"), and date/time info.

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: WinPatrol with Windows Defender
« Reply #6 on: October 15, 2008, 05:15:47 PM »
Wow... they're collecting info from all executables being used in the world... Very good! Can you imagine what statistics could be generated? ;D
The best things in life are free.

Hard_ROCKER

  • Guest
Re: WinPatrol with Windows Defender
« Reply #7 on: October 15, 2008, 06:17:26 PM »
I'm just glad i have a don't ask me again option in UAC now.  ;D

timcan

  • Guest
Re: WinPatrol with Windows Defender
« Reply #8 on: October 15, 2008, 07:35:00 PM »
I'm just glad i have a don't ask me again option in UAC now.  ;D

 :)  same here, thanks for the link.tim

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: WinPatrol with Windows Defender
« Reply #9 on: October 16, 2008, 03:23:50 PM »
How would you configure that is the same request of UAC? By MD5, by behavior? It won't be that easy... which operations will be whitelisted, how, when?
The best things in life are free.

Hard_ROCKER

  • Guest
Re: WinPatrol with Windows Defender
« Reply #10 on: October 16, 2008, 10:27:25 PM »
@timcan: No problem at all ! ;)

@Tech: Sorry buddy i don't know what you mean with your question but i would suggest you ask around their forum if you have any questions related to NUAC. Here's the link :

http://community.norton.com/norton/board?board.id=uact

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: WinPatrol with Windows Defender
« Reply #11 on: October 17, 2008, 12:03:21 AM »
@Tech: Sorry buddy i don't know what you mean with your question but i would suggest you ask around their forum if you have any questions related to NUAC. Here's the link :
I'm not trusting this piece of software right now. Maybe it's a prejudice with Symantec.
I was asking how would a whitelist be created? Nowadays, if you star an action that requires elevation, UAC is started. I won't give Windows Explorer a way to go into this whitelist..., there would have no purpose on elevation if I did it so... I mean, how would an action be listed there? By the MD5 of the starter executable? By the process name?
The best things in life are free.

Offline bob3160

  • Avast Überevangelist
  • Probably Bot
  • *****
  • Posts: 48550
  • 64 Years of Happiness
    • bob3160 Protecting Yourself, Your Computer and, Your Identity
Re: WinPatrol with Windows Defender
« Reply #12 on: October 17, 2008, 12:14:05 AM »
Thanks Mikey,
I've installed it on my 2 systems running Vista.

Tech,
Not all things from Symantec are bad.  ;)


Free Security Seminar: https://bit.ly/bobg2023  -  Important: http://www.organdonor.gov/ -- My Web Site: http://bob3160.strikingly.com/ - Win 11 Pro v22H2 64bit, 16 Gig Ram, 1TB SSD, Avast Free 23.5.6066, How to Successfully Install Avast http://goo.gl/VLXdeRepair & Clean Install https://goo.gl/t7aJGq -- My Online Activity https://bit.ly/BobGInternet

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67194
Re: WinPatrol with Windows Defender
« Reply #13 on: October 17, 2008, 12:18:19 AM »
Tech,
Not all things from Symantec are bad.  ;)
Really... ;D ??? ;D
The best things in life are free.

Hard_ROCKER

  • Guest
Re: WinPatrol with Windows Defender
« Reply #14 on: October 17, 2008, 12:48:40 AM »
No problem Bob ...

@Tech: Honestly i have no idea why they would even want to create a default whitelist for UAC. Kinda defeats it's purpose doesn't it ? I really don't understand the logic behind this. BTW i haven't noticed that "whitelist" in action yet, everything that triggered a UAC popup before i installed this tool is still triggering it. So i have no idea how this whitelisting works or if it's even implemented in the tool already. I'll ask on their forum, see what they say.

What i do know though is that i always wanted the don't ask me again option in UAC and this tool let's me have just that. It's a keeper for me.