topbanner_forum
  *

avatar image

Welcome, Guest. Please login or register.
Did you miss your activation email?

Login with username, password and session length
  • Friday December 13, 2024, 3:44 pm
  • Proudly celebrating 15+ years online.
  • Donate now to become a lifetime supporting member of the site and get a non-expiring license key for all of our programs.
  • donate

Author Topic: [suggestion] ProcessGuard and RegDefend  (Read 14467 times)

mob

  • Charter Member
  • Joined in 2005
  • ***
  • Posts: 15
    • View Profile
    • Donate to Member
[suggestion] ProcessGuard and RegDefend
« on: April 04, 2005, 09:22 PM »
ProcessGuard and RegDefend are both top of the line security programs in their categories.

Together, they can secure a system from virtually any threat and all with very very very little use of resources.

They compliment any firewall/antivirus by filling in the gaps and vulnerabilities left open by those programs and provide an added layer of security to protect any PC.

No PC should function without these two programs.

This is why I think they deserve a nice review from donationcoder.com :)

----------------------------------------------------------

To learn more about these programs visit:

ProcessGuard Website: http://www.diamondcs...com.au/processguard/
RegDefend Website: http://www.ghostsecu...x.php?page=regdefend

ProcessGuard Forum: http://www.wildersse...orumdisplay.php?f=13
RegDefend Forum: http://www.wildersse...orumdisplay.php?f=72

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,914
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: [suggestion] ProcessGuard and RegDefend
« Reply #1 on: April 04, 2005, 10:52 PM »
i've heard some very good things about process guard from a friend who rescued a computer filled with viruses/spyware, and used process guard to hold the infections at bay while he cleaned it.

mob

  • Charter Member
  • Joined in 2005
  • ***
  • Posts: 15
    • View Profile
    • Donate to Member
Re: [suggestion] ProcessGuard and RegDefend
« Reply #2 on: April 05, 2005, 05:13 PM »
i've heard some very good things about process guard from a friend who rescued a computer filled with viruses/spyware, and used process guard to hold the infections at bay while he cleaned it.

That's what it does best :)

ProcessGuard is a very powerful program. It works at the Kernel Level which means it has higher authority over virtually anything you run on your computer.

Just a few examples of why it's so important to have this program:

1) Even if you have a firewall and an antivirus installed and running, there are so many leaks and vulnerabilities that will render those security programs useless. You can see a list of the most common leaktests here: http://www.firewallleaktester.com :and just so you know, these leaks are common and KNOWN! Yet still today firewalls and antivirus software fail to block some of these threats and are actually having difficulties finding ways to stop them. ProcessGuard was not even designed to block these leaks but the nature of the software blocks them effortlessly.

2) There are tons of viruses/trojans/worms that will detect which firewall/antivirus software you are using and simply close them down or disable them and then run their malicious coding or connect to the internet. And your Antivirus/firewall can't do anything about it! Your security software is just going to think you are shutting it down or disabling it. Now ProcessGuard is designed to protect any application you choose from being closed or disabled. And since it works at the kernel level which is the lowest level of your operating system, it is virtually unstoppable. Read the processguard forum and the info on their website to find out about many more things this program will do for you.

To make the long story short, no process guard = no security.

Scott

  • Resident Googler
  • Charter Member
  • Joined in 2005
  • ***
  • Posts: 378
    • View Profile
    • Read more about this member.
    • Donate to Member
Re: [suggestion] ProcessGuard and RegDefend
« Reply #3 on: April 16, 2005, 01:38 AM »
I'd hold off on the "No PC should function without these two programs" recommendation for now.

ProcessGuard is a very powerful program. It works at the Kernel Level which means it has higher authority over virtually anything you run on your computer.

All drivers work "at the kernel level".  ProcessGuard only has a real shot if it prevents malware from installing; not if that malware is already installed.  And the kicker is that the authors of ProcessGuard, DiamondCS, recommend disabling ProcessGuard during software installs.  This is ironic, since that's exactly when malware often creeps in.

So, OK, ignore that advice, and keep ProcessGuard enabled while installing software?  This can be a recipe for a headache, if ProcessGuard blocks a driver, service, or hook that your new software needs to have installed and working.  And the result of blocking it may be a botched install.  Usually, you can just re-run the installer, but sometimes you'll have a mess to clean up, or worse.

And the fact that you must allow some software to install drivers and/or service, or to use system hooks, means that it's a guessing game as to what you can trust.  Just try blocking all drivers, services, and system hooks sometime, and you will quickly see what I mean.

Even if you have a firewall and an antivirus installed and running, there are so many leaks and vulnerabilities that will render those security programs useless. You can see a list of the most common leaktests here: http://www.firewallleaktester.com

My personal firewall software stops all known leak tests.  I'm not going to say what it is, because I don't want to engage in a back-and-forth about it.

There are tons of viruses/trojans/worms that will detect which firewall/antivirus software you are using and simply close them down or disable them and then run their malicious coding or connect to the internet. And your Antivirus/firewall can't do anything about it!

Can you name any of them off the top of your head?  I can't, though I know they exist.  In any case, no malware is going to kill your firewall or anti-malware application if it is recognized and intercepted by the latter.  Please don't read into the word "if" in that sentence; I am not saying that security-software-terminating malware isn't a concern, but this is a mitigating factor worthy of note.

Your security software is just going to think you are shutting it down or disabling it.

Only if (1) The malware isn't detected; and (2) Your security software has no self protection features of its own (most decent ones these days do).

To make the long story short, no process guard = no security.

This is a gross misstatement of reality.  Security is a direction, not an end point.  Shades of grey, not black and white.  You're not "secure with ProcessGuard" and "totally insecure without ProcessGuard".

I'll close by pointing out that I (and others) have reported several bugs to DiamondCS that made it easily possible to totally bypass ProcessGuard.  I also pointed out a way to kill applications that ProcessGuard was supposedly "protecting".  I have no idea if all of those bugs have been fixed, as I grew tired of being their unwitting beta tester.
 
« Next Edit: Tomorrow at 12:13:47 AM by Scott »

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,914
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: [suggestion] ProcessGuard and RegDefend
« Reply #4 on: April 16, 2005, 01:49 AM »
i have to say i tried processguard and did not have much success with it.
I tried using process tamer gui to kill apps and process guard didn't seem to be able to prevent it.


the friend of mine who found it useful says he doesn't keep it running on his machine, but has used it in an emergency when an installed virus or trojan would not let itself be stopped.  process guard was the only thing he found to keep it from running until he was able to clean the system.

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,914
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: [suggestion] ProcessGuard and RegDefend
« Reply #5 on: April 16, 2005, 01:57 AM »
the point about possibly causing trouble during an install is a really good one,
i can easily see one of these protection programs totally creating havok with the install of an app that used some system drivers, etc. and i'd be concerned about such a possibility.

Scott

  • Resident Googler
  • Charter Member
  • Joined in 2005
  • ***
  • Posts: 378
    • View Profile
    • Read more about this member.
    • Donate to Member
Re: [suggestion] ProcessGuard and RegDefend
« Reply #6 on: April 16, 2005, 02:01 AM »
Security software that causes stability or other problems has failed, just as locking your storefront door, and preventing customers to enter, has failed.  (Great security, though.)
« Next Edit: Tomorrow at 12:13:47 AM by Scott »

mouser

  • First Author
  • Administrator
  • Joined in 2005
  • *****
  • Posts: 40,914
    • View Profile
    • Mouser's Software Zone on DonationCoder.com
    • Read more about this member.
    • Donate to Member
Re: [suggestion] ProcessGuard and RegDefend
« Reply #7 on: April 16, 2005, 02:07 AM »
yeah,

i guess i favor a backup/virtualmachine - centric approach.

this basically says that you should have backups so that if you get infected by something you can roll back your machine to a good backup, rather than trying to find and clean the infection.

and secondly, run all suspicious stuff on a virtual machine instead of your main machine.

the only fly in that ointment is that a trojan can send sensitive stuff out through the internet so by then the damage may be done..

nudone

  • Cody's Creator
  • Columnist
  • Joined in 2005
  • ***
  • Posts: 4,119
    • View Profile
    • Donate to Member
Re: [suggestion] ProcessGuard and RegDefend
« Reply #8 on: April 16, 2005, 03:24 AM »
i second that.

since installing vmware i have tested installations there first that i thought might be a bit dodgy.

the system backup still remains my favourite means of security though - you can come over and blow my machine up if it takes your fancy. my systems all backed up in the other room. (just don't come and burn the other room down, that would be upsetting.)

okay, seriously. it might be a bit of an inconvenience to have to restore your system after it goes t*ts up. but that only takes a few minutes - rather that than waste time trying to figure out what's been compromised on your computer.