Help - Search - Members - Calendar
Full Version: Blocking Bad EXE's
B.I.S.S. Forums > Internet Security Forum > Security Tool Database
Bronxie
I was just wondering if the creator of protowall & host-manager would ever create a file blocking progam!
something simular to noEXE but better! something more on the lines of protowall where you can yous customized lists! like :- qsv.exe #[ROBAL 1.0 BackDoor-Trojan]
NPFMNTOR.exe #[W32/RBOT-AGY WORM] and so on
ive been searching on the web for a decent prog to use but the ones i find are a pain in the but to use
so what ive done is compile a list what i compiled from Mcafee site-advisor and imported it into FreshUI so that they cant be run in explorer! so could some one point me in the right direction to a decent Exe Blocking program! or the authors of protowall creat one! i think that it would do well!
smile.gif
Moore
The most effective programs to do what you are looking for are Processguard and System Safety Monitor.

Both have freeware versions, although the full versions have the most features. Check them out , if you need any help with setting up let us know.

I would start with Processguard:
http://www.diamondcs.com.au/processguard/

SSM:
http://syssafety.com/

A good example of how they both kick ass over malware files is here:
http://www.bluetack.co.uk/forums/index.php?showtopic=15050
http://www.bluetack.co.uk/forums/index.php?showtopic=15097
Bronxie
im using process guard! its becouse iv been using mcafee site advisor! and every site whats been black lists ive been logging and adding to my host file! which is 114000 or so!
also ive logging all the file names! and using them in FreshUI!
Im on the look out for 1 so i can just add lists simular to the way protowall & pg2. becouse u can emagine how long it takes to add each one in manually! it all adds t extra protection! i think i could be a good section! ppl posting names of bad files & what not! you probs think it isnt like but hey its all for the graeter good!
Moore
Ok well you can use Wormguard from www.diamondcs.com.au to add names of any .exe files to its text file and it will prevent them from running.. I was building my own malware .exe file list awhile ago for Wormguard but I found it was a pointless using it with Processguard already in control of what can run.

There is also filename blacklist feature in Regrun , and I think there was another program called Process Patrol, but that wasn't too good when I tried it.

I think making up lists of bad processes is a lot more time consuming that just turning on execution protection in PG and preventing all unknown processes from running whether they are listed or not.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2012 Invision Power Services, Inc.