Help - Search - Members - Calendar
Full Version: need some clarification & wants to ask few questions.
Gladiator Security Forum > SoftSphere Technologies Support Forums > DefenseWall HIPS
Anirudha
Hello Ilya,
Recently installed DW 2.56 on Win XP SP3 & found it to be good (Great software), but please clarify the following points to me.

1 -> What is the difference between the Expert mode & non-expert mode in DW. I mean I right clicked the Tray icon & selected Expert mode but could not see any changes in DW ie visibility of some hidden features, extra options etc.

2 -> I right clicked the Tray icon & selected Expert mode & then opened Firefox, downloaded CCleaner, right clicked on CCleaner -> Selected Defensewall HIPS -> Selected File Properties, a dialog box appeared which showed that it is Trusted. I downloaded some other softwares from other sites & found the same results.
But when I disselected Expert mode & did the above things, the result were Untrusted.

Is this happening to me only or others are also experiencing the same thing with DW 2.56.

One more thing, do I have to use some Firewall with DW or not?
Creer
Ad. 1 & 2
It is normal and this is how expert mode in DW works.

Here is a quote from DW tutorial:
QUOTE
There are two user modes - 'Regular' and 'Expert'. Under Regular mode, all executable files created by untrusted processes are added into the "untrusted applications" list automatically. In 'Expert' mode, you choose how to run files. User mode can be switched within the main program's menu with one mouse click.
........

http://gladiator-antivirus.com/forum/index...showtopic=34858
Creer
I don't know why I can't see my previous post...
Anyways here is what I wrote:

Ad. 1 & 2
It is normal and this is how expert mode in DW works.

Here is a quote from DW tutorial:
QUOTE
There are two user modes - 'Regular' and 'Expert'. Under Regular mode, all executable files created by untrusted processes are added into the "untrusted applications" list automatically. In 'Expert' mode, you choose how to run files. User mode can be switched within the main program's menu with one mouse click.

http://gladiator-antivirus.com/forum/index...showtopic=34858
[quote]
Ilya Rabinovich
Yes, that's how the Expert mode works. It's not advices as a regular mode.
Anirudha
O.K, That was a quick reply. Thank you for that.
I also read the info given by Creer. That was also quit usefull.

Still some doubt about the Rollback feature.

For example: If I downloaded a malware & run it. Later I realised that it was a malware & I Press Stop Attack button but by that time the malware already created an executable in C:/windows/system32 folder. Knowing that it was a malware I deleted it from my hard disk.
Now my question is:
1 -> The malware was Untrusted, & it's executable in C:/windows/system32 folder is also Untrusted & a debris of that malware. It is then supposed to be in the list of File and Registry Tracks. So after 15 days will that executable be automatically deleted or do I have to delete it manually.

Creer
You are welcome.

BTW remember that you have even more detailed help file under: Right mouse click on DefenseWall tray icon > Help.

QUOTE
-> The malware was Untrusted, & it's executable in C:/windows/system32 folder is also Untrusted & a debris of that malware. It is then supposed to be in the list of File and Registry Tracks. So after 15 days will that executable be automatically deleted or do I have to delete it manually.

This is exactly mean that after 15 days after their creation entries from Rollback list will be automatically deleted (only from Rollback list not physically from your system).
These entries are harmless. If you really want/need delete them you can use Rollback list and use Delete button, but be carefull here and only delete entries for which you are 100% sure that was created by malware.
Also you can use AV/AS or AM software to clean your system - it's up to you.

HTH,
Anirudha
Thank you once again Creer for that help.
This is a kind of new software for me, different from other AV's thats why clarifying some doubts before giving it a serious thought.

One more thing I wanted to ask is Do I need a firewall with DW? I am asking this cause I did Comodo Leak Test on DW & the results were very impressive. So I thought that a Firewall won't be needed with DW but still I would like to know it from you guys. What do you say?
Creer
DefenseWall HIPS do not have Firewall module, but Ilya working on a new product line: DefenseWall Personal Firewall which will has features of DW HIPS + built-in Firewall module.
About this you can read in this thread:
http://gladiator-antivirus.com/forum/index...showtopic=92869

Firewall is an important part of security arsenal I would say you should have one.
Ilya Rabinovich
A small correction- time period is not 15, but 30 days. Also, it's worth to mention that DefenseWall is, mostly, made to cover "infection hole" of anti-virus software as, for novice users, using "Rollback" feature is quite difficult as they afraid to erase something important.

About FW- just wait a bit before V3 public beta will come out, I keep my hands on dialog's skinning already. With it, personal firewall paradigm has been re-invented.
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.