Help - Search - Members - Calendar
Full Version: Wishlist V3
Gladiator Security Forum > SoftSphere Technologies Support Forums > DefenseWall HIPS
Pages: 1, 2
LoneWolf
QUOTE (Scoobs @ Aug 31 2009, 10:00 AM) *
QUOTE (LoneWolf @ Aug 31 2009, 02:51 PM) *
QUOTE (Scoobs @ Aug 31 2009, 04:33 AM) *
I thought I'd posted this already but can't find the post...so here goes again. On notifications for possible keyloggers & clipboard monitoring I'd like some clearer notifications for inexperienced users that makes clear that there is possible dangerous keylogging behaviour happening and that if you click "OK" it actually means "Allow" rather than "OK, I'll stop it". So perphaps change the "OK" to "Allow" with warning that you should only click "Allow" if you trust the application?



OK does not mean allow in this instance.
DW blocks/stops keylogging by default.
Someone correct me if i'm wrong on this.
Checking your logs should confirm.


No, DW alerts with the popup window, but only stops the keylogging if you terminate. If you click ok, the keylogging is allowed to continue. If you just ignore the popup and let it sit there the keylogging also continues. Whilst I understand this and know how to respond I also use DW on my wife's PC and she would probably just click "OK". So I just think the popup message could be a bit clearer to explain that keylogging is taking place and ask what action would you like to take...with a strong hint to "Terminate" unless you are 100% sure that the behaviour is legitimate.


After checking this more I found you are correct.
Your suggestion is a valid one indeed.
Chachazz
>>I thought I'd posted this already but can't find the post

Scoobs, your post #12 in this topic:
http://gladiator-antivirus.com/forum/index...st&p=199385

Find your posts: Click your name (Logged in as) upper left corner of board.
Select: Profile Options> find Members Posts
hawkwind
I would like the warning pop up box to always be on top.
Currently when it pops up with for e.g "firefox reads keystrokes via getkeystate" the box is hidden by firefox.
I initially miss the warning box until i happen to notice it on the taskbar.
Ilya Rabinovich
OK, got it.

Edited: strange, I just looked at my project's code and it's already set as a topmost.
Reldel
Same thing happens here on Firefox 3.5.3 as reported by hawkwind.
Mercurybird
QUOTE (Scoobs @ Aug 31 2009, 03:33 AM) *
I thought I'd posted this already but can't find the post...so here goes again. On notifications for possible keyloggers & clipboard monitoring I'd like some clearer notifications for inexperienced users that makes clear that there is possible dangerous keylogging behaviour happening and that if you click "OK" it actually means "Allow" rather than "OK, I'll stop it". So perphaps change the "OK" to "Allow" with warning that you should only click "Allow" if you trust the application?


Correct me if I'm wrong but, just because something is key-logging doesn't mean it is malicious. DW reports that games are key-logging, or maybe that is keystate. This is normal because the game config needs to know which keys are mapped to where, and which ones are pushed accordingly.

We DW users trust it to tell us what we ordinarily wouldn't see otherwise. And we always lean toward what ever it says to do.
but the dialogue that DW uses is to suggest careful thought as to whether the action is legit and necessary. If it were changed to read as you are suggesting, it could vary well mislead.

A more practical addition would be for Ilya to build-in two keylogging, or keystate, popups. One would notify you of all known malicious programs, with the appropriate warning, and another that is simply informative if the keylogger or keystate was tied to a known safe game, or other software that was launched, and consequently gave rise to the DW popup. But the current scheme may serve that purpose already, if we give it due consideration.
Savage
"Ilya Rabinovich
Developer Join Date: Sep 2005
Posts: 1,115

Re: SafeOnline
Quote:Originally Posted by Scoobs72
Are there any known issues with using SafeOnline + Defensewall? Does DW restrict SafeOnline's operation in any way? Thx.

Not with the V3 of DefenseWall."


Where is this so-called end-all malware software? Keep hearing good things about this elusive program.
pool7
Hi,

I recently moved to Windows 7 64 bits; I'd love to see 64-bits compatibility added in V3.

Thanks!
czullo
there will be no 64-bit verssion sorry
bellgamin
As explained in a post HERE Bellgamin fervently requests that an audible alert option be added to DW.

I have several other security apps that provide for acoustic notifications. Here is an example for Avira...
Click to view attachment
Creer
Just a thought:

If this feature/implementation needs time: http://gladiator-antivirus.com/forum/index...mp;#entry248862 (#662)

so then how about new HotKey command eg. ALT+WIN+R (Running Trusted and Untrusted Processes) - which will open Trusted and Untrusted Process Details - Running Now - window, to fast access to check all trusted and untrusted running processes.
abc
QUOTE (Creer @ Feb 8 2010, 07:22 PM) *
Just a thought:

If this feature/implementation needs time: http://gladiator-antivirus.com/forum/index...mp;#entry248862 (#662)

so then...

if this idea has already been partly addressed with the help of an image, nothing has been said about the other idea, or to be advised for each process starting as untrusted...



It is obvious that it would be useful to be alerted only for processes that are not marked by a blue item (blue item=default untrusted list)...
abc
although perfectly trapped into File and registry tracks, i proposed to Ilya to mark with a particular color all files generated by an untrusted process that were characterized with special attributes (hidden,...) so as to be more easily traceable...

What do you think about it?
Ilya Rabinovich
I have to stop adding new GUI-related staff in order to allow Chachazz to finish the help file. Otherwise, the V3 release won't happens for a long time.
abc
infact, my wish is simply to see these little ideas take shape in a relatively short time provided always that you and the community feel these ideas useful...

Keep un the good work and txs again for your attention...
chinook9
Ilya:

I just experienced something that I thought you might like to fix.

I moved some software in a couple of folders onto my desktop from an external drive. I check them and found that they were trusted by DefenseWall and I wanted them untrusted. I opened Defensewall, clicked add>folder, navigated down to one of the folders and clicked on it. I then clicked on OK. and closed DefenseWall. Of course, the folder was not changed to Untrusted because I did not click Apply. When I went to close DefenseWall, It would have been very helpful to have a dialog box remind me that I needed to click "Apply" if I wanted the changes to take effect.

You probably know about this but I thought I would put in my vote for this change.
Ilya Rabinovich
Good suggestion. It's like "you have modified the text" with Notepad. OK, going to add it. Thanks!
vhick
I, perhaps, wish to move the settings of Defensewall in application folder rather than registry to easy exclude by some virtualization program like Returnil , Shadow Defender, etc. to save data, settings, untrusted, trusted, etc. on every reboot.

I hope this is possible ahah.gif

Thanks Softsphere for a great app...
This is a "lo-fi" version of our main content. To view the full version with more information, formatting and images, please click here.
Invision Power Board © 2001-2010 Invision Power Services, Inc.