New Update Huorong Internet Security (Updates)

[bulamber]

Seems HIPS dosent work for me

 

[ichito]

I just hope it`s not too heavy on resources.

Regards Eck : )

No it's not to heavy - it's usualy like in screenshot

 

[Behold Eck]

No it's not to heavy - it's usualy like in screenshot
View attachment 212095

Yup! That`s what I found

Could you check out the HIPS component ichito and see if you can get them to work ?

Regards Eck

 

[Terry Ganzi]

Yup! That`s what I found

Could you check out the HIPS component ichito and see if you can get them to work ?

Regards Eck

Depends on how you configure it, but hips work. On default settings i'm not sure because i run no Av in default settings.
In testing it works. (hips)
Configure it correct and then run stuff and check logs, hips stop stuff and ask for permission to accept or deny stuff.

 

[Jerry.Lin]

Seems HIPS dosent work for me

Could you check out the HIPS component ichito and see if you can get them to work ?

If you wrote your own custom rules, remember to enable this button on Protection.

 

[bulamber]

If you wrote your own custom rules, remember to enable this button on Protection.
View attachment 212098

I have the same processes, tnx, but how to test the HIPS

 

[Behold Eck]

Depends on how you configure it, but hips work. On default settings i'm not sure because i run no Av in default settings.
In testing it works. (hips)
Configure it correct and then run stuff and check logs hips stop stuff and ask for permission to accept or deny stuff.

I thought on default that at least .exe would be queried ?

If you wrote your own custom rules, remember to enable this button on Protection.
View attachment 212098

Thanks Jerry I will give this a go when I have the time to.

 

[Behold Eck]

I wonder could @Terry Ganzi, @Jerry.Lin or some other knowledgeable person here mind sharing they`re precise set-up for a customised HIPS.??

Regards Eck

 

[Sunshine-boy]

Hi Eck how are you? i made some rules and combined them with Chinese user(they have some smart and knowledgeable users) rules.
The hips don't have memory protection, hook protection and ... but 100% free+no adware+bb and signature+ very powerful FW. very good tool to combine with exploit guard(to get memory protection and such)
you can dl my custom rules from Yandex disk. after you dl go to advacned->costume rules and import it.

Yandex

Finds everything

yadi.sk

 

[Behold Eck]

I`m fine Sunshine and how`s you ?

Yes this is a good find. Do I need Yandex browser to view the download ?

I take it the firewall bit is an add-on for windows firewall ?

Very good out bound control, sigs not too bad and it`s as light as a feather. Works on XP as well.

Thanks for the reply

Regards Eck

 

[Behold Eck]

Whay Hey!
The HIPS work!


Regards Eck

 

[Behold Eck]

Seems HIPS dosent work for me

Go to Menu(top right) Preferences, HIPS, Host Reinforcement and tick everything. Don`t forget to enable the "Custom" setting in Advanced.

Regards Eck

 

[bulamber]

Go to Menu(top right) Preferences, HIPS, Host Reinforcement and tick everything. Don`t forget to enable the "Custom" setting in Advanced.

Regards Eck

Thank you

 

[Terry Ganzi]

Tick every box on this page and hips alerts will come.

 

[blueblackwow65]

I'd like to try this ,how is it overall?Thks

 

[Terry Ganzi]

I'd like to try this ,how is it overall?Thks

If you like tweaking then this is for you, but if you don't then it is like any other no new inventions here.
Looking for very high detection rates by sig's not here either. But tweaked correctly it becomes powerful.

 

[dJim]

So any real scenario test yet ? Vs the AV, hips, firewall etc
have ad´s ? telemetry?

 

[Terry Ganzi]

So any real scenario test yet ? Vs the AV, hips, firewall etc
have ad´s ? telemetry?

I tested it tweaked it was awesome, most testers will test this at default setting which is not that great or in other words not that impressionable.

 

[tiktoshi]

Clean failed
Trojan/Generic!EFB4845FE2BE78F6
.exe
Signature: 2019-04-08 10:57
Started at: 2019-04-08 19:52
Duration: 00:00:06
Object(s): 154
File(s): 94
Threat(s): 1
Cleaned: 0

Virus Details


Path: C:\Users\xxxxxx\Desktop\2\2\2019-03-01-Emotet-binary-used-to-generate-infection-traffic.exe, Detection: Trojan/Generic!EFB4845FE2BE78F6, Detection ID: efb4845fe2be78f6, Result: Clean failed

 

[Sunshine-boy]

Yes this is a good find. Do I need Yandex browser to view the download ?

I'm good thanks.no you can dl it with any browser.

I take it the firewall bit is an add-on for windows firewall ?

no it's not an add-on and I think it uses Windows Filtering Platform(not sure about it)