WinSonar 2003

[johng]

Here is an excellent free program:

"User feedback for Winsonar 2003
No subject
Recommended: Yes By: Big Al Date: 6/18/2003 16:59:00

This program was essential in locating a rogue program that installed itself from visiting a web site or spyware included with a shareware program (some sort of scratch off card scam). The program had no option to cancel or delete it and morphed it s name each time the computer was restarted. Winsonar tracked down all links, references and processes connected with the rogue program. MANY THANKS to the author for a great freebie! "

I believe that the author is creating a shareware version but this freeware is very good and detects quickly all new additions to registry and elsewhere on your pc. Also shows all current running processes and will test all ports.
From:
WinSonar (http://digilander.libero.it/zancart/)

He also has a few more useful programs.
John

[Amie]

Hi John

Good to see you back;

I like what he has written on his site;

This site is intended for distribution of free software written and copyrighted by the author of the site. The programs are provided without any limitation, at no charge to the user. If any of the programs downloaded from this site will be found useful, the author encourages a little donation to the UNICEF. You will contribute to saving children of war zones all over the world.

Good to see in a greedy world. :)


Amie. :amie:

[mikey]

Both frames at http://digilander.libero.it/zancart/winson...ar/odyframe.htm (http://digilander.libero.it/zancart/winsonar/odyframe.htm) contain web bugs for the RedSheriff (http://www.cexx.org/sheriff.htm) servers. I don't find that inspiring as to their security competence.

While this tool is nice in that it has both a process viewer and a process monitor, I found it lacking in function for both. Most application FWs have as good.

Alternative PV/TMs;

ProcessExplorer (http://www.sysinternals.com/ntw2k/freeware/procexp.shtml)

FaberToys (http://www.majorgeeks.com/download.php?det=1939)
A good process viewer should let you follow to the very last child.


Alternative Process Monitor(sandbox type);

SystemSafetyMonitor (http://maxcomputing.narod.ru/ssme.html?lang=en) Built for the average stand alone.

AbtrusionProtector (http://www.abtrusion.com/) Designed with the network admin in mind. You can centrally controll all processes allowed to work anywhere on the LAN but free to stand alone users. This tool does not make life with teens any easier.

-------------------------
You can see where both my local proxy and AdShield blocked RedSheriff;

"); //--></SCRIPT> <!-- JS Banner blocked -->
<script language=ShonenScript><!--
if(w0&&rs_DLR){
document.write('<img src="http://server-it.imrworldwide.com/cgi-bin/count?ref='+
&nbsp;refR+'&cid='+pCid+'" width=1 height=1>');
}
document.write("<COMMENT>");
//-->
</SCRIPT>
<IMG height=32
alt="AdShield blocked possible web bug: http://server-it.imrworldwide.com/cgi-bin/count?cid=it_Libero-it_0"
src="file:///d:/progra~1/adshield/adshield/WebBug02.gif" width=32
originalSource="http://server-it.imrworldwide.com/cgi-bin/count?cid=it_Libero-it_0"
originalWidth="1" originalHeight="1" originalAlt>

[johng]

Thanks mikey I am now trying ssm 189 (old version) as I am a bit wary about the beta, have you tried it? It certainly seems to work well.
Hello Amie, nice to be back, thought I had lost you all for a brief moment in time. Like the new setup.
John :rolleyes: