[az0000000]

Here is my situation,
For some reasons i am on an old AMD Athlon 600 MHz CPU with 512 RAM junk machine (Windows XP SP2 Pro), and will have to stay on it for a while.
After the last virus attack I hardly recovered from, I feel I can’t rely anymore on Windows Firewall, it just doesn’t do anything to protect me.
I would really appreciate an advice for an alternative Firewall that would be protecting better than Windows Firewall, but would take just as many resources as Windows Firewall does.
Please consider seriously that I am on an old machine and working with monsters like Photoshop, every bit of RAM and CPU power matters to me, and i would kindly ask you to advice me only software you are sure about (not just for advertising purposes), and have tested it and know what you are talking about.

p.s. by the way I am really want to know:
1. How many resources take Windows Firewall and where can I check such data?
2. How exactly can I check if my Windows Firewall is really running (and doesn’t just appear as ON in control panel, or Security Center) because after the last attack I am not sure anymore if my firewall is running at all…

[blues_harp28]

Hi check out.
Jetico

PORT SCAN.
http://www.hackerwatch.org/probe

http://www.matousec.com/projects/win...ts-results.php

[sup2a]

COMODO is a great firewall and is free...BUT im used to using it on a mid-higher end system, it SHOULD WORK but....im not too sure how well on a system like that (no offense i have one too =p).... i have an old 600mhz myself but i have never hooked it up to the internet...

[az0000000]

Thanks for useful replies.
I am wondering what takes less resources Jetico or Comodo, as these two are being suggested to me often and i have to make my pick. Resources is priority for me now.

[sup2a]

well ive checked COMODO site it needs 64mb RAM...doesn't say anything about processor speed either that or im blind =p

[knucklehead]

On my system according to task manager, Comodo 2.4 is using about 22mb of ram while running. The newer version 3 of Comodo may use more?

[Gizzy]

in task manager on my computer between the 2 processes comodo v3.0 uses it's taking up 11MB,

I never used jetico but I've always heard that it takes up very little system resources.

[az0000000]

Originally Posted by Gizzy

I never used jetico but I've always heard that it takes up very little system resources.

That sounds clear.
Thanks.

[Caff]

first of all as long as you have service pack 2 installed and a good antivirus installed windows firewall is more than adequate for most people. this all really comes down to what your surfing habits are and how security concious you are. if you are prone to downloading and executing files and attatchmetns you have no idea about without scanning them first than most software firewalls are going to fall short. which if that is the case you should get yourself a good hardware firewall that not only blocks inbound and outbound traffic but also scans for virus's at that point a simple suite of tools such as avast and the windows firewall will offer everything you need. this of course is a bit much for the average surfer. the windows firewall may not be the most feature rich but it does offer what most people need.

[az0000000]

I think i have to mention here that the cause of last serious attack i went through was IE6 browser.
The attack and Windows Firewall/Windows Security Center destruction has happened right in front of my eyes, i wasn't fast enough to stop that.
I remember i have simply visited a homepage of certain website, and the malicious code within html page has done all the bad things to me.
Antivirus has caught that virus, but it was enough for my computer to be messed up.
Now i am wondering if i should move from IE6 to IE7? Is IE7 more protected? Does it protect better from running malicious code within web pages?
By the way does IE7 eat computer resources more than IE6?
Thanks.

[blues_harp28]

Hi post a Hijack this log...one of the log experts will check it.
http://www.trendsecure.com/portal/en...kthis/download

Save HJTsetup.exe to your desktop.
Double click the HJTsetup.exe icon.
It will install to C:\Program Files\Hijack This.
Continue to click Next in the setup dialogue boxes until you get to the Select Addition Tasks dialogue.
Put a check by Create a desktop icon then click Next again.
Follow the rest of the prompts from there.
At the final dialogue box click Finish and it will launch Hijack This.

Click>Do a system scan and save a log file button.
Click>Save to save the log file the log will now open in notepad.
Click Edit > Select All> Edit > Copy.
Paste the log in your next reply.

DO NOT have Hijack This fix anything yet.
Most of what it finds will be harmless or even required.

[eduperson]

Also regularly updating with Windows patches is very important. Make sure Windows Updates are automatically scheduled to download and install every day.

[az0000000]

Originally Posted by blues_harp28

Hi post a Hijack this log...one of the log experts will check it.

Helo,
Here it is:

Logfile of HijackThis v1.99.1
Scan saved at 12:48:51, on 15.02.2008
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Symantec Antivirus Corporate Edition v10.1.0.394\Rtvscan.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\explorer.exe
C:\Program Files\Winamp 2.95 Full\winamp.exe
C:\Program Files\Outlook Express\msimn.exe
C:\Program Files\Mozilla Firefox v2.0.0.4\firefox.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\No Setup\HijackThis v.1.99.1\HijackThis.exe

O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe Acrobat 6.0 Professional\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: ClickCatcher MSIE handler - {16664845-0E00-11D2-8059-000000000000} - C:\Program Files\Common Files\ReGet Shared\Catcher.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\program files\google\googletoolbar_en_4.0.1601-big.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files\Adobe Acrobat 6.0 Professional\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: Adobe PDF - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files\Adobe Acrobat 6.0 Professional\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: ReGet Bar - {17939A30-18E2-471E-9D3A-56DD725F1215} - C:\Program Files\ReGet Deluxe v4.1. build 241\iebar.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\program files\google\googletoolbar_en_4.0.1601-big.dll
O3 - Toolbar: Steganos Internet Anonym - {00000000-5736-4205-0008-f7ed0776fb27} - c:\program files\steganos internet anonym pro 2006 8.0\sia2006iep.dll
O4 - HKLM\..\Run: [ccApp] "C:\Program Files\Common Files\Symantec Shared\ccApp.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Program Files\Common Files\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: Do&wnload by ReGet Deluxe - C:\Program Files\Common Files\ReGet Shared\CC_Link.htm
O8 - Extra context menu item: Download A&ll by ReGet Deluxe - C:\Program Files\Common Files\ReGet Shared\CC_All.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_02\bin\ssv.dll
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.onecare.live.com/resource/download/scanner/wlscbase370.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{1CB634DB-B228-43B0-8057-D529566ED58B}: NameServer = 217.12.112.2,217.12.112.4
O17 - HKLM\System\CS2\Services\Tcpip\..\{1CB634DB-B228-43B0-8057-D529566ED58B}: NameServer = 217.12.112.2,217.12.112.4
O17 - HKLM\System\CS3\Services\Tcpip\..\{1CB634DB-B228-43B0-8057-D529566ED58B}: NameServer = 217.12.112.2,217.12.112.4
O20 - Winlogon Notify: NavLogon - C:\WINDOWS\system32\NavLogon.dll
O23 - Service: Acronis Scheduler2 Service (AcrSch2Svc) - Acronis - C:\Program Files\Common Files\Acronis\Schedule2\schedul2.exe
O23 - Service: Adobe LM Service - Unknown owner - C:\Program Files\Common Files\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Settings Manager (ccSetMgr) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
O23 - Service: Symantec AntiVirus Definition Watcher (DefWatch) - Symantec Corporation - C:\Program Files\Symantec Antivirus Corporate Edition v10.1.0.394\DefWatch.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: LiveUpdate - Symantec Corporation - C:\PROGRA~1\Symantec\LIVEUP~1\LUCOMS~1.EXE
O23 - Service: PDAgent - Raxco Software, Inc. - C:\Program Files\Raxco PerfectDisk Professional v8.0.50\PDAgent.exe
O23 - Service: PDEngine - Raxco Software, Inc. - C:\Program Files\Raxco PerfectDisk Professional v8.0.50\PDEngine.exe
O23 - Service: SAVRoam (SavRoam) - symantec - C:\Program Files\Symantec Antivirus Corporate Edition v10.1.0.394\SavRoam.exe
O23 - Service: Sunbelt CounterSpy Antispyware (SBCSSvc) - Sunbelt Software - C:\Program Files\CounterSpy v2.5.1042\SBCSSvc.exe
O23 - Service: PC Tools Auxiliary Service (sdAuxService) - PC Tools - C:\Program Files\Spyware Doctor v5.5.0.178\pctsAuxs.exe
O23 - Service: PC Tools Security Service (sdCoreService) - PC Tools - C:\Program Files\Spyware Doctor v5.5.0.178\pctsSvc.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SNDSrvc.exe
O23 - Service: Symantec SPBBCSvc (SPBBCSvc) - Symantec Corporation - C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
O23 - Service: Symantec AntiVirus - Symantec Corporation - C:\Program Files\Symantec Antivirus Corporate Edition v10.1.0.394\Rtvscan.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

Thank you.