PDA

View Full Version : Does Spyware Doctor Stop Buffer Overflow


khim
11-25-2008, 07:28 AM
Hello Pctools Member, Staff And Experts.

Does SD stop Buffer overflow because when i watch one movies everyday. Sometimes I have Buffer overflow and also virus when i watch a movie.

Any Help Please?:)

Best Regards

Khim

AChen
11-26-2008, 12:28 AM
Hi khim,

SD should not stop the buffer flows, but once the exploit drops files, keys and performing potentially malicious actions, Behavior guard, other IntelliGuards and scans should pick it up if it is in the database.

GoneToPlaid
11-26-2008, 01:11 AM
Don't modern processors with WEP enabled in conjunction with an OS which supports WEB stop buffer underruns and buffer overruns?

rgrove
11-26-2008, 02:21 AM
Don't you mean DEP? http://en.wikipedia.org/wiki/Data_Execution_Prevention

GoneToPlaid
11-26-2008, 10:22 AM
DEP, WEP, whatever. Glad you know what I meant! :D

dallas7
11-26-2008, 08:46 PM
Microsoft's DEP is a noble attempt to address the issue of overflows.

Be aware though that if you choose the "Turn on DEP for all programs and services except those I select:" some applications, particularly when you install them, will enter themselves in this area and exclude themselves from DEP. Even if you look in there every now and then and remove them, at next reboot they might be back.

That said, just turn on "for essential Windows programs and services only" and run Comodo's Memory Firewall.

BTW, that's for Windows XP Pro. I'm not familiar with DEP for other versions of XP or for Vista.

Cheers!

GoneToPlaid
11-26-2008, 11:32 PM
Hi dallas7,

Thanks a million! I had no idea about the consequences of changing the DEP setting, nor about Comodo Memory Firewall. I just downloaded it and will install it shortly.

:)

haapy
12-11-2008, 04:32 PM
I just read djames post on updates to ThreatFire. With the 12/10/07 update he indicated that buffer overflow protection was added.

Is this protection now in Behavior Guard too?

Is this the same as the Comodo Memory Guard?

haapy
12-11-2008, 07:30 PM
Found this thread on the ThreatFire Forum.

http://www.pctools.com/forum/showthread.php?t=49543