Security Russian System Monitor application manual _windowsxp

Many readers are interested in system Safety Monitor (SSM for short). It is a Russian-produced system monitoring software, through monitoring system-specific files (such as registry, etc.) and application procedures to protect the system security purposes. It is more powerful in some functions than the winpatrol we have described before.

Install and start (may need to manually go to the installation directory to run SysSafe.exe) SSM, click on the Pop-up logo window in the close of this Windows (closed window) item, close the window. Now that the SSM has been started and monitored, we can see the software icon in the system tray.

　　 SSM Personal Protection of your Windows

The SSM, since claiming to be system Safety monitor, should look at the SSM's specialty.

　　 Small Tips

　　 Let it start with Windows

Only the SSM can be activated at any time to monitor and defend the security of the system, so you want to set it to automatically start with Windows. Right-click the system tray software icon, select Preferences (parameter options), open the System Safety monitor-preferences window, click the Options tab. Confirm the selected general on the left, and then modify the right SSM startup mode (SSM) entry to start automatically as Aservice (as a service load) (see Figure 1).
　　 1. Open the SSM monitoring

The first step: Open the System Safety monitor-preferences window and click on the plugins (plugin) tab.

Step Two: Verify that the Enable Plugins (activation plug-in) entry has been checked, when the SSM can be used on Start menu (the Startup group on the start), services (loaded system services), Registry (Registry startup key), INI Files ( System INI file) and IExplore (IE) implement omni-directional monitoring (see Figure 2).
　　 2. Any additional monitoring items

The better thing about WINPATROL,SSM than what we've previously strongly recommended is that you can customize it, such as having the SSM monitor key changes to the "default" key in a registry [Hkey_classes_root\.abs], which you can add by hand.

The first step: Also under the Plugins tab, select Registry→configuration on the right side of the window.

Step Two: Right-click in the right pane, select Add New Item, enter HKEY_CLASSES_ROOT\.ABR in Path of pop-up window, enter "Default" in Name, enter "Default" in value, That is Photoshop.brushesfile, select 0 string under Value type.

The third step: After the setting is complete, when the key value is modified, the SSM will pop up the warning window (see Figure 3), press F2 key to prevent modification, press F3 key agree to modify.


Changes to a key value have been made so that the network virus can be easily resolved. I have used "security thieves" and other viruses to the SSM test, it can be easily addressed.

　　 Powerful Program Monitoring

Another powerful and useful monitoring of the SSM is application monitoring, which monitors every move of the program's opening process. And no matter how the program is opened, whether the user double-clicks directly on, or by other programs to open indirectly, or even because of a system vulnerability to be quietly executed by the error program (including viruses), regardless of the format of the program (Exe/dll, etc.), the SSM as long as the discovery of a new program is opened, will report to the user and ultimately the user determines whether the program is running.

　　 1. The actual combat SSM program monitoring

Now a lot of software installation programs, in the user to install the software, but also "default" to install some users do not need things (ads/plug-ins, etc.). Once you have installed the software, you will "plug the rubbish" into your hard drive without knowing it. At this point, the SSM can play a blocking role.

SSM default is not open program monitoring, users need to open their own, the method is very simple, as long as the right click on the system tray software icon, select Watch app activity (monitoring application) can be.

The author then runs the software containing the advertising plug-ins, such as "QQ automatic chat", in addition to the original program, the SSM prompts a new program to run (see Figure 4).

Here, the SSM program monitoring provides five different options for opening the program. The corresponding shortcut keys are F1 to F5, each of which has a meaning: F1 is "always allowed", F2 is "always blocked", F3 is "only allow system administrators, not other users", F4 is "only allowed this time" (the default option), and F5 is "only block this time", and here naturally to press F2 or F5.

Then continue to install, but unexpectedly again appeared the advertisement plug-in, naturally uses the same method to intercept it.

If it is a virus, the SSM is also unambiguous: I also like to download e-books free to see. But what if the downloaded ebook is loaded with a virus and the antivirus software is not detected?

It doesn't matter, there are SSM. Some time ago I downloaded from the network EXE format of e-books, open the ebook, the SSM program monitoring very natural request user choice, because it is to read, so is to choose F1, F3 or F4 passed, but surprisingly, and pop-up SSM warning, there are procedures to run, the book opened, Nature is a problem, For better or worse, press F2 or F5 to block the run.

After analysis found that the original use of the ebook shell processing, and binding the virus, although bypassing the virus fire, but the SSM will never let you down.

　　 Small Tips

Click on the scan item in the interface shown in Figure 4 to activate antivirus software to disinfect the program. But note that you need to first set up in the SSM anti-virus software directory, otherwise, here will show locate. Antivirus software settings are as follows: Open the System Safety monitor-preferences window, click Options, click on the left side of the window misc, and then in the window to the right antivirus set up (see Figure 5).
　

　　 2. Add Modify Application Rule

If you want to set different rules for different programs, you can set them in the SSM in detail.

First step: Open the System Safety monitor-preferences window and click on the application rules (Application Rule) tab.

Step two: All running programs are listed here, and then modifying rule (rules) by default allowed (F3) to blocked (F2) prevents the program from running.

Step three: Double-click the program to open the Advanced Rules Settings window for the program to further set whether the program can be invoked by other software or invoke other software (see Figure 6).
　　 Small Tips

　　 The SSM is outside the monitor .

★ "Blacklist" function: If you do not want others to use your MSN Messenger and Outlook Express, you can open the System Safety monitor-preferences window, click on the Windows tab filters, add MSN Messenger (without quotes) and inbox-Outlook Express (without quotes), and then right click on the system Tray SSM icon to check the filter Windows Captions (window header filter) item.

Such two programs disappear immediately as soon as they are opened. You can fill in the other program window title bar according to your own needs.

★ Export Profile: Click Save Current Config file under the Service tab in the System Safety monitor-preferences window to back up your profile to use when upgrading or reloading