Play the SSM: A practical tutorial on Russian System Monitor

Source: Internet
Author: User
Keywords System Safety Monitor
Many readers are interested in system Safety Monitor (SSM). It is a Russian-produced system monitoring software, through monitoring system-specific files (such as registry, etc.) and application procedures to protect the system security purposes. More powerful than Winpatrol in some functions. [Go to download page] install and start (may need to manually go to the installation directory to run SysSafe.exe) SSM, click on the Pop-up logo window in the close of this Windows (closed window) entry, and turn off the window. Now that the SSM has been started and monitored, we can see the software icon in the system tray.  SSM personal protection of your WINDOWSSSM since claiming to be system Safety monitor (Systems Security Monitor), you should look at the SSM's unique skills. Tips Let it start with Windows only the SSM can be activated to monitor and defend system security, so set it to automatically start with Windows. Right-click the system tray software icon, select Preferences (Parameter options), open the System Safety monitor-preferences window, click the Options tab. Confirm the selected general on the left, and then modify the right SSM startup mode (SSM) entry to start automatically as Aservice (as a service load) (see Figure 1). 498) this.width=498 ' OnMouseWheel = ' javascript:return big (This) ' height=283 alt= ' "src="/files/uploadimg/20070210/ 1539400.jpg "width=447>1. Turn on the SSM Monitor first step: Open the System Safety monitor-preferences window and click on the plugins (plugin) tab. Step Two: Verify that the Enable Plugins (activation plug-in) entry has been checked, when the SSM can be used on Start menu (the Startup group on the start), services (loaded system services), Registry (Registry startup key), INI Files ( System INI file) and iexplore (IE) to implement a full range of monitoring (see Figure 2). 498) this.width=498 ' OnMouseWheel = ' javascript:return big (This) ' height=283 alt="" "Src="/files/uploadimg/20070210/1539401.jpg "width=447>2. Adding monitoring items any more than what we have previously strongly recommended for WINPATROL,SSM is that it can be" customized, " For example, if you want the SSM to monitor the key changes in the "default" key under [Hkey_classes_root\.abs] in a registry, you can add them manually. The first step: Also under the Plugins tab, select Registry→configuration on the right side of the window. Step Two: Right click in the right pane, select Add New Item, enter HKEY_CLASSES_ROOT\.ABR in Path of pop-up window, enter "Default" in Name, enter "Default" in value, That is Photoshop.brushesfile, select 0 string under Value type. The third step: After the setting is complete, when the key value is modified, the SSM will pop up the warning window (see Figure 3), press F2 key to prevent modification, press F3 key agree to modify. 498) this.width=498 ' OnMouseWheel = ' javascript:return big (This) ' src= '/files/uploadimg/20070210/1539402.jpg ' > Changes to a key value have been made so that the network virus can be easily resolved. I have used "security thieves" and other viruses to the SSM test, it can be easily addressed. Powerful program monitoring SSM another powerful and useful monitoring is application monitoring, which monitors every move of the program's opening process. And no matter how the program is opened, whether the user double-clicks directly on, or by other programs to open indirectly, or even because of a system vulnerability to be quietly executed by the error program (including viruses), regardless of the format of the program (Exe/dll, etc.), the SSM as long as the discovery of a new program is opened,  will report to the user and ultimately the user determines whether the program is running. 1. The actual combat SSM program monitoring is now a lot of software installation program, in the user to install the software, but also "default" to install some users do not need things (ads/plug-ins, etc.). Once you have installed the software, you will "plug the rubbish" into your hard drive without knowing it. At this point, the SSM can play a blocking role. SSM default is not open program monitoring, users need to open, the method is very simple, as long as the right click on the system tray software icon, select Watch app activity (monitoring application) can be. The author then runs the software containing the advertising plug-ins, such as "QQ automatic chat", in addition to the original program installation, the SSM hint and a new pathOrder to run (see Figure 4). 498) this.width=498 ' OnMouseWheel = ' javascript:return big (This) ' src= '/files/uploadimg/20070210/1539403.jpg ' > Here, the SSM program monitoring provides five different options for opening the program. The corresponding shortcut keys are F1 to F5, each of which has a meaning: F1 is "always allowed", F2 is "always blocked", F3 is "only allow system administrators, not other users", F4 is "only allowed this time" (the default option), and F5 is "only block this time", and here naturally to press F2 or F5. Then continue to install, but unexpectedly again appeared the advertisement plug-in, naturally uses the same method to intercept it. If it is a virus, the SSM is also unambiguous: I also like to download e-books free to see. But what if the downloaded ebook is loaded with a virus and the antivirus software is not detected? It doesn't matter, there are SSM. Some time ago I downloaded from the network EXE format ebook, open the ebook, the SSM program monitoring very natural request user choice, because it is to read, so is to choose F1, F3 or F4 passed, but surprisingly, and pop-up SSM warning, there are procedures to run, the book opened, Nature is a problem, For better or worse, press F2 or F5 to block the run. After analysis found that the original use of the ebook shell processing, and binding the virus, although bypassing the virus fire, but the SSM will never let you down. Small hint in the interface shown in Figure 4, click Scan Item, can start antivirus software to antivirus program. But note that you need to first set up in the SSM anti-virus software directory, otherwise, here will show locate. Antivirus software settings are as follows: Open the System Safety monitor-preferences window, click Options, click on the left side of the window misc, and then in the window to the right antivirus set up (see Figure 5). 498) this.width=498 ' OnMouseWheel = ' javascript:return big (This) ' src= '/files/uploadimg/20070210/1539404.jpg ' >2. Add Modify application rules if you want to set different rules for different programs, you can set them in the SSM in detail. First step: Open the System Safety monitor-preferences window and click on the Creator Rules (Application rule) tab. Step Two: Here is a list of all the running programs, and then the rule (rules) default AlloweD (F3) modified to blocked (F2) prevents the program from running. Step three: Double-click the program to open the Advanced Rules Settings window for the program to further set whether the program can be invoked by other software or invoke other software (see Figure 6).  498) this.width=498 ' OnMouseWheel = ' javascript:return big (This) ' src= '/files/uploadimg/20070210/1539405.jpg ' > Small hint SSM outside the monitor ★ "Blacklist" function: If you do not want others to use your MSN Messenger and Outlook Express, you can open the System Safety monitor-preferences window, Click the Filters item under Windows tab to add "MSN messenger" (without quotes) and "inbox-Outlook Express" (without quotes), and then right click on the system Tray SSM icon to check the filter windows Captions (Window caption filter) item. Such two programs disappear immediately as soon as they are opened. You can fill in the other program window title bar according to your own needs. ★ Export Profile: Click Save Current Config file under the Service tab in the System Safety monitor-preferences window to back up your profile for use when upgrading or reloading. Responsible Editor Zhao Zhaoyi#51cto.com TEL: (010) 68476636-8001 to force (0 Votes) Tempted (0 Votes) nonsense (0 Votes) Professional (0 Votes) The title party (0 Votes) passed (0 Votes) The original: Play the SSM: Russian System Monitor practical course Back to column Recycle Bin Home
Related Article

Contact Us

The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion; products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the content of the page makes you feel confusing, please write us an email, we will handle the problem within 5 days after receiving your email.

If you find any instances of plagiarism from the community, please send an email to: info-contact@alibabacloud.com and provide relevant evidence. A staff member will contact you within 5 working days.

A Free Trial That Lets You Build Big!

Start building with 50+ products and up to 12 months usage for Elastic Compute Service

  • Sales Support

    1 on 1 presale consultation

  • After-Sales Support

    24/7 Technical Support 6 Free Tickets per Quarter Faster Response

  • Alibaba Cloud offers highly flexible support services tailored to meet your exact needs.