AntiHook

[Frank Bohan]

<quote> AntiHook® - The ultimate solution for protection against Malicious
Software </quote>

I've not tried this one, but it seems to be similar to Prevx. Has anyone
done a comparison?

Main Page: http://www.infoprocess.com.au/antihook.php
PDF Flyer: http://www.infoprocess.com.au/documents/AntiHook25_Flyer.pdf
There is some discussion of AntiHook at:
http://www.wilderssecurity.com/showthread.php?t=73292&page=1&pp=25

===

Frank Bohan
¶ Avoid cliches like the plague; they're a dime a dozen.

 

[aarontay]

<quote> AntiHook® - The ultimate solution for protection against Malicious
Software </quote>

I've not tried this one, but it seems to be similar to Prevx. Has anyone
done a comparison?

Main Page: http://www.infoprocess.com.au/antihook.php
PDF Flyer: http://www.infoprocess.com.au/documents/AntiHook25_Flyer.pdf
There is some discussion of AntiHook at:
http://www.wilderssecurity.com/showthread.php?t=73292&page=1&pp=25

Hmm didn't I answer this one before?

Essentially, Antihook is comparable to ProcessGuard
http://www.diamondcs.com.au/processguard/.

As such it's more related towards guarding processes that *are
running*, protecting such processes from being hijacked, via memory
injection, code injection, dll injection etc.

In addition, it keeps tracks of processes that are being launched, and
will prevent them from running unless you whitelist them. It however
doesn't monitor the registry for autostarts.

Prevx on the other hand, can be characterised as being more concerned
with controlling the files in binary form.

It watches attempts to modify files in critical areas, attempts to
change registry keys that are characteristically of malware (including
autostarts), Browser related files (BHO,ActiveX)etc.

The distinction isn't 100% strict, since antihook does concern itself
with md5 hashes of programs and related dll, while PrevX also prevents
programs from accessing physical memory.

It might arguably make sense to run both together since the overlap in
features isn't that great.

In terms of usage, PrevX Home is I think less challenging to use.
http://shield.prevx.com/faq.asp
Talking about PrevX, they are now beta testing a new prevx1 software,
which is very different from the current lines.