Firewall & NOD32

psp83 · May 19, 2010, 16:13:50

Hi all.

I'm locking down my work computer using windows 7 firewall, I've enabled outbound blocking, so nothing connects to the internet now.

Theres 2 ways I can do this.

Set an outbound rule that allows "all programs" then set rules to block certain programs etc.

Or

Block all outbound connections and allow certain programs.

What do you think is best?

Also if I block all outbound, what NOD32 files need internet access?

Rik · May 19, 2010, 16:20:14

I guess I'd block and allow, Paul, as being the safer approach. I'm not sure what NOD files need access, presumably the exe and the signatures...

psp83 · May 19, 2010, 16:30:57

I justed went through the whole nod32 folder and allowed all .exe files.. It seems to be working ok.

Niall · May 19, 2010, 18:07:30

Quote from: Rik on May 19, 2010, 16:20:14
I guess I'd block and allow, Paul, as being the safer approach. I'm not sure what NOD files need access, presumably the exe and the signatures...

That's what I do too. With notifications turned on, it's a simple case of checking what each program is. Make sure you don't accidentally block a vital process though or you'll have no internet access *cough*

Rik · May 19, 2010, 18:10:55

Been there, got the T shirt, Niall?

Niall · May 19, 2010, 20:39:30

Yeah

When I was using Kaspersky, I accidentally blocked a .dll that popped up when I was a bit tipsy and it couldn't tell me which I'd most recently blocked, so I had to remove all blocked things. It took sodding ages!

Rik · May 20, 2010, 10:09:51

The five minute job that takes two hours.

Simon · May 20, 2010, 10:29:17

Is there ever a five minute job on a computer?

Niall · May 20, 2010, 10:32:01

Yeah, registry cleaning

I just tried the comodo registry cleaner and it found 700+ things to clean that Ccleaner didn't shift.

Rik · May 20, 2010, 10:35:35

Now you just have to find out what is no longer working.

Niall · May 20, 2010, 10:36:35

Christ, don't say that

Rik · May 20, 2010, 10:46:22

I find registry cleaners usually knacker HP printer installations.

Gary · May 20, 2010, 10:51:20

Registry cleaning has been proven to not speed computers up, tbh you only need to do it if you have issues, then its safer by hand I think. No two registry cleaners will find the same issues I always think they are best avoided, saying that I don't have a registry

Rik · May 20, 2010, 10:55:12

But you did for many years...

Niall · May 20, 2010, 11:00:18

Quote from: Gary on May 20, 2010, 10:51:20
Registry cleaning has been proven to not speed computers up, tbh you only need to do it if you have issues, then its safer by hand I think. No two registry cleaners will find the same issues I always think they are best avoided, saying that I don't have a registry

I only clean it up so it's easier to see what's in there when I do have to go. I was thinking the other day, after uninstalling something, that the registry information would probably still be there for a lot of stuff I haven't had on the system for a long time. I was right too

Gary · May 20, 2010, 13:36:02

Quote from: Rik on May 20, 2010, 10:55:12
But you did for many years...

Yes and avoided registry cleaners, if I had issues I was competent enough thankfully to edit the registry myself, took some learning though I have to say. After a few cleaners cleaned things I needed I decided to learn. I always think that if MS dont include one, there is a good reason.

Niall · May 20, 2010, 13:38:49

This is how I normally run my system. With Ccleaner though, if you uninstall through that, there's nothing left behind anyway. If there are some folders or registry entries left behind, it's easy enough to remove. In this case though, I'd kind of forgotten for about a year

Gary · May 20, 2010, 13:38:58

Quote from: Niall on May 20, 2010, 11:00:18
I only clean it up so it's easier to see what's in there when I do have to go. I was thinking the other day, after uninstalling something, that the registry information would probably still be there for a lot of stuff I haven't had on the system for a long time. I was right too

True but cleaners tend to get stuff you do need sometimes, having old registry entries around does not matter unless its from a AV, then hopefully they have a clean uninstall routine or a cleaner to remove the remnants after. I am sure software makers could make better uninstallers if they bothered, Logitech are one of the worst along with realplayer (shudders) which I do not miss.

Niall · May 20, 2010, 13:41:40

You know, I've never had any problems at all with registry cleaners. The only people I know that have had issues, have had illegal software installed. Absolutely everything on my system is legit, so it's never caused a problem. I create a backup before cleaning anyway, so it's no big issue.

What's the worst that can happen though? It all goes pear shaped and you have to format, if a repair doesn't fix it. In 12 years of doing this, I've never once had a problem.

Rik · May 20, 2010, 14:09:25

As I said, Niall, I find they tend to foul up HP printer drivers, because they remove entries which the software expects, but which you do not use. The ones I've tried also tended to uninstall parts of WordPerfect, even though the program was in use. Manual editing seemed easier to me.

Niall · May 20, 2010, 14:49:11

Yeah, if you keep on top of things, you shouldn't need one

I did notice this one removed loads of Epson entries, and as I've still got an Epson printer, and have only ever had the one printer if anything will go wrong it'll be with that

Rik · May 20, 2010, 15:09:54

Niall · May 20, 2010, 22:22:37

I've discovered that Mass Effect 2 in Steam, keeps some info in the registry

Passwords related to the logon system for extra content in the game. Glad I remembered the password for that game