January 26 2001 Version 1.7.1 http://kormushkin.narod.ru/ssm.zip

Installation

Create a folder for the program, for example C:\Program Files\System Safety Monitor. Copy ssm.zip to this folder and unzip it. Double–clicking on SysSafe.exe starts the program.

Basic Functions

System Safety Monitor (SSM) guards against any changes that might be made to the main program registry keys. You can configure the program to act like a program firewall, allowing you to control which programs and processes may run on your system, and protecting you from potential worm and trojan virus attacks.

The following keys are "guarded" by default:

Autorun key
Windows automatically executes all programs located in this key. These programs can configure your system when they are started automatically every time your computer boots up. Although these keys are used to execute your regular programs, they may also be accessed by worms and trojans.
 
.exe-File open parameters key
A trojan or virus will often change this key allowing it to intercept program executions.

Options

When you start SSM, its icon should be visible in the system tray. To configure SSM, click your left mouse button twice on this icon, or right–click once and select Options.

The following explains each tab:

Under the Common tab is the list of programs which have been set to start automatically when you start up your computer. Here you can configure these autorun keys to prevent any unnecessary programs from being loaded at startup. Press Enter on your keyboard to run a selected item, Delete to remove it, or Insert to add a new program on startup.

Under the Applications tab is a list of the programs which are currently running. You can "kill" any process by selecting it and pressing the Delete key on your keyboard. If you check the "Watch App Activity" box, before any program starts you will be asked whether you want to add it to your Trusted program list, your Black–List of forbidden programs, or allow it to run this once only. (See Trusted Applications below.)

Under the Registry keys tab is a list of the registry keys that the program is monitoring. To change the status of a key, first uncheck the "Enable engine" box, and then type in your preference. Check the "Enable engine" box when you have made your changes. To restore the original settings press the "Defaults" button.

Under Trusted Applications you can manually add or remove a program from either the Black–Listed or Trusted categories. Highlight the item you want to change and right–click your mouse on it to cut, copy, paste or delete. If you have enabled "Watch App Activity" under Applications, your preferences are added to these lists automatically.

The Information tab contains information on the current program and links to related websites.

Select the Uninstall tab and click on the hyperlink to remove SSM from your system.


When you have killed unnecessary tasks, check the "Enable App Watch" box. You will then have to answer a question "Yes" or "No" every time when a new (i.e. not on the Trusted List) application is started. SSM will ask you to add it to the Trusted or the Black List; or allow it to be executed just that time.

It's a good idea to check your autorun keys and prevent all unnecessary programs from being loaded at startup.

If the "Alert" window pops up, this means that a guarded key has changed. If the item is highlighted in red the action was blocked. If the item is highlighted in green the action was permitted. You can block or unblock a program by pressing F2 or F3 on your keyboard. The Alert window can be accessed by selecting "Show Log" from the tray icon pop–up menu or by clicking the "Show Log" button in Options|Common.

If your encounter a problem with SSM

Select one of the following options . . .


Thanks goes to:
Mikle
Chris Burke


About
© Max Computing, 2002. http://kormushkin.narod.ru/