菜鸟问高手的问题！！！

liuxudan

这两种模式都是什么意思？？？

夏春秋

切换到前一模式
切换到安装模式

偶机器上没有装V3，每种模式的意义可以去帮助文件看。
另外Defense+有个滑块设置界面，右面是对每个模式的解释，最上面的paranoid模式(偏执狂模式，提示一切)最为严厉，从上至下.....以此类推

adrenaline

Installation Mode:
Den engelske version:
1 - Installation Mode :

In thiss version of Defense+, there is a builtin security policy called "Windows Installer Application". This policy, when applied, gives a process maximum accesss rights. When the system switches to the installation mode, the *child* processes i.e. the process which has "Windows Installer Application" access right will have the same rights as its parent.

For example :

xyzsetup.exe is treated as "Windows Installer Application".

xyzsetup.exe will be able to modify everything. Later xyzsetup.exe tries to run "aftersetupconfig.exe" file. If you switch to installation mode, aftersetupconfig.exe will also have the same access rights as xyzsetup.exe.

This is more useful for windows updates. svchost.exe is the process responsible for downloading and installing windows updates in Windows XP.

1- svchost.exe will connect to the MS site
2 - svchost.exe downloads ie7setup.exe
3- svchost.exe runs ie7setup.exe
4- ie7setup.exe install IE7.

If you dont switch to installation mode, after step4, CFP is going to show its usual popups for the ie7setup.exe because it has no rights.

If you switch to Installation mode, it will be installed silently. Upto 3 chlid processes..

CFP will remind you every 5 minutes to switch back from the installation mode because of the implicated security risks.

For example, in certain cases, iexplore.exe can be run from svchost.exe. If the system is in installation mode, iexplore.exe can be treated as installer too! Thats why CFP will always bug you to switch from this mode asap.

liuxudan

先谢谢了  意思是说，第二个图是 切换到安装模式