PepiMK Software File Protector

[PepiMK]

As an answer to the RadLight Media Player threat, PepiMK Software has written a small program to protect files against deletion and changes.

Download (200kb): http://patrick.kolla.de/software/files/fileprotector.zip

Unzip this file until any directory, and run the included program. You'll see a new traybar icon.
Right-click on the icon for a popup menu.
Select 'Setup' and a dialog will appear.
Add files to be protected from the explorer using drag'n'drop.
Add all Spybot-S&D and/or Ad-Aware files using the menu.
Toggle checkbox if you want it to be run on every system startup.
These files are now protected from deletion or changes.
Left-click on the traybar icon to pause or resume protection (for example if you want to update the include files / reflist).

You may notice that the dialog title and the title in the taskbar are looking funny - many numbers in it. This it to prevent applications like Radlight Media Player to detect and terminate File Protector.

This is version 0.0.1. There may still be some bugs, but my first tests on 2k & 98 showed that Ad-Aware files weren't deleted any more (neither program files nor desktop icons/startmenu items) upon installing the RadLight Media Player.

[Checkout]

Nice one, PepiMK! *Maybe you and Javacool should strike up a partnership!

[WE Sim]

Hi PepiMK!

I believe there're ways to get around file deletion and changes. Would it be included into your next release of SpyBotS&D or if not why not add it as an additional feature instead of a separate program?

Thanks

[PepiMK]

Right now the protection sheme is quite simple - but effective until the program itself is found and killed (because I basically tell Windows to protect the file ;) ). I still need to change it into a service and/or vxd to make it safer.

Of course I will put something like this into the next Spybot-S&D version (or the planed Resident version).
This is just a 1.5 hours quick tool for the current situation.

[WE Sim]

Hi PepiMK!

Thanks for the reply

[snowman]

* * * * Pepi


* * * *thank you most sincerely for rushing to our aid/defense .......both you and Javacool are exceptional.


* * * may I ask a question please......my os is winME..which has file protection......although I have dl'ed your tool.....do I actually need it??? * or, does the built in file protection in winME prevent an exploit such as radlight...? * *

* * * *others here at the BB also use winME an may be interested.


* * * * thank you for the time you gave to providing us with your file protection program.


* * * * * * * * * * * * snowman

* * *

[javacool]

-{ Quote: "

* * * * Pepi


* * * *thank you most sincerely for rushing to our aid/defense .......both you and Javacool are exceptional.


* * * may I ask a question please......my os is winME..which has file protection......although I have dl'ed your tool.....do I actually need it??? * or, does the built in file protection in winME prevent an exploit such as radlight...? * *

* * * *others here at the BB also use winME an may be interested.


* * * * thank you for the time you gave to providing us with your file protection program.


* * * * * * * * * * * * snowman

* * *

" }-

Just to answer your one question - Win ME's built in file-protection only works on important (deemed by MS) Windows system files. Thus, Ad-Aware is not covered (nor is any other program.)

[snowman]

* * * * * * *Javacool

* * * * * * *thank you for the every so quick response. *this was the way I thought winME file protection worked but wasn't absolutely sure......an when in doubt....ask those who know.....an I am always in doubt. *LOL

* * * * * Thankya Java......I sure hope both you and Pepi realize the great service you are sharing with so many....an that its appreciated.


* * * * * * * * * * * * * * Snowman

[spy1]

"Add files to be protected from the explorer using drag'n'drop."

What?
Where?
HOW?

lol! Pete

[PepiMK]

Haven't had any problems with that...

... but download it again, it's now a 0.0.3 with a menu item 'Add more files...' that will show a dialog box, just in case drag'n'drop shouldn't work.