New Antiexecutable: NoVirusThanks EXE Radar Pro

@ novirusthanks

BTW, I discovered something weird. Even though ERP's drivers are clearly visible on disk, they can not be spotted by a tool like System Explorer, I have never seen anything like this with a security tool. Can you give a bit more info about this, is this a protection method against attacks on ERP?

 

hi guys, i was absent quite long (some games are very addictive ^^) ; can someone send me a link in this thread for the latest beta version (unless one will be released soon). thanks

 

Latest beta.
https://www.wilderssecurity.com/thre...ks-exe-radar-pro.300552/page-154#post-2401445

 

thank you very much

 

I uploaded a new beta build of ERP that has a lot of enhancements, a short summary:

+ Added more safe objects in the Recommended Configuration
+ Added option to change the program header background color
+ Added option to minimize the application when started manually
+ Added option to save only events of blocked applications
+ Improved the save and load of the whitelist/blacklist
+ Improved the detection of parent process path and PID
+ Improved the main GUI and other application windows
+ Improved the loading of kernel-mode driver
+ Improved the installer and uninstaller script
+ Improved the program startup method via service
+ Save the PC user name in the events log file
+ Protect the program from being terminated (support Vista+ only)
+ Enable DEP and ASLR in all executable files of the program
+ Minor fixes and optimizations

A lot of bugs fixed, improvements and more pre-configured objects for Windows 8/10 TP.

Some of the features requested by @Defenestration and by other users have been added too.

The "Install Mode" is not yet active, I need to run some more tests on the next week.

You can download this beta build from this link (please do not copy this download link or file elsewhere):
http://downloads.novirusthanks.org/files/EXERadar_Pro_x86_x64_v3.1_14012015_BUILD1.exe

To update ERP please follow these steps:

1) Close ERP from Trayicon->Exit
2) Uninstall ERP
3) Reboot the PC (very important)
4) Install ERP

@Askanag @Nebulus @Rasheed187 @bberkey1

Let me know if the bug you reported about the whitelisting issues on Win 8 or about the "Error loading driver" is gone now.

@natZONE

This new build has improved self-defense, now Process Explorer can't kill it.

Some images of ERP in action:
http://postimg.org/image/v62n2e42h/
http://postimg.org/image/4iktxqnfd/
http://postimg.org/image/fyah8oy27/

On the next version (probably v3.2) ERP will switch to SHA-256 file hash instead of MD5, because it is more secure.

For this reason, ERP will not support anymore the auto-updater, but it will need to be updated manually (it will require specific actions).

Spoiler:

ERP will be released as freeware officially in the stable version and will live with donations.

Thanks to everyone that has supported ERP till now by buying one or more licenses

 

So far it's looking good. But that was with the older build release, I still need to install the new one.

Cool, perhaps you can also answer post #4028, because I don't get it.

https://www.wilderssecurity.com/thre...ks-exe-radar-pro.300552/page-162#post-2447473

I will either buy a licence or donate for sure. Is there any reason why you decided this?

 

@Rasheed187

It is not a protection, the driver files (digitally signed) should be located at:
C:\WINDOWS\system32\drivers\nvterp.sys
C:\WINDOWS\system32\drivers\nvterpprotect.sys

I have not tried System Explorer, but with Windows Explorer I can see the files.

See the image: http://postimg.org/image/c9oqnkwzz/

 

Does this mean that the lifetime license that I purchased is no longer useful?

 

@Charyb

It is needed to use ERP till version 3.0 (as it is needed a license after the trial period).

From the next version, ERP will be free to use, it will support donations (that are optional, if users like ERP they can donate, the funds will be used to support the development) and you will be able to use ERP in any number of computers, without limitations.

 

Yes correct, but System Explorer and ServiWin can not find your drivers. It's very weird, perhaps others can check it. I suppose ERP can not function without its drivers running?

http://systemexplorer.net/
http://www.nirsoft.net/utils/serviwin.html

 

Will there be ads? The reason I pay for software is to receive extra features, support, and to not see ads.

 

This problem still exists.

https://www.wilderssecurity.com/thre...ks-exe-radar-pro.300552/page-157#post-2411898

This was the solution:
https://www.wilderssecurity.com/thre...ks-exe-radar-pro.300552/page-157#post-2412092

 

@Charyb

There will be no ads, probably there will be a "Donors" version (that will be sent to all users that purchased a license till now) that may have something different from free version (yet to decide, really). And also as you bought a license you are of course entitled for support, as all other actual clients.

About your issue, I think you need to add tot he whitelist a .CPL file that is responsible for the screensaver, if you start ERP in Learning Mode (permanently) and reboot the PC, what happens ?

@Rasheed187

Strange, I will download that programs and see why they can't find the files.

The drivers files are needed for the correct functioning of ERP.

 

@Rasheed187

I used NVT Kernel Mode Drivers Manager ( http://www.novirusthanks.org/products/kernel-mode-drivers-manager/ ) and it could list the files:
http://postimg.org/image/rrhr7lqr7/bbec1b71/

 

It works in learning mode but if a person changes it to notify before the screensaver runs, they risk getting locked out without knowing why.

This is what I came up with. https://www.wilderssecurity.com/thre...ks-exe-radar-pro.300552/page-157#post-2412092

 

Glad to see one of the best security software programs still going strong. I hope all is well with the company and that offering the donations route offers this software to all those who don't see the value in "buying real software" and will in turn at least chip in. Anyway, thank you for all you hard work and dedication over the years!

 

@bberkey1

Thanks for your words

@Charyb

Please follow these steps:

1) Set ERP in "Learning mode permanently"
2) Reboot the PC
3) After the screensaver has been displayed, open ERP -> Events tab -> right-mouse button -> Save events to log file
4) Send me the log file so I can analyze it and see if there is a particular command-line that needs wildcards

 

Strange Question, but whats with having to fill out all the ordering information to make a donation? Seems odd

 

Freware version, that is huge !

You made my day !

 

@novirusthanks

Great news!

 

@bberkey1

We use http://fastspring.com/ to handle donations, we have to do this because in Italy we should make an invoice for each PayPal donation (that would require a lot of work and we would have to ask the details to each donor anyway), so using FastSpring it is easier for us, they generate the invoice to all donors immediately and they support a wide range of payment processors (not just PayPal), plus if you are a company you can receive the invoice for the donation you made.

 

Hello,

New version running good here except for errors I get when trying to "Export Application Settings + Blacklist\Whitelists\etc...". I go to "File > Export\Import\Reset..." to open the "Export\Import" window. I leave the "Export Application Settings + Blacklist\Whitelists\etc..." selected and click "Export". I then get the following error:

I click on "OK" and then the "Save file as..." dialog window appears. I then click "Save" and then get the following error:

Clicking "Retry" does not work and I have to click "Ignore" to continue. It then appears to save the settings. I have noticed that the resulting "*.erp" file is about 20 % smaller than the exact same exported file in the previous version of NVTERP. I have not tried to do an "Import" as I have a lot of saved rules and am afraid of losing them if the exported file happens to be corrupt. I am on a Windows 8.1.1 Pro 64 bit system. Is anyone else seeing this?