RansomOff

Discussion in 'other anti-malware software' started by co22, Mar 28, 2017.

  1. mWave

    mWave Guest

    I agree this project looks really promising, glad there are good projects like these popping up these days :)
     
  2. guest

    guest Guest

    New beta-Release:
    RansomOff v5.2017.131.8772 (11 May 2017)
    New Feature: Folder Protection (deny, deceive, hide)
     
  3. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    Just wanted to note that we posted version 5.2017.131.8772 (Beta).

    We also just want to thank everyone for their continued support. RansomOff is becoming more stable and feature rich with every release but if there is something you feel it is lacking, please let us know.
     
  4. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    Beat us to it!
     
  5. paulderdash

    paulderdash Registered Member

    Joined:
    Dec 27, 2013
    Posts:
    4,639
    Location:
    Under a bushel ...
    +1 :thumb:

    Edit: Will replicate my Secure Folders settings in RO, switch off SF, and give it a whirl. A neat addition to RO.

    Btw would it not be an idea to be able to toggle protection, as one can for SF?
     
    Last edited: May 12, 2017
  6. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    The toggling now is for all folder protections at once from the Protection Status window. Are you saying having a per folder toggle?
     
  7. NiteRanger

    NiteRanger Registered Member

    Joined:
    Nov 15, 2016
    Posts:
    651
    Location:
    Far East
    Hi

    Does RansomOff delete the ransomware besides just Deny/Allow? How about identifying the ransomware and then prompt the user for deletion?

    I think AppCheck Pro and Temasoft Ranstop don't have these features too

    Thanks
     
  8. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    When you click 'Deny' RansomOff will perform an automatic cleanup which includes deleting the ransomware file itself along with all files and registry keys created by that process.

    Outside of malware testers, most would probably want the ransomware to be deleted without delay. However, RansomOff does have an undelete feature where you can restore files it has deleted.
     
  9. NiteRanger

    NiteRanger Registered Member

    Joined:
    Nov 15, 2016
    Posts:
    651
    Location:
    Far East
    That's great. Thanks
     
  10. paulderdash

    paulderdash Registered Member

    Joined:
    Dec 27, 2013
    Posts:
    4,639
    Location:
    Under a bushel ...
    Ah found the toggle now :rolleyes:. That's exactly what I wanted :).
     
  11. paulderdash

    paulderdash Registered Member

    Joined:
    Dec 27, 2013
    Posts:
    4,639
    Location:
    Under a bushel ...
    Done.

    I haven't tested the protection yet, but in terms of configuration, it is an improvement over SF in that one can set trusted apps per folder.

    However, one can't secure at the drive / root level, like SF. There may be a technical reason for this.
     
  12. Djigi

    Djigi Registered Member

    Joined:
    Aug 13, 2012
    Posts:
    554
    Location:
    Croatia
    I added one folder with documets to Folder protection and set to Read Only.
    When try to rename files no alert, try to delete files no problem...where is the protection?

    8.png c.png

    With program Secure Folders I can't do anything with protected folders.

    a.png b.png
     
    Last edited: May 13, 2017
  13. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
  14. guest

    guest Guest

    Maybe it is useful to display it in the window of RansomOff.
    Like: "This protection has no effect without an exempted process" / "You have to add at least one exempted process" or a similar note.
     
  15. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    Good call. We'll add something so it is more clear.
     
  16. Djigi

    Djigi Registered Member

    Joined:
    Aug 13, 2012
    Posts:
    554
    Location:
    Croatia
    Ok, do that and now is working ok
    5.png

    Here is the test with Ransim (ransomware simulator)
    6.png

    One question, I didn't see any pop-up of blocked stuff, settings are like this:
    1.png
     
  17. clubhouse1

    clubhouse1 Registered Member

    Joined:
    Sep 26, 2013
    Posts:
    1,124
    Location:
    UK
    I think HeiDef should ask for developer status here on Wilders.
     
  18. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,546
    Location:
    The Netherlands
    Wow, I haven't tested it yet, but it's looking good, I really like the GUI. The documentation also looks nice. :thumb:
     
  19. Buddel

    Buddel Registered Member

    Joined:
    Apr 28, 2015
    Posts:
    1,920
    RansomOff looks very promising indeed. I haven't installed it yet because I still don't know if it is compatible with Kaspersky Internet Security, but I'll definitely keep on following this thread. Thanks very much for all you do here, @HeiDef . It's very much appreciated.
     
  20. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    Not sure how to do that. Someone we need to PM?
     
  21. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    Thanks. Glad you like it and hopefully the documentation is helpful.
     
  22. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    And we appreciate the feedback from the community. Only helps to make RansomOff better.

    We've tested RansomOff with KIS a few weeks ago and there were some negative interactions but the latest version seems to play pretty nicely with existing security software especially if you exempt it. We'll do another bit of testing on the latest version just to see how they work together and let you know.
     
  23. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    Glad it's working for you. We designed it to require at least one process exempted per folder kind of as a safety switch to make sure you can always access your files. If that's not necessary, it's not an issue to remove that requirement. Just would like to hear from the group on their thoughts.

    Not sure exactly why you didn't see any alerts but it looks like all the RanSim attempts were blocked. We'll run it to see what's going.
     
  24. NiteRanger

    NiteRanger Registered Member

    Joined:
    Nov 15, 2016
    Posts:
    651
    Location:
    Far East
    Hi

    Can you let us know when you intend to release its 1st stable version? You can't forever beta-test the program.

    Thanks
     
  25. JRViejo

    JRViejo Super Moderator

    Joined:
    Jul 9, 2008
    Posts:
    97,440
    Location:
    U.S.A.
    HeiDef, as a result of your participation, and communication with our forum members, you have earned Developer status. Congratulations!
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.