It's not only with Ransim, I also run some ransomware but didn't see any pop-up window? OS: Win 10x64
Once we are confident there are no more major stability or compatibility issues, we will drop the beta. We are gauging that based on our own testing as well as the feedback we've been receiving from this community and others. So no firm timeline but based on what we have been seeing hopefully not too much longer.
Once we are out of beta, we plan to license RansomOff as 'free for non-commercial use.' So free for personal use with no feature restrictions.
I'm not at home know until 22h CET, maybe then (if not forgot). But most staff are from Malware Hub at MalwareTips forum.
Thank you very much for your reply, @HeiDef . Looking forward to hearing from you. Can't wait to give RO a try.
Hey @Djigi Still not sure why you didn't receive any alerts but we just put a quick video together of RansomOff vs RanSim and it definitely does alert. https://youtu.be/0-IjrYNUvxk Do you have any other security software running?
Tnx, i don't have any other security software. I will try it again (I tested in VirtualBox). Should I leave all on default or should I change some settings (for notifications)?
The settings that are available for notifications won't make any difference in this case. Because RanSim does not run in session 0 that won't have any effect. So you can leave them as default or as you showed in the earlier picture.
Just try it now and results are the same - no pop-up window. How is it with other users? Does anyone else have a similar situation?
I change to new virtual machine and now is working OK. Tnx EDIT: How to add some staff to exclude list so RansomOff don't alert me about them? Found it... The time of Alert is not the same as it is on system tray.
I added all stuff but still get pop-up Alerts? Just see that I add x64 version and pop-up is for x32...will check that later...sorry
@Djigi Glad it's working for you now. Curious though what was going on with your other VM. The time stamp is UTC time which, if your profile location is correct (Croatia), is two hours behind your local time which is what that shows. The startup change notification is not currently tied in with the exemptions list so anything you add will not effect that. We will make that change though. The exemption list also does not check against registry keys.
With the last release, we made some changes to the update notifications so when the next version is released you should be more aware that it has updated.
Yes Croatia, in summer is 2h and in winter is 1h difference from CET. So, there is nothing (for now) i can do to stop that pop-up (this programs was just for test, on real PC there will be some GPU driver/software, mouse driver/software, sound driver/software...and it will show a lot Alerts)? Can you add Clean Up options for Alert Log, because after some time place will be pretty tight in there and very hard to find what is new detected? TNX
This sounds and looks and feels real nice..but does not ransomeware come through the e-mail program one uses? and happens when a link is clicked on?
Unfortunately no there is nothing that can stop the Windows start up change pop-up in the current release. Next release it will be taken care of. We'll also add a cleanup and filtering option for the alerts. Good suggestions.
Thanks @hayc59 Ransomware, like any other malware, can be delivered from a variety of methods. However, RansomOff doesn't care how the threat was delivered to your system. It monitors program behaviors system wide to detect the malicious activity. So regardless of how it got on your system, RansomOff will still monitor, assess and alert if necessary.