New Antiexecutable: NoVirusThanks EXE Radar Pro

Discussion in 'other anti-malware software' started by sg09, Jun 3, 2011.

  1. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    @novirusthanks: Thanks for the reply. 3 re-activation per 30 days is enough...:)
    About Stuxnet waiting for the result. I am almost sure it will able to block the executable. It will be interesting to see if it can block .lnk files or not. In that case my request will be to add a feature for .lnk exploit and autorun.inf exploit.
     
  2. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    also usb protection in real time;)
     
  3. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    i love the idea of this program;) i bet it can work good alone side with antivirus:thumb:
     
  4. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    also it will be a good idea to have if there is not a self program defense againts termination or manipulation of the program or to protect other program to be terminated;)
     
  5. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    Yeh..!! Good point...:thumb::thumb:
     
  6. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
  7. LoneWolf

    LoneWolf Registered Member

    Joined:
    Jan 2, 2006
    Posts:
    3,784
    Smooth install, running very light so far.
    A nice non-confusing GUI.
     
  8. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    A little suggestion,

    Change the text in mouse hover pop-up

    Enabled: True

    to

    Real time protection enabled


    Similarly in the GUI


    Under protection status,

    real Time Protection True


    to
    Real Time Protection Enabled



    enabled is just a less techie word than True.
     
  9. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    Also add an option to delete Events log after a certain time.
     
  10. m00nbl00d

    m00nbl00d Registered Member

    Joined:
    Jan 4, 2009
    Posts:
    6,623
    Is there a reason not to check for SHA-1 instead, rather than MD5?
     
  11. bellgamin

    bellgamin Registered Member

    Joined:
    Aug 1, 2002
    Posts:
    8,102
    Location:
    Hawaii
    It takes a bit longer to compute SHA-1 than it does for MD-5.
     
  12. novirusthanks

    novirusthanks Developer

    Joined:
    Nov 5, 2010
    Posts:
    1,359
    Location:
    Italy
    @sg09:

    Yes, it can block .LNK files since the .LNK will call the executable, it will be monitored and user can allow/block the execution of the executable file.
    EXE Radar monitors also executables that are started from autorun.inf of USBs/CD-ROMs/etc. Every unknown executable that try to run is monitored.

    Will be added in next version.

    It will be changed.

    @jmonge:

    Sure, we already planned to add self-protection in next version.

    @m00nbl00d:

    As said by bellgamin, it takes a bit longer to compute SHA-1 than it does for MD-5.
     
  13. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
  14. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    6,564
    Location:
    New York City
    "Block and Delete File" does not seem to be working. I copied a random installation file from MajorGeeks to my desktop (Xinorbis 6.0.11). I attempted to execute the process (to install program) and the EXE Radar Pro dialog appeared. I selected "Block and Delete File". The process was blocked but the executable remains on my desktop.

    I also noticed that Firefox.exe wasn't added to my whitelist even though the process was running when I first set up the whitelist. I am running Windows XP Pro/SP3.
     
    Last edited: Jun 5, 2011
  15. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,811
    Location:
    Kolkata, India
    Does it check for updates automatically at startup? if not please add this functionality. Also allow checking updates via proxy with authentication.

    Add an option to set gaming mode from right click menu of the tray icon.
     
  16. Warklen

    Warklen Registered Member

    Joined:
    Jan 17, 2009
    Posts:
    112
    Same here process blocked but executable remains.
     
  17. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    report to the developer he can fix this isue;)
     
  18. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    6,564
    Location:
    New York City
    Email sent.
     
  19. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
  20. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    6,564
    Location:
    New York City
    If course, if you answer incorrectly and put a process on the whitelist which shouldn't be whitelisted, you're in big trouble.
     
  21. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    ofcourse this aproach is not for novices but for advance users;) in your hand can be very usefull tool to stop malware in real time;)
     
  22. Thankful

    Thankful Savings Monitor

    Joined:
    Feb 28, 2005
    Posts:
    6,564
    Location:
    New York City
    Perhaps. Selecting the right programs to whitelist is not trivial, even for advanced users.
     
  23. guest

    guest Guest

    SpyShelter Premium is 14 day trial version
     
  24. 1chaoticadult

    1chaoticadult Registered Member

    Joined:
    Oct 28, 2010
    Posts:
    2,342
    Location:
    USA
    News to me. Probably was changed recently, it wasn't always like that for 64-bit version.
     
  25. novirusthanks

    novirusthanks Developer

    Joined:
    Nov 5, 2010
    Posts:
    1,359
    Location:
    Italy
    @Thankful:

    Thank you for reporting this problem, I will take a look at it in the next hours and will let you know more details about it. If possible browse the installation folder of EXE Radar (by default it should be on C:\Program Files\NoVirusThanks\EXE Radar Pro\) and if there is present the file "Errors.txt" send it to our email (info@novirusthanks.org).

    Have you checked if the process "C:\path\to\firefox.exe" is in the Whitelist tab ?

    If you were referencing to the initial dialog:

    http://img703.imageshack.us/img703/1576/exeradar1.jpg

    If you click on "OK" it will add to Whitelist all protected system processes, for example:

    C:\WINDOWS\system32\svchost.exe
    C:\WINDOWS\system32\csrss.exe
    C:\WINDOWS\system32\winlogon.exe
    C:\WINDOWS\system32\smss.exe
    [...]

    If you want to add all running processes to the Whitelist, select the "Processes" tab and right-click on "White List All Processes":

    http://img808.imageshack.us/img808/783/exeradar2.jpg

    EXE Radar is useful to monitor unknown processes and to block malware processes from running, but it can also be used by system administrators to prevent the execution of specific known executables, can be used to play games without having to exit the game if a new process is started (Gaming Mode), it can secure a system used as web server (by blocking any unknown process, for example an hacker that compromised a website with a php shell and want to execute its own trojan or bot, can be blocked), etc
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.