New Antiexecutable: NoVirusThanks EXE Radar Pro

I am new to this thread and programm. I saw a "Bahavioral Detection" Tab in the video linked above. What does that mean?
I thought EXE Radar is "only" an anti-executable programm?

 

Hello, I am interested in this program but I only want the BASIC feature: exe interception. I fear your product is full of optional features which may slow it down. Is it possible to try it before buying?
Thanks,
KarmaProd

 

@LoneWolf

Send me by PM your activation code or email address so I can unlock it.

@Habakuck

At begin yes, it was only an anti-executable program, but now it has a lot of options and new features that make it much more advanced.

It analyzes the process based on our "conditions", if specific conditions are met, our behavioral engine detects the process as malicious. For example, the Behavioral engine is used to detect and block the Blackhole Exploit Kit (as you can see from the videos).

@KarmaProd

We made sure that the optional features do not slow it down.

Yes, we'll release a 15-day trial version tomorrow afternoon

 

An extraordinary addition. I will integrate Emsisoft...

 

Version 1.3.4.0 has been released, here is updated changelog:

[12-10-2011] v1.3.4.0

+ Added "Automatically Update Database" (every 1 hour) for "Malware Signature Scanner"
+ Added "Enable EXE Radar Remote PHP Notification"
+ Added button to check UID
+ Updated "Export/Import Settings"
+ Fixed save of remote PHP notification config
+ Updated "Reset settings to defaults"
+ Added "Enable Custom Scanners" -> Integrate any cmdline AV scanner (multiple scanners allowed)
+ Add as many scanners as you want
+ Easy to configure INI file
+ Support Yara
+ Option to show commandline windows (for testing)
+ Option to test scanners with a custom file (ex: eicar.com)
+ Added new "Rules" structure (more customizable from users)
+ Added "Enable "Allow ALL" Mode (Allow Any Process)"
+ Optimized Malwarehash.com API query system
+ Now "Rules" are checked before "Custom Modes"
+ Fixed "Password Protect Stealth Mode"
+ Fixed "Delete File" in "Events" TAB (disabled if no items)
+ Minor fixes

@sg09

Let me know if you need help in setting up the script for the specific AV scanner

In few hours we'll release the trial version.

 

novirusthanks,
Sent PM with activation code immediately after your reply post.
Any news on unlocking, Thanks for your help.

 

@LoneWolf

Code unlocked now, let me know if it works for you.

 

Thank you.
Will give it a try here shortly.

 

Awesome...

 

Working fine, Thanks again.

 

We have finally released a 15 day trial version with limited functionality:

- 15 Day Free Trial (Limited Functionality)
- No Stealth Mode
- No Password Protect Stealth Mode
- No Malware Signature Scanner
- No Blackhole Exploit Kit Protection
- No Gaming Mode
- No “Block Once” for Idle Time
- No Check for Updates
- No “Block Process” and “Block Process + Quarantine” options for Behavioral TABs
- No “EXE Radar Remote PHP Notification”
- No Import/Export Settings
- No Self Defense

The setup file for trial version can be downloaded from the product page (click to the link download):
http://www.novirusthanks.org/product/exe-radar-pro/

 

I am sorry to say I don't understand why the trial version has to be limited in a 15days trial period... ERP is not a type of product that one can use for one time use (like scanners for removing infection), so in my opinion keeping those important features off during the trial period will only discourage a user to give it a go. Moreover how one can understand without using those features whether those are working or just a buggy component... If I was a new to know about ERP and if I was not a user of wilderssecurity I wouldn't touch such a trial version.

 

I totally agree with that. I would undertand the limitations if it were a free version with no time limit but removal of features in a 15 day trial doesn't make any sense...

 

@sg09

Mainly we have limited functionalitites because we want to protect self-defense, blackhole exploit kit detection and other options from being public and attacked by malware developers. But also because some features are not needed in a trial version (such as ERP Remote Notification, Block Once on Idle Time, Import/Export Settings, Check for Updates, etc), I believe a trial version can have limited functionality compared to a full version even if is a 15/30 days trial (ex: can be a useful strategy to prevent cracking and spreading of a the application because has limited functionalities).

It is our job to make sure all features works correctly and are not buggy. I agree with the fact that an user may not understand how works a feature because he can not try it, but in this case we offer support and video tutorials to customers.

I appreciate your opinion as always sg09, we will discuss your points and we may think to remove some limitations in the next trial version or even make it fully functional.

 

I am befuddled by NVT's increasing use of abbreviations & acronyms. I did a Google on the above abbreviations & came up with the following:

Unless EXE Radar Pro (ERP) is designed for use ONLY by security/computer professionals, I suggest that NVT begin making his changelogs a little more understandable by tyros (such as me). Also, ERP is updating versions very rapidly (which I applaud) but is NOT updating its HELP file (which is why I cannot recommend ERP to my friends).

 

@NVT:
I understood your points but believe me keeping trial version limited will not dishearten malware writers/software crackers. $20 is not a big deal for those dedicated experts.... Anyway that's only my opinion. I respect you and your organization and I hope sooner you will come up with better solution .
Anyway...
Can you post a video tutorial of how to integrate console scanners with NVT?

 

@sg09

I have updated the trial version:

- 15 Day Free Trial (Limited Functionality)
- No "Block Once" for Idle Time
- No Check for Updates
- No EXE Radar Remote PHP Notification
- No Import/Export Settings
- No Self Defense

Sure, tomorrow I will post a text tutorial explaining how to integrate Emsisoft scanner.

@bellgamin

You're right here, I will make sure to make changelogs more understandable and explained

PS: Yara is http://code.google.com/p/yara-project/

Again good point, we are creating an online help guide for EXE Radar, few days / week and will be public.

 

@NVT: Much better now. thanks..

 

GOOD news!!! I look forward to a Help that even raw amateurs (like me & Joe Sixpack) can easily understand.

May I further suggest that ERP's more advanced capabilities be combined & placed under an "Advanced" click spot. The main GUI should basically be limited to ERP's simplest anti-executable settings. All of the more technical/esoteric functions should be "hidden" under an Advanced click spot. IMO, doing this would enhance the possibility that the average user won't be scared off by capabilities that he doesn't understand, & thus feel that he is too inexperienced to use ERP.

 

+1

 

Very good addition!

Can you show a tutorial how to integrate Emsisoft + Ikarus + Clam ?

Will 3 scanners slow-down the system performances ?

 

I am trying ERP trial. It seems really nice, but there is just one thing I don't like: I don't want the ask-window to have a time limit. I prefer to be able to disable the "Perform action after X minutes of inactivity".

If you add this (very simple) feature, I'll definitely buy your product.
Please, let me know if you plan to add this feature.

 

@netbook0tr

Please wait few days, I am completing the tutorial.

From our tests and with the hardware of today, I can say no, if you choose three fast scanners you will get no system performances slow-down. We tested it with 8 scanners and was perfectly working with almost 1 or 2 seconds of delay regarding process execution. Tested with a real PC (no virtualized) with Intel Core i5 2.27 GHz, 4 GB DDR3, Windows 7 Professional.

@KarmaProd

Sure, I have added that option now, it looks like this:

http://img847.imageshack.us/img847/5029/19102011204118.jpg

If the option is checked, the alert window will keep to be displayed and no action will be taken until the user takes an action, when he comes back to the PC. Basically it will disable the "Idle Prompt Options".

The new version will be released in few days, will be added other few requested options these days, example:

Which Antivirus scanner detected the file:

http://img560.imageshack.us/img560/7201/19102011214900.jpg

 

Thanks, I'm waiting for it to be released!

 

@NVT:
Please add an automated software updater in ERP which will check for update at regular intervals and will inform and download/install it.