New Antiexecutable: NoVirusThanks EXE Radar Pro

2 possible bugs or usability issues?

1) one click on ERP tray icon does not do anything. Most applications open user-interface. You have to make double click. Is it by design? Can it be changed to open UI on a single click?

2) after UI is opened, double click on tray icon closes the interface. Is it also by design? Most applications do not close. Can it be changed to perform no action?

Best regards.

 

@Amit

Sure, the next time you should get the email for sure

@siketa

I have not tested this yet, but it can be that.

That sound strange if you haven't tried to disable protection in the previous session. I will run some tests tomorrow to see what happens. If you have more details please let me know as always

Yeah, it was designed to open the UI by double-clicking the tray icon, this can be changed to open the UI with only one click.

This too was designed as that, but can be changed as you suggested

So far this is what we've done till now:

+ Added option to whitelist the caller process (all processes started by the whitelisted parent process will be allowed to run)
+ Added option to whitelist a process without checking MD5 hash
+ Added option to whitelist a folder, support also recursive option
+ Fixed NoVirusThanks Activation that didn't survived at reboot
+ Optimized support for fast user switching

And this is what we have remained in the todo list for v2.7.3:

//+ Fix the option "Always alert when regsvr32..." (is this really needed anymore ?
//+ Show the operating system information in the Status TAB
//+ Add option to not show again popup notification when a specific process is blocked
//+ Optimize startup speed
//+ Show the activation code in use
//+ Add option to change the activation code

 

@novirusthanks
Ah great. Thanks.

 

//+ Show the operating system information in the Status TAB

Why do you need this in ERP?
What informations are planned to be shown (CPU, RAM, OS...)?


//+ Fix the option "Always alert when regsvr32..." (is this really needed anymore?)
Yes, because of security reason.....personally, I would leave it there.
No, if "//+ Add option to not show again popup notification when a specific process is blocked" can cover it without losing posibility to block exploit attacks.

 

I don't know if this has already been mentioned.....In lockdown mode having a prompt that would allow the blocked process to run. I know that it kind of defeats the purpose of having an AE. My reasoning is for those times when you are installing something and it gets blocked because you forgot to turn off Lockdown mode.

 

It would make sense only if you install dozens of software every day.
It is not too hard to disable Lockdown mode and re-enable it later.

 

True. Then how about an option if you forget to turn back on Lockdown mode after a predertermined amount of time? Some of us older folks forget sometimes to turn things back on.

 

Hmmmm.....good idea.
nvt, what do you think about this?
An option to restore Lockdown mode after x minutes, just like we have now for Protection.

 

you guys are lazy
o well me too good idea

 

Welcome to the club of "old and annoying-allways want some new features" users!

 

It's not laziness. It's marketed as innovation.

 

Whitelisting doesn't seem to work. ERP is asking me to allow the following process everytime I open MBAM: C:\Windows\SysWOW64\regsvr32.exe
I have already clicked "whitelist" at least 5 times...

 

Read posts #1384 and #1386 on the previous page.

 

Excellent News, I hope this solves the problem of system becoming unresponsive upon switching from one user to another.

Cant wait to try it out.

 

Doesn't whitelisting entire Programs folder defeat the purpose? I mean what if malware installs itself there?

 

Yeah, how can it put itself there if it can't even run?

 

Only user can manually (deliberately) put the file in there....

 

Hey NoVirus, what are the re-install limitations (if any) on version 2.7.2 regarding re-imaging (not re-formatting)? Is there still a limitation on how many times I can re-install on my fresh image?

 

i think it is 10 times

 

@kjdemuth @siketa

Sure, that can be added

@jo3blac1

Open the Settings and browse to Advanced, you should have enabled the option "Always alert when regsvr32.exe tries to load a DLL/EXE". This was added to better protect from loading of malicious payloads. Siketa reported a small bug that even if you whitelist the commandline string used by regsvr32.exe process, with the option "Always alert when regsvr32.exe tries to load a DLL/EXE" checked, you are always prompted with the alert-dialog, this is fixed in v2.7.3.

@DBone

We have removed the reactivation limits for now. We'd like to see how it goes with time.

 

The best app just keeps getting better! Awesome news

 

I have 2 new suggestions to share with you guys:

1) Rename "Always alert when regsvr32.exe tries to load a DLL/EXE" option to "Alert when regsvr32.exe tries to load a DLL/EXE". Since we have possibility to whitelist commandline, it does not "Always" alerts us. This word can be removed.

2) We could also have "Alert when rundll32.exe tries to load a DLL/EXE" option.
This is also the source of exploit attacks and could protect us even more.
Or it could be joined together with the first option like "Alert when rundll32.exe or regsvr32.exe tries to load a DLL/EXE".

What do you say?

 

Excellent decision. The one breaking the record will be me, but don't pay attention. I go back and forth between images just to test things all the time. I can't help myself. I will try hard to stop doing it for a while, but sometimes it's stronger than me.