New Antiexecutable: NoVirusThanks EXE Radar Pro

Yes. Already on to-do list.
First they will implement checking for newer version.
Full auto-update will come later.

 

Thanks for info siketa

 

I can't find export/import whitelisted processes. Is it in Menu -> Export Settings, Import Settings?

 

I think so...

 

@Trespasser

I tested ERP with last version of EMET v4b and here is how you should configure the application settings for EXERadar.exe to work togheter:
http://postimg.org/image/f4poqnh5h/

Let me know if that changes works for you too.

@Solarlynx

At the moment there is not a specific Import/Export for each single list, but you can use the global import/export for settings (that includes also the lists) that is located under Menu -> Import Settings or Menu -> Export Settings.

 

That will go, thanx.

@NVT: my wishlist: please make an option to disable this popup "The real time protection is going to be disabled..." asking me if I want to enable protection automatically after 5 minutes. Or maybe it is already present?

 

Menu-Settings-Protection
Enable "Restore real-time protection if disabled for more than" option.

 

Yeah, I know. And the popup appears irrespective to whether this box checked/unchecked and what number of minutes is there.

The problem is that I often switch on/off protection and this popup really irate me.

Or maybe it's only in the trial?

 

Everything is fine here.
No popup with that question if option is enabled.
It has to be something in your installation.
Try to reinstall it (use Export Settings first and later Import it).

 

No I have the option unchecked. And it offers and offers every time I disable protection.

Maybe somebody have a gun to shot this stubborn popup?

 

@Solarlynx

To disable that popup you can check the option "Restore protection if disabled for more than..." http://postimg.org/image/8b1itzv0n/. In the next version we can add an option to "Do not show warning messages when protection is disabled"

 

Thanx for your answer. Yeah, I know but then protection will be restored in the specified number of minutes. I don't want this automatic restoration.

I like it, please add it to trial as well.

@NVT: it's not very convenient to change the number of minutes (in Settings -> Protection) only by arrows. Ability to change with keyboard buttons for digits must be added as well.

 

@Solarlynx
Keyboard input is already included in new 2.7.5.

@novirusthanks
I think it is no good approach to fill ERP with too many options.
Leave it as it is. Just describe it in Help file.
The warning popup is there for security reason.
EDIT: Aaahhhh...doowhatchalike...

 

You're 100% right!

 

But can someone explain what is the reason of adding ERP to EMET protected apps? I don't get it.

 

Since there is a malware variant that can use Windows PowerShell to infect the machine:http://www.zdnet.com/proof-of-concept-malware-targets-windows-powershell-3039280295/
I will suggest to add Windows PS to Vulnerable Processes.
The news is a few years old, but it doesn't mean that this technique couldn't be used tomorrow

 

To mitigate (elimination or reduction of the frequency, magnitude, or severity of exposure to risks, or minimization of the potential impact of a threat or warning) the chance of a threat from interfering or manipulating ERP in some form.

Later...

 

Hi:
SO is the free version no-more? On novirusthanks website I do not see the exe radar free version that was offered before?

 

@taleblou

Maintaining also the free version of ERP is really too much work for us, for this reason we have decided to release a fully functional 30-days trial version to allow users to try our software before buy it. The software can then be purchased for $ 19,99 USD (1 PC lifetime license with free updates). We will announce this officially in our website when we will release ERP v2.7.5 and its trial version (in very few days).

@pablozi

Sure, I can add power shell executable to the vulnerable processes.

Thank you for the information

 

Hello,

I have noticed that the download links given to the registered users no longer work. I assume that the correct procedure now will be to download the trial and we will be prompted to enter our license information into the trial? Just want to be sure as I am making some changes on my system and need remove ERP for a hour or so and the install fresh...

 

novirusthanks,
These settings...

http://postimg.org/image/f4poqnh5h/

work for ERPx64Svc.exe as well in EMET 4.0 beta.

Later...

 

@puff-m-d

I sent you a PM.

@Trespasser

Great, thanks for letting us know.

 

I've only just heard about NoVirusThanks and I think it's a good idea. I'm thinking of trying it out, but I was wondering how complicated it is and if it has a default setting with core programs allowed or if I have to give everything permissions.

 

just after the installation, you will have a setting wizard asking you if you want to whitelist all executables in Program Files, then after in the options, you can set ERP to trust automatically certified softwares.

 

My system is clean (to my knowledge) would you say it's fine to allow whitelist executables in Program Files?