New Antiexecutable: NoVirusThanks EXE Radar Pro

I tried executing the avast installer 5 times in windows 8.1 64 bit and it blocked all of them.
Edit: Spoke too soon again. Downloaded new version of avast installer and it executed just as before.

 

It is doing great job.
Avast is not in trusted vendors' list.

 

[edit: redacted]

 

Argh. Sorry. Will edit that out, and C&P to NoVirusThanks. Sorry, was not thinking.

 

Thanks, Jryder54. Guess that answers my question.

I'm sure Andreas will find out the reason for this anomaly. Hopefully soon.

Later...

Bob

 

You're welcome!
Avast wasn't in my trusted vendor as well. I have the options allow all windows files and allow all files in the program files unchecked. I have them manually whitelisted.
Andreas - I am going to send you a process monitor log, the avast setup log and ERP's log. Let me know if you need anything else. I hope you can figure this out! Very strange...

 

Sorry if it was discussed earlier but I noticed that when type wrong password there is no information that it is incorrect. Don't you think it would be good to display some information like: the passowrd is incorrect or something like that

 

What is the expected release date of version 3.0 final?

 

I guess in the next 2 weeks it could be ready....

 

@NoVirusThanks

I know you said you could reproduce the problem, But, Just wondering, Were you able to fix the following?

https://www.wilderssecurity.com/showpost.php?p=2297829&postcount=2751

 

@TyRidian

Yes, as I see, the mouse cursor may be freezing because the file of the process is big and ERP needs few seconds to calculate the MD5 hash, can you test it when opening exe files of less than 1 or 2 MB and see if it happens ? In my test it happened only for exe files larger than 8 MB in size.

@artoor

Yes, that can be added.

@Jryder54

Thanks for the log files

 

Hmmm, interesting discovery, I'll have to test this out, thanks

 

@novirusthanks

ERP can be terminated using the processes tab. Is there a way to self protect this, such as adding a password to kill it? I know showing the main window can be protected using the password but I don't always like having to enter my password. Right now I am just protecting it by using stealth mode and password protecting that. I don't know if this is a bug or what.

 

You can password protect the entire GUI, which would necessarily prevent access to the Process tab.

 

yes I said that.

 

@Jryder54

That was made by design, but I can add an option to password protect it, I'll keep you updated on this.

@everyone

Some updates on the new build:

Trusted vendors can be added/deleted from Settings->Signed Processes->Manage Trusted Vendors (I removed them form the WhiteList tab):

http://postimg.org/image/inb5hlolv/

Added an option "Allow safe modules to be loaded from Rundll32.exe", basically this option allows only system modules to be loaded, and we do not need anymore of the pre-defined list of safe commandline strings, all is checked in real-time:

http://postimg.org/image/xvrag0lzn/

Removed "CommandLine (Wildard)" tab, now the CommandLine tab supports also wildcard:

http://postimg.org/image/k5t31zw4h/

 

Nice.....

 

Awesome!

 

woooooo

 

User will be able to enable a protection mode (except the Alert Mode, that is the default mode) for 10 minutes, 30 minutes, 1 hour, until reboot, permanently:

http://postimg.org/image/a63yntusx/

With these options added, we may remove the option in Settings->Advanced Options->Restore Protection

 

Give us that build!

 

I hope it will saves or converts the lines in "CommandLine (Wildcard)" to the CommandLine tab or vice versa ?

 

Just in case it doesn't you could backup the data in c:\ProgramData\NoVirusThanks\EXE Radar Pro\Data\ and manually make sure that all of the old permissions were included in the new files.