RansomOff

Discussion in 'other anti-malware software' started by co22, Mar 28, 2017.

  1. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    No worries. Definitely appreciate the feedback regardless. It only helps us improve.

    It's unfortunate you had a bad experience though and we are sorry for that.
     
  2. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    Lots of files and registry keys get created over the lifetime of any piece of software. The uninstaller's job is to generally just rid the system of start up references and main files. Many files, like drivers, cannot be deleted until restart. In that case, the uninstaller requests the OS to delete files on the next reboot. That's what RO does. However, that can be disrupted by a multitude of things outside of the original uninstallers control. So while we strive to delete everything, sometimes it's not possible and the files that are left have no meaning anyway other than some used hard drive space.
     
  3. trott3r

    trott3r Registered Member

    Joined:
    Jan 21, 2010
    Posts:
    1,283
    Location:
    UK
    Found the downloading arrow on ransomoffs system trya icon confusing.
    When i hovered over the icon with my mouse no information was displayed like i expect it would do.

    Eventually i figured out it was indicating that a new release had downloaded.
     
  4. poeg

    poeg Registered Member

    Joined:
    Nov 21, 2017
    Posts:
    1
    Location:
    Saskatchewan, Canada
    There a list of known apps that stop RansomOff from installing? The installer launches and that's about it. I can launch the installer 10 times, they're all resident, and not have any issues with other applications or functions.
     
  5. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    What OS version are you running? Any other security software on your machine? If you see the installer running (that's what you mean by resident right?) then there is something interfering. Without more details about your system and software configuration, it's hard to say for sure.
     
  6. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,546
    Location:
    The Netherlands
    I wonder if anyone is still running RO without any problems? Haven't seen any feedback (positive or negative) lately.

    How is everything going, have you managed to sell licenses to companies yet? I was just wondering.
     
  7. cloggy49

    cloggy49 Registered Member

    Joined:
    Oct 6, 2015
    Posts:
    93
    Location:
    The Netherlands
    Hi, I've seen a similar issue several times when I try to install a new program (the most recent one was with VEEAM Agent For Windows 2.1.0.423).....the installer program is running w/o using any CPU cycles so I need to terminate the task. I can start the installer multiple times and in Task Manager it is showing up multiple times but all are showing 0% CPU time. After completely shutting down RO, the installer runs fine.
    My environment: Windows 10 Pro x64, RO version 5.2017.315.6969.RC1
     
  8. paulderdash

    paulderdash Registered Member

    Joined:
    Dec 27, 2013
    Posts:
    4,639
    Location:
    Under a bushel ...
    Just tell Dave, though he does monitor this thread ...

    He is very responsive.
     
  9. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    Thanks for the notice. I'll take a look and try to test with VEEAM. Do you have to fully shutdown RO or can you just disable certain protections for it to work?
     
  10. cloggy49

    cloggy49 Registered Member

    Joined:
    Oct 6, 2015
    Posts:
    93
    Location:
    The Netherlands
    Just tried it again with VEEAM Agent for Windows and now the installer runs fine with RO system protection enabled.....shoot me.
     
  11. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    We installed VEEAM a few times without any issues. It obviously seems like RO had some interaction to make the installer hang but it's hard to identify the cause without being able to recreate. You may not remember when it did hang but was your hard drive being heavily utilized? The VEEAM installer is pretty large (274MB) and if you had other IO intensive tasks going on the installer would have to compete for the resources which could give it the appearance of hanging. Just a thought.
     
  12. cloggy49

    cloggy49 Registered Member

    Joined:
    Oct 6, 2015
    Posts:
    93
    Location:
    The Netherlands
    Hi, could not remember if there was high I/O activity. Next time it happens again, I'll pay more attention to it.
     
  13. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    We wanted to get this update out before the new year so here it is. Fixed a number of bugs and added some new features. We haven't built the auto-update packages yet but will get those up in the next day or two. Otherwise you can download the installer from https://www.ransomoff.com. Cheers!

    5.2017.365.6848 (RC1) - 31 Dec 2017
    • Improved non-standard display size support.
    • Added wildcard support for exemptions, blocks, and backup paths.
    • Added ability to manually add files and directories to block.
    • Added UI color change settings.
    • Improved process loading performance for Win8.1 and greater.
    • Fixed password reset bug.
    • Other minor bug fixes and UI tweaks.
     
  14. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Hi Heidef

    Question. On the HIPS lite feature that detects executable drops, is that just for exe's or does it also include Dll's

    Thanks,

    Pete
     
  15. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    11,126
    Location:
    U.S.A. (South)
    Sorry I gone dark awhile but looking forward to keeping up with the releases like this as they become available.

    I won't go into some subzero weather that's also delaying me while down with the flu but am working my way back.

    Greetings and thanks for such outstanding continued support for all of us who appreciate everything put into this software invention
     
  16. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Hi Heidef

    This latest version really looks good, with just one major issue. Boot time. I do have a lot starting and I can see boot time by how long the tray icons take to appear. Up till now, Private Firewall has taken the longest up till now. But Ransomoff is taking almost 4 minutes to load after private firewall has loaded. Can you do anything about that.

    Pete
     
  17. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    File extension actually doesn't matter. It detects via the file header.
     
  18. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    Thanks. It sure is cold here on the East Coast so I feel for you. Always appreciate your testing thoroughness though and hope you can put the latest through its paces.
     
  19. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    Thanks. Icon visibility is that last thing on the RO startup checklist. There is a lot of things that RO is doing in between boot and visibility and really RO should always be last in loading. That's because the RO service is validating all of the other applications that get loaded at boot. Remember, RO is not signature based so it's not as simple as just checking a hash or querying a database. It actually needs to wait for specific operations to occur for each process to continue. Four minutes though does seem like an unusually long amount of time. Was this the first time you restarted or subsequent reloads? Are you also in a VM? The first loading is always the longest because of setting up the database and initial exemption lists. We could make the icon show faster but if the system is still in its boot sequence having it visible won't make much difference other than a feel good factor.
     
  20. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    It was a subsequent reboot. So the more you have starting up, the slower the boot up. Well interesting. I am evaluating Ransomoff more for other users. For me self I really don't need it but for an inexperienced user it reallly looks very good. Oh this was not in a vm, but on my full system.

    Also I agree a feel good thing is meaningless. So from what you are saying can I expect additional reboots will start to get quicker?

    Also would not using the simple setting make a difference.
     
  21. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    When RO starts up, it makes a list of other start up items. It saves that so on the next reboot it will reference the list to help speed up protection decisions. On the very first reboot after install, that list will be empty. Also, if you add software while RO is running and is set to start with Windows, it won't be in the list RO previously made so it will take another boot cycle for it to be included. So every subsequent reboot won't make booting faster except for the first one when the list is initially empty.

    The list however is not all inclusive for security reasons which can limit its effectiveness a bit. We have some ideas for making this process more robust by including things like execution history and tying in with RO's monitoring so that it can be much more useful. And that will hopefully make booting much quicker especially after each reboot.

    The Simple/Advanced setting won't have any impact on boot performance.
     
  22. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    I did try the advanced setting this morning, and I set exclusions for stuff that it makes sense and it did impact the startup. First reboot was fast, but 2nd was much slower. I am going to let it run for a while. Overall I think this is an excellent piece of software
     
  23. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    Thanks! Adding exemptions will speed things up but you obviously have to be careful as there is a security trade off. Malware does target software to do its bidding and while RO looks for things like that, when it's exempted it'd be easier to slip through.
     
  24. trott3r

    trott3r Registered Member

    Joined:
    Jan 21, 2010
    Posts:
    1,283
    Location:
    UK
    Maybe it would be a good idea to have an initial icon at initialization which is ghosted or black then the full final icon when it is fully loaded up?
     
  25. HeiDef

    HeiDef Developer

    Joined:
    Apr 6, 2017
    Posts:
    388
    Location:
    Arlington, VA
    That is a good idea. Should be relatively easy to implement as well. Thanks.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.