NoVirusThanks OSArmor: An Additional Layer of Defense

I am seriously getting sick of this. Almost every other time I start Windows I'm getting this now. How to stop it, @novirusthanks ?

 

No, Now it is EVERY BLOODY time I start my PC. OSA has become the malware now.

 

Seriously, at this point, unless this can be resolved ASAP, I will uninstall all NVT programs and disable auto-renewals.

 

Hello, I don't know how much OSArmor's developers are active in this forum but as almost 10 days have passed since your post of July 31st, you could contact them at support@osarmor.com , if you haven't already done it.

 

Thanks. Yes, I have reached out by email.

Cheers.

 

@Krusty

Thanks for contacting us also via email, we reply faster there.

@bjm_

It looks like to be related to the Windows "Hot Patch":
https://learn.microsoft.com/en-us/w...tch/manage/windows-autopatch-hotpatch-updates

Thanks for sharing them, will see if these FPs can be fixed internally.

Meanwhile, you can ignore the alerts.

 

Hmm...my entry level W11 24H2 home machine...receives Windows "Hot Patch"?
I'm not aware.
My Windows Updates is paused via StopUpdates10 Free.

Thanks!

 

Hi Andreas,

I just got this from my old friend, MailWasher free:

Spoiler: Rule Name: Block execution of unsigned processes on Roaming AppData

Parent Process Size: 7.03 MB (7,367,440 bytes)
Rule: BlockUnsignedProcessesAppDataRoaming
Rule Name: Block execution of unsigned processes on Roaming AppData
Command Line: "C:\Users\David\AppData\Roaming\Firetrust\MailWasher\updater.exe" /checknow
Signer: <NULL>
Parent Signer: Firetrust Limited
User/Domain: David/DAVID-HP
System File: False
Parent System File: False
Integrity Level: Medium
Parent Integrity Level: Medium
Passive Logging: False


Date/Time: 2025-08-10 12:52:17
Date/Time UTC: 2025-08-10 02:52:17
Action: Process Blocked
OSArmor Version: 2.0.5.0
Process: [14644]C:\Users\David\AppData\Roaming\Firetrust\MailWasher\updater.exe
Process Size: 1.1 MB (1,156,608 bytes)
Process MD5 Hash: 09F26574ED73CA2DEA47B81D3D57E04F
Parent: [12692]C:\Program Files (x86)\Firetrust\MailWasher\MailWasher.exe
Parent Process Size: 7.03 MB (7,367,440 bytes)
Rule: BlockUnsignedProcessesAppDataRoaming
Rule Name: Block execution of unsigned processes on Roaming AppData
Command Line: "C:\Users\David\AppData\Roaming\Firetrust\MailWasher\updater.exe" /justcheck
Signer: <NULL>
Parent Signer: Firetrust Limited
User/Domain: David/DAVID-HP
System File: False
Parent System File: False
Integrity Level: Medium
Parent Integrity Level: Medium
Passive Logging: False

Oh, that's right. I uninstalled / reinstall OSA trying to solve my other recent bug, so lost my exclusion. D'oh!

 

Hi Andreas,

I think I need new exclusions for MailWasher.

Thanks,
Dave

 

MiailWasher logs from today.

 

Previous exclusions no longer work. Excluding from block does not work.