Off the top of my head, the new features I'dlike to see in v3 are... Ability to mount an image as writeable (actual image is read-only, any...
Yes and Yes. For .vbs it will alert on WScript.exe, and for .scr it will alert the .scr file itself. @novirusthanks - An Game mode option for the...
@novirusthanks - If a whitelist rule already exists and an app is updated, can you make it clear on the alert dialog that the hash has changed,...
@novirusthanks - Another suggestion - allow columns to be re-ordered and remember the order and width of each.
@novirusthanks While looking through the events, I noticed some oddities whereby the parent process was shown as what looked like Asian unicode...
@alexandrud Any chance of this being added ? I tried chaning the Group of my manually created rules to "Windows Firewall Control" but they still...
@novirusthanks There appears to be a bug with whitelist command-line processing with wildcards, as I continue to get alerted even though a...
@Charyb Glad you got it sorted. Learning mode was the other thing I was going to suggest and should've been the first thing I suggested TBH. :D...
@novirusthanks - When adding a new command line via context menu Add new..., it should activate the editbox automatically so you can just start...
@Charyb I've had similar things and it's usually caused by an unanswered ERP alert when the system is activating the screensaver or going to...
A few more minor usability suggestions: - Ctrl+A in View/Edit Command Line window edit box (and any other edit boxes where it doesn't already...
Glad I'm not the only one :) I'm on Win 8.1.1 x64. The Last Modified timestamp for WhiteList.db under ProgramData does get updated when the button...
@novirusthanks The same is happening with WhiteList Process - it doesn't get added to the list. WhiteList Command Line works fine though.
@novirusthanks I was having a look back at some of my posts and noticed that a few more of the usability suggestions haven't made it into ERP yet...
@novirusthanks 1. With latest beta, if you select "BlackList Process" from alert dialog, it doesn't get added to the Blacklist, so opening the...
I run Shadow Defender and ERP blocked the main window from running (ie. Defender.exe) due to expired/revoked certificate when double-clicking the...
@novirusthanks With new Install mode, are you making it so that it doesn't create new rules for the auto-allowed child processes ? This is my...
Export/Import Settings file open/save dialog doesn't remember previous folder (it always defaults to Desktop). For example, if I export the...
I saw this quote by one of the developers, ZeroVulnLabs, of Malwarebytes Anti-Exploit: and was wondering if ERB will also prevent the Duqu...
You should be able to trigger it by creating a simple 32-bit executable which executes "c:\windows\sysnative\rundll32.exe" (eg. using...
C:\Windows\Sysnative is simply an alias for C:\Windows\System32 allowing a 32-bit application to access 64-bit apps on 64 bit Windows. It does not...
I agree with @Rasheed187 that an install-mode option on the alert window would be useful. The problem with manually switching to Allow mode is...
I agree the long context menu text would be a bad idea, but would instead prefer my other choice of a child checkbox option (ie. immediately below...
Usually I like to leave the option "Disable the ability of other programs to add firewall rules" enabled, but occasionally I need to disable this...
Thanks. I assume the last bit should be "...before setting the saved filtering level/profile".
Separate names with a comma.
