Anti-AutoExec

Discussion in 'other anti-malware software' started by novirusthanks, Mar 28, 2017.

  1. novirusthanks

    novirusthanks Developer

    Joined:
    Nov 5, 2010
    Posts:
    1,358
    Location:
    Italy
    We've released a new simple but effective tool:
    http://www.novirusthanks.org/products/anti-autoexec/

    What is Anti-AutoExec?

    antiautoexecsvc.png

    We created a setup installer file, you just need to install it and the service will protect your PC in the background automatically. All processes executed via autorun.inf (from any device) will be blocked. If you don't want to use the installer you can install the service manually using the install.bat from the zip file.
     
  2. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,788
    Location:
    .
    Many thanks.
     
  3. guest

    guest Guest

    Good, tomorrow i'm gonna try it on a different PC to see the result.

    I couldn't find a setting like "ProtectionEnabled = n" to disable it temporarily, but i guess this is intended :doubt:
    Installing of this program = protected (without "on/off-switch")
    After uninstalling = not protected
     
  4. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,997
    Location:
    Poland - Cracow
  5. novirusthanks

    novirusthanks Developer

    Joined:
    Nov 5, 2010
    Posts:
    1,358
    Location:
    Italy
    @mood

    Yes, it was intended to not include any Config.ini option, it is just an "install and forget" service.

    @ichito

    Some features of the app:

    - Real-time protection against USB-spreading malware
    - Real-time protection against any autorun.inf auto-execution (from CD-ROMs, external drives, etc)
    - Uses a kernel-mode driver to monitor and block processes started via autorun.inf
    - "Install and forget", zero-configuration
    - Works on any Windows OS version (XP to 10, 32\64-bit)
    - Resources-friendly, uses only 1 or 2 MB of RAM
     
  6. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,997
    Location:
    Poland - Cracow
    Thanks NVT for your reply...and one more question :)
    Are there some advantegies in drive protection realised by A-AE comparing to similar one from NVT? (Settings/external devices).
     
  7. guest

    guest Guest

    Ok, thanks :)
     
  8. novirusthanks

    novirusthanks Developer

    Joined:
    Nov 5, 2010
    Posts:
    1,358
    Location:
    Italy
    @ichito

    //Edit:
    Anti-AutoExec does the same thing as ERP->Settings->External Devices-> Check all options :)
     
    Last edited: Mar 29, 2017
  9. ichito

    ichito Registered Member

    Joined:
    Jan 14, 2011
    Posts:
    1,997
    Location:
    Poland - Cracow
    OK...I'll check it :)
     
  10. guest

    guest Guest

    Anti-AutoExec v1.1 Released (June 18, 2018)
    Website
     
  11. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    11,126
    Location:
    U.S.A. (South)
    :thumb: Good deal. Thanks NVT!!
     
  12. daman1

    daman1 Registered Member

    Joined:
    Mar 27, 2009
    Posts:
    1,292
    Location:
    USA, MICHIGAN
    Don't most modern AV have this already? I Know BD does.
     
  13. blacknight

    blacknight Registered Member

    Joined:
    Sep 25, 2007
    Posts:
    3,342
    Location:
    Europe, UE citizen
    I never used it. Does it works as AppGuard ?
     
  14. Duotone

    Duotone Registered Member

    Joined:
    Jul 9, 2016
    Posts:
    142
    Location:
    Philippines
    Hi NVT,

    Is it possible to make a version that works the other way around, that can be installed in a USB and protected from an infected Computer?!
     
  15. Brocke

    Brocke Registered Member

    Joined:
    Mar 16, 2008
    Posts:
    2,306
    Location:
    USA,IA
    Does this auto update to new versions released ?
     
  16. guest

    guest Guest

    It doesn't auto update. Updating need to be done by the user.
     
  17. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,788
    Location:
    .
    @novirusthanks This is great, fine.

    But what happens if I open Windows Explorer then open the USB device and mistakenly double click an executable file that contains malware?
    Is it possible to add ERP's feature "Block Processes Executed from USB devices?

    Some people need to insert undetermined number of unknown USB devices into their computer to print documents, images, etc.

    ----------------------------------------

    Also, if the user requires default-allow policy in the whole system, how to deal with this type of javascript malware found in many usb sticks using Anti-Autoexec?

    javascript malware.png



    Point is:
    1. To block any autorun.inf auto-execution from CD-ROMs, external drives, etc > check
    1. To block vulnerable processes/exes found in the system when called from a USB device (when double click for example a pdf file shortcut like the case above) > ?
    2. To block vulnerable processes/exes found in the self USB device (when double click a disguised executable for n00b eyes) >?
    2. To block any executable found in the USB device, no exceptions (when double click a disguised executable for n00b eyes) > ?
    3. To allow to run any processes other than vulnerable ones, found in the system, that are required to open pdf, images, text, etc files found in the USB device > ?
     
    Last edited: Aug 29, 2018
  18. guest

    guest Guest

    Anti-AutoExec v1.2 Released (October 24, 2018)
    Website
     
  19. EASTER

    EASTER Registered Member

    Joined:
    Jul 28, 2007
    Posts:
    11,126
    Location:
    U.S.A. (South)
    :geek:
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.