AppCheck by CheckMal

Discussion in 'other anti-malware software' started by Mr.X, Jan 16, 2017.

  1. guest

    guest Guest

    Ransom Guard is providing several features (see below), and Ransom Shelter is doing backups of files which are about to be modified (files in the Backup(AppCheck) folder are protected by AppCheck)
    Ransom Guard / Ransom Shelter:
     
  2. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,546
    Location:
    The Netherlands
    Weird, I'm not sure if I'm cool with this.

    I must say it's a bit confusing. It's not clear if these options are needed to stay safe from damage, and if so, why are they optional? Also, auto backup is only available in the Pro version but Protective Shelter seems to be related to it.
     
  3. guest

    guest Guest

    "Auto backup" is doing a backup of folders "Auto Backup - Backup Sources" in a regular interval to: "Auto Backup(AppCheck)"
    "Ransom Shelter" is doing a back up of files which are about to be modified to: "Backup(AppCheck)"
    If the user doesn't need a special feature, then it can be disabled (MBR protection, File Protection in shared folders, ...)
    Or, if a MBR protection is already installed, it should be disabled in AppCheck. etc...
    It's better to make it optional and the user can enable/disable specific features.
     
  4. Rasheed187

    Rasheed187 Registered Member

    Joined:
    Jul 10, 2004
    Posts:
    17,546
    Location:
    The Netherlands
    Yes, but I wonder if it's enough to stay safe from all damage by enabling real-time protection only? I'm talking about the options that are shown in the main GUI.
     
  5. guest

    guest Guest

    AppCheck v2.0.1.19 Released (22 June 2017)
    2.0.1.19 not available from the website
    Newer release:
     
    Last edited by a moderator: Jun 23, 2017
  6. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,793
    Location:
    .
  7. guest

    guest Guest

    Thanks :thumb:
     
  8. guest

    guest Guest

    The download of version v2.0.1.19 and the new changelog has been removed from the website :confused:
    Maybe there are issues with the new version and they have removed it just in case.
     
  9. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,793
    Location:
    .
    I installed it around two hours ago but I see no perceptible issues.
     
  10. paulderdash

    paulderdash Registered Member

    Joined:
    Dec 27, 2013
    Posts:
    4,639
    Location:
    Under a bushel ...
    Hmm ... also already manually installed here. Probably better to wait for auto-update in future.
     
  11. guest

    guest Guest

    AppCheck v2.0.2.1 Released (23 June 2017)

    https://www.checkmal.com/page/product/appcheck/
    Download: https://www.checkmal.com/download/AppCheckSetup.exe
    Yeah, it is only delayed by 24 hours. Should be no problem to wait.
    I update it manually because some other apps might prevent it from updating after i have switched to Locked Down (ERP+AG)
     
    Last edited by a moderator: Jun 23, 2017
  12. paulderdash

    paulderdash Registered Member

    Joined:
    Dec 27, 2013
    Posts:
    4,639
    Location:
    Under a bushel ...
    @mood Note version is now 2.0.2.1 (not 2.0.1.21) ...
     
  13. guest

    guest Guest

    :eek:
    Thanks ;)
     
  14. guest

    guest Guest

    I have encountered my first False Positive.
    After upgrading and starting of the application "TV-Browser" (based on Java) it was detected by AppCheck "Ransom Behavior detected". I guess because TV-Browser has created and moved a lot of files in the AppData and temporary directory.
    Event Log:
    AppCheck_TV-Browser_False-positive.png
    Detection Log (excerpt):
    AppCheck_Detection-Log.png
    I have selected all files in the Quarantine "Restore to original location" and all files has been successfully restored :thumb:
    The MD5-checksum of restored files can be seen in the Event Log:
    AppCheck_Event-Log_Restored Files.png
     
  15. guest

    guest Guest

    AppCheck v2.0.2.2 Released (26 June 2017)

    https://www.checkmal.com/page/product/appcheck/
    Download: https://www.checkmal.com/download/AppCheckSetup.exe
     
  16. guest

    guest Guest

    AppCheck v2.0.2.3 Released (28 June 2017)

    https://www.checkmal.com/page/product/appcheck/
    Download: https://www.checkmal.com/download/AppCheckSetup.exe
    Some information about the Pety Ransomware is available on the website (with screenshots):
     
  17. NiteRanger

    NiteRanger Registered Member

    Joined:
    Nov 15, 2016
    Posts:
    651
    Location:
    Far East
    Hi

    Does the FREE version detail the ransomware location so that we can manually remove it? Only the PRO version will automatically remove the ransomware after detection


    Thanks
     
  18. guest

    guest Guest

    I think so. The full path of blocked or detected Applications is mentioned in the Detection Log.
     
  19. NiteRanger

    NiteRanger Registered Member

    Joined:
    Nov 15, 2016
    Posts:
    651
    Location:
    Far East
    Thanks
     
  20. guest

    guest Guest

    AppCheck v2.0.2.4 Released (04 July 2017)

    https://www.checkmal.com/page/product/appcheck/
    Download: https://www.checkmal.com/download/AppCheckSetup.exe
     
  21. guest

    guest Guest

    AppCheck v2.0.2.5 Released (20 July 2017)

    https://www.checkmal.com/page/product/appcheck/
    Download: https://www.checkmal.com/download/AppCheckSetup.exe

    New version with enhanced MBR Protection (GPT environment), added Self Protection and some more changes:
     
  22. guest

    guest Guest

    AppCheck v2.0.2.6 Released (24 July 2017)

    https://www.checkmal.com/page/product/appcheck/
    Download: https://www.checkmal.com/download/AppCheckSetup.exe
     
  23. guest

    guest Guest

    AppCheck v2.0.2.7 Released (27 July 2017)

    https://www.checkmal.com/page/product/appcheck/
    Download: https://www.checkmal.com/download/AppCheckSetup.exe
     
  24. CHEFKOCH

    CHEFKOCH Registered Member

    Joined:
    Aug 29, 2014
    Posts:
    395
    Location:
    Swiss
    Funny thing that there is an Korean IP behind which (in the past) spread malware. Nope, I'll skip this product.
     
  25. NormanF

    NormanF Registered Member

    Joined:
    Feb 20, 2009
    Posts:
    2,872
    Its a Korean cybersecurity company. A solid product judging from its extensive ransomware testing here:

    https://www.checkmal.com/page/resource/video/

    AppCheck is a BB/heuristic scanning engine that checks ransomware according to expected behavior instead of through definition files.

    That's why it can stop zero-day threats traditional AV solutions leave unaddressed.
     
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.