exe radar pro and sbie

Discussion in 'other anti-malware software' started by Overkill, Apr 9, 2013.

Thread Status:
Not open for further replies.
  1. Overkill

    Overkill Registered Member

    Joined:
    Mar 16, 2012
    Posts:
    2,343
    Location:
    USA
    Overkill, Apr 9, 2013
    #1
  2. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    1) Choose WhiteList CommandLine in the alert popup and press OK
    2) If popups continue to appear:
    -Go to Events tab
    -Find the entry that you allowed last (whitelisted; should be on the top)
    -Right click->Copy to Clipboard->CmdLine
    -Go to WildCard tab, right click->Add, paste it in the box
    -Replace part of the commandline that changes with each new alert (probably that random string after "Chrome" word) using wildcard *->OK

    Note:later you can choose right click->Edit to change it once it is in the list.
    I'm writing this from my head....but I think you got the point...;)

    Does this work?
     
    siketa, Apr 9, 2013
    #2
  3. Overkill

    Overkill Registered Member

    Joined:
    Mar 16, 2012
    Posts:
    2,343
    Location:
    USA

    What do I change? the string after chrome?

    C:\Windows\System32\cmd.exe /c rmdir /s /q "C:\Sandbox\Maria\__Delete_Chrome_01CE34E84CE295D0"
     
    Overkill, Apr 9, 2013
    #3
  4. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    Yes, replace "01CE34E84CE295D0" with "*" (don't use quotes).
    Should look like this... "C:\Windows\System32\cmd.exe /c rmdir /s /q "C:\Sandbox\Maria\__Delete_Chrome_*"

    You can track changes in cmdline through Events' tab CmdLine column. ;)
     
    Last edited: Apr 9, 2013
    siketa, Apr 9, 2013
    #4
  5. Overkill

    Overkill Registered Member

    Joined:
    Mar 16, 2012
    Posts:
    2,343
    Location:
    USA
    Works like a charm! thank you :thumb:
     
    Overkill, Apr 9, 2013
    #5
  6. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,718
    Location:
    Gaia
    NP....glad to be helpful...:)
    Just make sure to export your ERP settings before next upgrade, so you won't have to take this steps again. ;)
     
    siketa, Apr 9, 2013
    #6
  7. Overkill

    Overkill Registered Member

    Joined:
    Mar 16, 2012
    Posts:
    2,343
    Location:
    USA
    Will do :thumb:
     
    Overkill, Apr 9, 2013
    #7
  8. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    This is what mine looks like(note this is for XP

    C:\WINDOWS\System32\cmd.exe /c RMDIR /s /q "C:\Documents and Settings\User_name\Application Data\Sandbox\__Delete_*_*"

    This works for every Sandbox you have.

    Pete
     
    Peter2150, Apr 9, 2013
    #8
  9. Overkill

    Overkill Registered Member

    Joined:
    Mar 16, 2012
    Posts:
    2,343
    Location:
    USA
    Thanks Peter
     
    Overkill, Apr 9, 2013
    #9
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...