exe radar pro and sbie

Discussion in 'other anti-malware software' started by Overkill, Apr 9, 2013.

Thread Status:
Not open for further replies.
  1. Overkill

    Overkill Registered Member

    Joined:
    Mar 16, 2012
    Posts:
    2,134
    Location:
    USA
  2. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,695
    Location:
    Zagreb, Croatia
    1) Choose WhiteList CommandLine in the alert popup and press OK
    2) If popups continue to appear:
    -Go to Events tab
    -Find the entry that you allowed last (whitelisted; should be on the top)
    -Right click->Copy to Clipboard->CmdLine
    -Go to WildCard tab, right click->Add, paste it in the box
    -Replace part of the commandline that changes with each new alert (probably that random string after "Chrome" word) using wildcard *->OK

    Note:later you can choose right click->Edit to change it once it is in the list.
    I'm writing this from my head....but I think you got the point...;)

    Does this work?
     
  3. Overkill

    Overkill Registered Member

    Joined:
    Mar 16, 2012
    Posts:
    2,134
    Location:
    USA

    What do I change? the string after chrome?

    C:\Windows\System32\cmd.exe /c rmdir /s /q "C:\Sandbox\Maria\__Delete_Chrome_01CE34E84CE295D0"
     
  4. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,695
    Location:
    Zagreb, Croatia
    Yes, replace "01CE34E84CE295D0" with "*" (don't use quotes).
    Should look like this... "C:\Windows\System32\cmd.exe /c rmdir /s /q "C:\Sandbox\Maria\__Delete_Chrome_*"

    You can track changes in cmdline through Events' tab CmdLine column. ;)
     
    Last edited: Apr 9, 2013
  5. Overkill

    Overkill Registered Member

    Joined:
    Mar 16, 2012
    Posts:
    2,134
    Location:
    USA
    Works like a charm! thank you :thumb:
     
  6. siketa

    siketa Registered Member

    Joined:
    Oct 25, 2012
    Posts:
    2,695
    Location:
    Zagreb, Croatia
    NP....glad to be helpful...:)
    Just make sure to export your ERP settings before next upgrade, so you won't have to take this steps again. ;)
     
  7. Overkill

    Overkill Registered Member

    Joined:
    Mar 16, 2012
    Posts:
    2,134
    Location:
    USA
    Will do :thumb:
     
  8. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    17,041
    This is what mine looks like(note this is for XP

    C:\WINDOWS\System32\cmd.exe /c RMDIR /s /q "C:\Documents and Settings\User_name\Application Data\Sandbox\__Delete_*_*"

    This works for every Sandbox you have.

    Pete
     
  9. Overkill

    Overkill Registered Member

    Joined:
    Mar 16, 2012
    Posts:
    2,134
    Location:
    USA
    Thanks Peter
     
Loading...
Thread Status:
Not open for further replies.