New Antiexecutable: NoVirusThanks EXE Radar Pro

Good job, Andreas

Thank you for all your hard efforts.

Can't wait to play around with the official 3.0 build.

 

Hello,

Is NVT ERP compatible with Win 8.1?

 

Yes the beta version works best.

 

Oh okay then I'll wait for the next stable release. Thank you.

 

My NVT updated to 2.7.7, is that the latest release?

 

Yes.
And this info is available on ERP homepage.

 

Possibly the final release before Christmas?

Sorry, all excited to use 3.0 full time

 

+1

 

Maybe before New Year...

 

Hello everyone! Sorry for the absence but I just moved to my family for the Christmas, so I am a bit out-of-work these days. I will be back at work around on 27/28 December, and I should release the new version of ERP. Meanwhile I whish you, your team and your family a merry Christmas

 

Looking forward to the new version.

Merry X'mas!

 

Merry Christmas and a Happy New Year to Andreas and all ERP users!

 

Merry Christmas to italia and novirusthanks

 

Sounds good and Thank you for taking your time to reply here on the forums, even on Christmas Day!

Have a wonderful Christmas this year, you and your family

 

Great, Merry Christmas to you

 

I'm not exactly sure how CryptoLocker works, but will ERP in Lockdown Mode prevent CL from launching?

 

Yes it does.

 

So then, do I understand correctly that CL is launched as an .exe file? I didn't know that was always the case.

 

As far as I have understood, the launch of a process is still required.

In the future we may see attacks where known processes of the system like the browser are abused for this through malicious code. You can turn your browser into a download manager, e-mail client, video downloader and many things more, so why not an encrypter. It's all just code executed by the browser, no executables required.

Against these kind of attacks sandboxing and policy restrictions are better suited (and on top of that they can stop things from launching as well).

 

agree

 

I understand that there is an option to password protect showing of main window which can be used to protect unauthorize access to the settings and whitelist location. Would it be possible to have an option to view only the Status, Processes, and Events tab and not allowing a user to make any changes to the Whitelist tab, import lists and settings, or access the settings area without entering the master password?

Maybe also an option to remove the "Whitelist All Running Processes" under the tray icon.

And one little neat peaky item for now, why is the password called Master password? Makes me feel like there is a secondary password somewhere I need to enter. The labeling should be just password.

Great application so far.

 

Does Exe radar pro cover child processes? As in say a malicious exe is accidentaly wgitelisted and it spawns a child executable would the child be blocked?

 

I encountered three problems when using a five week old NVT-ERP version on Windows 8.1:


1. I couldn't open the dropdown menu [1] of either Allow or Block after I rightclicked the tray icon and failed to set the mode to Trust Mode between alerts due to an uninstallation. If I remember correctly I couldn't focus other things so I cut the power to repair the problem, which probably resulted in an incomplete uninstallation.

2. Waking the computer up from hybrid sleep causes the alert in this screenshot. If I remember correctly whitelisting it didn't stop the alert.

3. When applying changes to a Windows theme, an alert popped up which required many alt tab instances to reach while the theme fullscreen was stuck on "Please wait" until the alert was answered which I finally did with an Allow.



[1] I think it would be superior to have every Allow and Block option have its own button instead of wasting users' time with an extra click for every alert.

 

2) You should whitelist the commandline.
Replace all those numbers with *.