New Antiexecutable: NoVirusThanks EXE Radar Pro

A read/write feature would be extra protection against Cryto-Malware. I don't think it would hurt ease of use in any way. It would be up to the user whether to use it, or not. I can use AppGuard, or Bouncer to accomplish the same thing though.

 

I'm using Windows 7X64 Ultimate, and I only have the issue of the tray icon hiding itself often. It's a very small inconvenience.

 

I think SecureFolders covers that already, give it a try. OTOH I agree with others ERP should not get bloated with new features, just improve the existing ones and fix some issues previously posted by some users.

 

What ERP needs is strict parent-child process control. For example ransomware often loads explorer.exe and svchost.exe in a suspended state in order to fool HIPS. ERP should be able to block this.

 

Yes, Secure Folders seems to be a great application. I wonder why the developer decided he/she did not want anything else to do with it. I never did get an answer whether it uses a KMD, or some other method to enforce it's mitigation.

 

@Cutting_Edgetech Yes, Secure Folders uses a kernel mode driver for it's protection mechanisms. As a matter of fact, I believe that it's kernel driver used a file name that was randomly generated to be more stealthy.

 

Thank you for the information. I couldn't find a driver for it in the System32 driver folder since it randomly generates a name as you pointed out.

 

You can find it if you sort out by "Date modified" then look at the recent ones by hovering the mouse then you will see metadata info saying "Promosoft Software Limited".

 

Yeah, I should have thought of that when I checked. I must have been in a hurry, or my brain wasn't working well that day. Poor me

 

thanks for the idea, I too am running Webroot, and this was driving me crazy. I will try it out.

EDIT: There were a few processes that were giving me grief because whitelisting in the regular way didn't do the trick. But allowing the parent process was an effective solution. Now I get a smooth startup of Windows.
It probably is less safe to allow the whole parent process, but it works.

 

Webroot processes? I was able to get it running smoothly with whitelisted processes & cmd-lines (with the * wildcard), but I can't tell you what I did since it was a trial in Virtualbox & I've deleted it I think it was just the one cmd-line you referenced above that gave me trouble

 

once in awhile on restart I'll see pic1, most of the time on restart I'll see pic2....like the scaling morphs on restart.
Anyone else...? Only see this with ERP. ~ LUV to NVT ERP

 

is it a good idea to allow all software from program files folder?
or should I uncheck that one?
I am on free beta version

 

thanks. I will try unchecking "allow all software from program files folder", and see if I can train it.
In the long run, it is probably quieter than enabling UAC at max.

 

How do I go about configuring comodo to work with erp? I have HIPS disabled just using the firewall and sandbox.

 

Q: hows ERP run on W10 ....?
[sans support?, hope ERP (continues to) run okay on W10]

 

it run fine

 

ERP should run fine with CIS, CFW or CCAV. Just use ERP's Learning Mode for a while - and then revert to Alert Mode. Once you learn how ERP works, then you can do further configuration tweaks.

You don't have to do anything special with ERP to run with COMODO products.

 

I know how to run erp but i'm rusty with comodo. Thanks

 

You don't need to do anything with COMODO...

 

ok thanks

 

In fact you don't need to do anything because you won't need to install it