New Antiexecutable: NoVirusThanks EXE Radar Pro

x64 version should be ready in approximately one month

 

Excellent news.
If you are testing betas for x64 now I'm willing to help, just pm me.

There is any plan to add the antirookit capabilities of your other products to NoVirusThanks EXE Radar Pro?

 

Thanks for letting us know, good news indeed.

 

If you need some beta tester, just send me a PM.

 

Thanks Andreas for the update. The product is growing in a great way. Thanks for considering about the new features. News about x64 is exciting...

 

This is what I'm waiting on. Thank you for the update. I would definitely test on my other laptop.

 

I am eager to trial this app. AFAIK, there is no trial copy available as yet. Ergo, I am monitoring this thread so I will know when a trial copy does become available. I hope the announcement of such availability will be loud & clear (perhaps in red letters) when it happens -- so I don't accidentally miss it.

 

No problems with install. See some images here - https://www.wilderssecurity.com/showthread.php?p=1889220#post1889220

 

If you need some beta tester, just send me a PM.

 

Waiting x64 version eagerly as well

 

I am surprised that NVT uses behavioral analysis. I had thought that NVT is strictly a whitelist-type app (anti-executable).

Please tell us more about the role played by this behavioral analysis.

Please consider offering SHA-1 &/or SHA-2 as an option to MD-5, with an advisory that using this option will cause some slow-down. Reason: MD-5 has been shown to be rather easily defeatable (for example, at 128 bits MD-5 is small enough to allow a birthday attack).
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

QUESTION: Does NVT require a restart during installation? (I hope not. I would like to trial it in shadow mode.)

 

@guest

We can think on add some of the ARK functionalities to a future version of EXE Radar.

@Tarnak

Great

@bellgamin

This option uses our own process behavioral scan engine that can help you to understand if a process may be dangerous, and so probably a malware/trojan. When a process has been identified as suspicious, you will see in the alert dialog the process name in red color. This option analyzes the process with various methods, for example where it is located, company details, etc and if detected as potentially suspicious it is colored in red, example:

http://img696.imageshack.us/img696/9478/16062011224026.jpg

Can be created in future an anti-malware module that automatically blocks suspicious processes detected by that option, for example.

@all

When we'll have a beta version ready for the x64 I will update this thread and I will write here info about to join the beta testing program, thank you a lot for your interest

Sure, we can add SHA option in next version.

No, a reboot is not needed.

 

Beta test, splendid!

 

I don't want to have to keep typing a lengthy name like "NoVirusThanks EXE Radar Pro". Ergo, for the moment I shall refer to it as "ERP" (for EXE Radar Pro).

If malware makes you nauseous, then ERP.
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

I gave ERP a very short trial. The trial was short because I was unable to see or use the click bars at the bottom of ERP's Alert pop-ups. Reason: ERP's Alerts are apparently set for a different resolution than mine. Because my eyesight isn't so good, I have set my computer to 1280X768 resolution, & use 120 DPI fonts. At these settings, the click spots at the bottom of ERP's Alerts show only their very top edges. Unusable, as such.

ERP is the first app I have run across that is unreadable at the settings I use. I hope that ERP's proponents can fix this so that those of us with fading eyesight can give this promising application a fair trial.

 

I am fortunate that my eyes are still good.

I checked my desktop properties setting, and I am on 1680 x 1050 , DPI setting: Normal size (96 DPI)

I primarily use Opera with a minimum font size (pixels) > 9. I don't really know how it relates to your particular circumstance.

 

@bellgamin

I have tried that settings too and I have noted the problem you are getting, I will see what we can do to fix this problem in the next version

Some upcoming new features for v1.3:

+ Alert Dialog option -> Block File and Send To RecycleBin (so it can be recovered/undone by the user in case is needed)
+ Option to password protect the execution of custom processes
+ Show File Description and File Size in the Alert Dialog
+ Support for multilanguage

 

"+ Option to password protect the execution of custom processes"

This sounds good.

 

+1

Please make a quarantine folder instead of sending files to Recycle Bin. Many of us have recycle bin turned off...

 

+1
A quarantine folder is the way to go.

 

Thanks novirusthanks

Highly useful for me

 

Releasing the new version v1.3 in the next hours:

[27-06-2011] v1.3.0.0

+ Added "Alert Dialog option" -> "Block File and Send To RecycleBin"
+ Added "Alert Dialog option" -> "Block File and Send To Quarantine"
+ Added Master Password to:
+ + Password Protect Execution of Specific Executables
+ + Password Protect Stealth Mode
+ Sort items by column click in "Executables" TAB
+ Show File Description and File Size in the Alert Dialog
+ Added "Open/Clear Quarantine Folder"
+ Partial Fix for Big Fonts
+ Enabled "Allow Processes with Digital Signature" with Gaming Mode

New Alert Dialog:

http://img18.imageshack.us/img18/4968/27062011144420.jpg

Password TAB:

http://img560.imageshack.us/img560/8173/27062011144459.jpg

Alert for Password Protected Executable:

http://img52.imageshack.us/img52/5003/27062011144537.jpg

The option "Password Protect Stealth Mode" can be used to hide and protect the application making sure a normal user cannot change the application settings (since application is in Stealth Mode), when hotkeys are pressed to Un-Stealth the application, it is required to type the correct password.

The option "Block File and Send To Quarantine" can be very useful in capturing (and then analyzing) unknown executables, e.g: can be used to capture malware samples from drive-by-downloads / web exploits.

Users will receive by email (email used to activate the product) the download link for the new version in the next hours.

 

X64 version, please!