New Antiexecutable: NoVirusThanks EXE Radar Pro

I understand the logic but it's not entirely accurate.

Because malware is isolated by Sandboxie does not mean its not dangerous. If we use a key-logger or screen capture type as an example if it executes inside the sandbox it can still log keystrokes/take screenshots and send the data out etc. Similarly a trojan can run and steal key data. OK it is gone when the sandbox is emptied but by then the damage can be done.

I know inherently SBIE will block a lot of stuff by default because it stops driver loads etc by default and I know how to prevent unwanted execution with start/run restrictions and restrict access to personal data with closed file paths. I just don't understand why it such a difficulty for NVT/ERP when no other AE I've tried has any issues protecting the content of the sandbox.

Anyway all I asked for is confirmation one way or the other not a debate on the merits of Sandboxie. I'm very aware of that products many advantages.

 

@siketa

The most important is an updated help file, with all the frequently asked questions taked from this thread. Then we plan to add support to monitor processes started inside SandboxIE, a "check for updates" option, show the number of items in each TAB, CPU column in Processes TAB, optimize alert dialog.

@TomAZ

I received your email, let me know if the method I wrote is working.

@siketa

Actually ERP just checks if the file is signed (validity check would require a connection), but we will change this to check also the validity.

@chris1341

I was able to test ERP with SBIE now, I see what can be done to make ERP work with SBIE. New version v2.7.4 will support monitoring of processes executed inside SBIE (made a quick test and it worked perfectly).

 

NoVirusThanks,
Sorry for going off topic, but are you still developing NoVirusThanks Process Protector? If so, any chance that you can add Win 8 64 bit support? I'd be very interested in purchasing it if it did.

I've been looking high and low the last few days for something to protect processes from termination and this would fit the bill if it supported 64 bit.

Thanks.

Later...

 

if we buy it do we get an actual license?

i see at the regnow website they mention something about "extended download service" and i got burned by that before i think it was thru bits du jour. they just provided some link to download a pro version of a file and that link expired after a few weeks or so. i don't need any of that nonsense.

 

Great!
I hope it will not make ERP slower or more hungry for system resources.
If that happens, forget validity check and drop it.

Don't forget about "Automatic uninstall (without waiting for service shutdown)".

 

@NVT thanks for looking at the SBIE issue. Glad to hear it is due to be fixed. Could you also look at whether protection works for ram discs. it doesn't appear to for me on win 8 x64. I can execute any file, even blacklisted ones from there.

Thanks

 

Nice catch, chris!

 

Pete,
I took your advice and purchased ERP just now via PayPal. I feel like I've just betrayed my old friend SRP. . I've been using it a very long time (when on windows), but I do see the necessity of protecting processes from malicious termination. Besides, ERP is only $20.00...around the cost of a large Pizza Hut pizza. .

Thanks.

Later...

 

Good decision.
Welcome to the ERP club!

 

I'd like to buy it... and I'll probably do, but firstly I'd like to get ER PRO trial version to check it on my Laptop So I'm waiting on this eagerly

 

The force in ERP is getting stronger!

 

I would say that self defence or compability with SBIE should be taken as priority instead of help file
But anyway - NVT you're doing a great job

 

Any particular software you used in creating your RAM Disk?

 

I think chris1341 uses SoftPerfect RAM Disk - the same as me.

https://www.wilderssecurity.com/showthread.php?p=2133295&highlight=softperfect#post2133295

 

Where do i activate a registration key within the free version.Cant see this function anywhere.

 

It is not there (you can not convert Free to Pro version).
Pro trial should be released very soon.
Did you buy Pro version?

 

A family member did but doesnt use it anymore so they have given me the key.
Thanks.

 

Beethoven, I sent you PM.

 

@Siketa.
Received and many thanks to you.

 

Yup, sure do. Very easy to set-up and run and now free!

 

@Trespasser

We need to see limitations on x64 OS, but I will keep you updated here or by PM.

Thank you for purchasing EXE Radar Pro

@Snoop3

Of course yes.

Yes, that may be not needed as we host the download link in our servers. Some users prefer to have it with regnow and others with our servers.

@siketa

Sure, no worries

@chris1341

I have download the software used to create ram disks suggested by pegr and I will test it in few hours. Thank you for letting us know about that.

@pablozi

Yes, due to the time needed for the help file, we may prepare it after v2.7.4. It depeneds on how much time we need to complete it.

@Beethoven1770

If you have problems with the old license just PM me with your old code (NER*) and I can send you the new one.

 

I would really like this feature, to connect to a server to check validity. However, as a suggestion, I would like it if, for privacy purposes, that personally identifiable information, for example the IP address of the user, not be sent to the server.

 

I had cause to un-install and re-install both ERP and the Softperfect Ram Disc and now ERP appears to react appropriately to executables running in the ram disc (?!). Not sure what the issue was previously but seems to be fixed for me. Hope you did not waste any (or too much) time in this.

Cheers