New Version 1.2.8.4 of MJ Registry Version

Discussion in 'other anti-malware software' started by Graphic Equaliser, Nov 11, 2015.

  1. Graphic Equaliser

    Graphic Equaliser Registered Member

    Joined:
    Nov 5, 2004
    Posts:
    411
    Location:
    London England UK
    Download from http://www.jacobsm.com/mjsoft.htm#rgwtchr

    Changes 1.2.8.3 to 1.2.8.4
    1) On email alerts, you can set TLS (secure SSL transport) by prefixing the port number
    in the configuration line for the host, with a '+' for explicit TLS and '-' for implicit TSL.
    See EMAIL ALERT CONFIGURATION above. For example, smtp.office365.com/+587
    2) Fixed leak in non-paged pool memory usage.
    3) When a file can't be deleted, you now get the option to retry the operation.
    4) Improved detection of OS version for the tray hint.

    Enjoy!
     
  2. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
    Grrrreat security program. Light & effective. Thanks for the update.
     
  3. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    12,883
    Location:
    Canada
    is this program same as winpatrolplus?
     
  4. bellgamin

    bellgamin Very Frequent Poster

    Joined:
    Aug 1, 2002
    Posts:
    5,648
    Location:
    Hawaii
  5. Windows_Security

    Windows_Security Registered Member

    Joined:
    Mar 2, 2013
    Posts:
    3,060
    Location:
    Netherlands
    @Graphic Equaliser

    Just took a look on the website of a great freebie I used in XP-times. Latest features surprised me, not a simple poller anymore

    ** Latest Features : Service Mode, Process Launch Monitoring, DLL Injection Detection, EMailing of Alerts, Quarantine, Registry Backup **

    Emailing of alerts looks like a nice feature, since some older relatives are still on XP. Any info on process launch monitoring and DLL injection Detection?

    Regards Kees
     
  6. Graphic Equaliser

    Graphic Equaliser Registered Member

    Joined:
    Nov 5, 2004
    Posts:
    411
    Location:
    London England UK
    Hi Kees. Yes, there have been many improvements over the ages! ;) DLL injection is monitored, and reported in the log, but it cannot be stopped, and quite often, MSHTML.DLL injects into MJRW's process space. You get an alert but no pop-up dialog :-
    =======================================================
    ** Tuesday 19/05/2015 19:59:43 **
    Injected C:\Windows\system32\MSHTML.dll Size 19759104
    =======================================================
    Process launch monitoring is crude but can usually spot what launched to cause an alert. By default, if an alert occurs, the process list is compared against the last loop's list to see what might have run to cause the alert, for example :-
    =======================================================
    ** Sunday 17/05/2015 20:24:09 **
    Launched audiodg.exe[3288] « svchost.exe[372] « services.exe[612] « wininit.exe[564]
    Installed ActiveX Components
    Registry Key hkey_local_machine\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}\stubpath
    Value stubpath (S) wants to change from
    "C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.135\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
    to
    "C:\Program Files (x86)\Google\Chrome\Application\42.0.2311.152\Installer\chrmstp.exe" --configure-user-settings --verbose-logging --system-level --multi-install --chrome
    =======================================================
    You can set it to "Log all Process launches" that occur between each sweep (under the Options, Settings menu). Emailing of alerts can be configured through the Options, Setting menu. Here is the help file section on it :-

    EMAIL ALERT CONFIGURATION

    You can set how you want it to handle alerts. You can configure it to email any alerts. To do
    this, use the "Options, Settings, EMail Alert Setup" menu item to set up the parameters you
    need. An example :-

    EMail Address to Send Alert to: Billy Spears <bs76@aol.com>;Sergeant Pepper <sp412@aol.com>
    Host: smtp.btinternet.com
    User Id: RobertPlant809/wholelottalove
    From: rplant809@btinternet.com

    The syntax for configuring the email alerts is as follows :-

    EMail Address to Send Alert to: to_addresses/cc_addresses/bcc_addresses
    Host: hostname/smtp-port
    User Id: userid/password
    From: from_address/replyto_address

    Anything after the slashes (/) (including the slashes themselves) is optional. Some SMTP
    servers require a valid From email address and a password in order to allow the email through
    (spam combat measures). The amount you'll have to specify depends on your ISP and their SMTP
    arrangements. The addresses that emails are sent to, can be multiple addresses in the form :-
    Name1 <emailaddress1>;Name2 <emailaddress2>;Name3 <emailaddress3>;...
    If you need to override the default SMTP port of 25, then follow the hostname with a slash
    and the port number you wish to use. You can also prefix the port number with a plus sign ('+')
    to use explicit TLS (SSL) transport, or a minus sign ('-') for implicit TLS.
    For example, smtp.office365.com/+587

    HTH, :D
     
Loading...