NoVirusThanks OSArmor: An Additional Layer of Defense

wat0114's makes more sense. I just posted where the Protection Profile options are in OSA UI.

 

You're too kind

 

I guess i should be in the Medium Protection Profile.

 

I'd say that's a good starting point. That's where I started and then I manually enabled several more protections, so I ended up with a customized profile.

 

Welcome to the party. I'm glad you could come.

 

Both posts make sense.

 

@Krusty @The_PrivaZer_Team

Great! Thanks for participating.

We've officially released NoVirusThanks OSArmor v1.6.1:
https://www.osarmor.com/download/

Changelog 13 Nov 2021:

We will no longer sign our apps with SHA1 code signing certificate.

If you use an old version of Windows OS, we recommend to read the following pages:
https://www.sevenforums.com/news/42...gning-support-update-windows-7-sept-10-a.html
https://docs.microsoft.com/en-us/archive/blogs/pki/sha2-and-windows

Users that installed test2 should manually install this final build.

Other users should get the update automatically if the option "Automatically update to new version" is checked.

If you find FPs or issues please let me know.

Thanks =)

 

Got it via internal updater. Thanks very much, Andreas.

 

A quick update:

We've officially released NoVirusThanks OSArmor v1.6.2:
https://www.osarmor.com/download/

Changelog 14 Nov 2021:

The new protection option "Block installation of Windows Apps via AppInstaller" can be used to mitigate this:
https://news.sophos.com/en-us/2021/...back-attack-abuses-windows-10-apps-mechanism/

Here is a screenshot of when "ms-appinstaller:" HREF link is clicked:



The targets of the attack are (for now) companies, so home users may not need to enable that option.

It can also be used to block installation of Windows Apps via *.appinstaller files:



May be useful to some users that want to restrict this Windows feature.

If you find FPs or issues please let me know.

Thanks guys!

 

Thanks Andreas

 

I just heard of this threat only yesterday. Very nice you've added protection against it

 

Got it via internal updater earlier today. Thanks again, Andreas.

 

Hi,

I'm not sure if this is technically a FP or not but I shall report it anyway.

Thanks.

 

This just keeps coming up again:

 

A quick update:

We've officially released NoVirusThanks OSArmor v1.6.3:
https://www.osarmor.com/download/

[20-Nov-2021] v1.6.3.0

+ Fixed all reported false positives
+ Minor improvements

@Krusty

They are FPs, fixed now.

 

Wow you guys are like greased lightning with these updates Thanks again, Andreas!

 

Great! Thanks as always, NVT.

 

Hmm, my automatic update setting was off. Anyway, exited out of OSA 1.6.2.0 and installed 1.6.3.0. Thanks for the advanced notice, bjm_ ,as I didn't see the announcement right away.

Does someone want to post this new version over at MalwareTips or something?

 

I have the "Merge TrustedVendors.db..." setting enabled but I just scanned for new Trusted Vendors and found 43 new signers!!

 

Update NoVirusThanks OSArmor #1,502

 

Got the latest version via auto update. Thanks very much, Andreas.

 

November is the month of updates

We've officially released NoVirusThanks OSArmor v1.6.4:
https://www.osarmor.com/download/

[21-Nov-2021] v1.6.4.0

+ Improved installer scripts
+ Added more signers to Trusted Vendors list
+ Fixed Merge TrustedVendors.db with updated list when product is upgraded

@Krusty

Good find, it is fixed now.

We've also added some new signers to trusted vendors.

 

Thanks, Andreas. Looking forward to v1.6.5.