NoVirusThanks Process Protector: Defend processes against unwanted terminations

http://www.novirusthanks.org/product/novirusthanks-process-protector/


No trial as usual

Compatibility

 

Thanks sg09 for introducing our product

Here is a video tutorial:
http://www.youtube.com/watch?v=UHA-aC_H8DU

I would like to offer 5 lifetime licenses (with free updates for future versions) for NoVirusThanks Process Protector to Wilders Security Users, as always feedbacks and feature suggestions are appreciated. Contact me by PM to request the license.

 

This program also protects against malware trying to kill any process?
If that the case I would be interested in test it in my x64 computer if there is a version for x64

 

Thanks... PM sent... I am actually interested in this part,

 

Received license courtesy of NVT. In testing, I found the following issues that need to be reviewed:

1. Selecting "Protect File..." causes program to crash with no error message
2. Selecting "Start New Process..." also causes crash with no error message
3. The hash value is displayed on both the Processes list as well as on the Hashes list. I would suggest removing it from the Processes list as an unnecessary duplication.
4. Found that if you refresh the processes list while a protected process is not running the process disappears from the list. If you then start the process again, the process can be killed by Task Manager as if unprotected. Once you refresh the list, the process will reappear and protection is restored. I watched the processes list for 15 minutes and it never refreshed itself. The processes list needs to be kept updated in real-time to prevent lapses in protection.

Testing was done on a Win 7 machine with all other security programs turned off.

 

Well, if it is still open, I could test it on my Windows 7 Pro 32 bits and AIS
Although avast has its own self-defense module, a driver attack could kill it.
Does NVT protect against it? As far I've read, driver attacks (at admin level) can't be avoided... efficiently...

 

I received the license too and protected few services with no self-protection. I am running Win7 Home basic 32 bit. I could not reproduce #1 & 2 in my case but reproduced #4 which is indeed of much concern. Agreed with all the suggestions.

 

I did not receive the key

 

Is this a fraud?
I mean, I never receive the key...

 

Yes, it protects a process from termination (kernel-mode).

Yes, NPP can be an additional "self-defense" for other security applications.

Technical, I delayed the PM because I wanted to send you the fixed version of NPP, check your PM

[27-08-2011] v1.1.0.0

+ Added auto-refresh of running processes
+ Fixed process protection bug
+ Added restore form size
+ Added multi protect/unprotect
+ Minor fixes

All users should receive the download link by email.

 

Hello, I just got my license, thanks!

I wonder if you would support x64 systems?

Thank you!

 

Received the new installer.
Wishlist:
Please add an option to kill protected processes from NPP, a right click menu option. Otherwise we had to unprotect and then kill from task manager.

 

+1!

 

Thanks. Got it, installed it and I'm testing.
First impressions.

I want to protect two processes: avast antivirus service and Prey (anti thieve tool for notebooks).

1. avast antivirus service (with avast self defense module off, otherwise I can't touch the service).
* I could stop the service and NVT Process Protector does NOT block me to do it (with admin rights).
* I could NOT restart the service, what is bad as I can't restore the protection.
* If I disable avast shields by it's own UI, the shields are disabled, but I can't restart them all (miss WebShield) and stay into a non protected situation.
* With NVTPP protecting avast service, I could stop it and I could restart it. I could not kill avastsvc.exe.
* With NVTPP protecting avast service, I lost the update capacity. See the screenshot.
* With NVTPP protecting the antivirus service, even if the interface shows everything is running, I can't browse due to Web Shield inconsistence. When removed the protection, I can access the webpage (for instance, this one).

2. With Prey, it's weird. Adding it to NVTPP just stop the service (so I miss the protection).
* I could NOT restart the Prey service if NVTPP is protecting it.
* I could restart the service when NVTPP releases the protection over Prey service.
* Removing the NVTPP protection and then, adding it again, protect the Prey service from killing the service (cronsvc.exe).

Well, my first impression is that NVTPP is not increasing my protection, on contrary, it does not allow to restart/reenable the antivirus shields and update process and it allows protecting services (sometimes) to be killed and worse, not restarted.

What I'm doing wrong?

 

+1 You can ask for the password in this case.

 

Yes and in addition to kill a restart option would be handy too...

 

Its been a while since last time I use windows, NVTPP surely becoming more interesting

Thx for the license

 

Thank you for the license.

I have been have been having a tug-of-war between NortonAV2011 and the utility Active Ports which is an old program that I have had on this system since the beginning . NAV keeps removing it to quarantine, and I keep restoring it.

Earlier this morning I tried Process Protector, to protect this process.

However, it failed, since NAV 2011 removed the active process. See screenshots.

 

@NVT: Are you still actively supporting this app?

 

As much as I find these latest releases from this company very interesting, it's a shame that they-re 32-bit ONLY.

Any plans on releasing 64-bit versions?

Thanks!

 

How does it work/ protect the process?