NoVirusThanks Process Protector: Defend processes against unwanted terminations

Discussion in 'other anti-malware software' started by sg09, Aug 22, 2011.

Thread Status:
Not open for further replies.
  1. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,713
    Location:
    Kolkata, India
    http://www.novirusthanks.org/product/novirusthanks-process-protector/


    No trial as usual
    Compatibility
     
  2. novirusthanks

    novirusthanks Developer

    Joined:
    Nov 5, 2010
    Posts:
    704
    Location:
    Italy
    Thanks sg09 for introducing our product :)

    Here is a video tutorial:
    http://www.youtube.com/watch?v=UHA-aC_H8DU

    I would like to offer 5 lifetime licenses (with free updates for future versions) for NoVirusThanks Process Protector to Wilders Security Users, as always feedbacks and feature suggestions are appreciated. Contact me by PM to request the license.
     
  3. lordraiden

    lordraiden Registered Member

    Joined:
    Jan 30, 2006
    Posts:
    3,075
    This program also protects against malware trying to kill any process?
    If that the case I would be interested in test it in my x64 computer if there is a version for x64
     
  4. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,713
    Location:
    Kolkata, India
    Thanks... PM sent...:) I am actually interested in this part,
     
  5. Kid Shamrock

    Kid Shamrock Registered Member

    Joined:
    Apr 3, 2007
    Posts:
    207
    Received license courtesy of NVT. In testing, I found the following issues that need to be reviewed:

    1. Selecting "Protect File..." causes program to crash with no error message
    2. Selecting "Start New Process..." also causes crash with no error message
    3. The hash value is displayed on both the Processes list as well as on the Hashes list. I would suggest removing it from the Processes list as an unnecessary duplication.
    4. Found that if you refresh the processes list while a protected process is not running the process disappears from the list. If you then start the process again, the process can be killed by Task Manager as if unprotected. Once you refresh the list, the process will reappear and protection is restored. I watched the processes list for 15 minutes and it never refreshed itself. The processes list needs to be kept updated in real-time to prevent lapses in protection.

    Testing was done on a Win 7 machine with all other security programs turned off.
     
  6. Technical

    Technical Registered Member

    Joined:
    Oct 12, 2003
    Posts:
    471
    Location:
    Brazil
    Well, if it is still open, I could test it on my Windows 7 Pro 32 bits and AIS :cool:
    Although avast has its own self-defense module, a driver attack could kill it.
    Does NVT protect against it? As far I've read, driver attacks (at admin level) can't be avoided... efficiently...
     
  7. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,713
    Location:
    Kolkata, India
    I received the license too and protected few services with no self-protection. I am running Win7 Home basic 32 bit. I could not reproduce #1 & 2 in my case but reproduced #4 which is indeed of much concern. Agreed with all the suggestions.
     
  8. Technical

    Technical Registered Member

    Joined:
    Oct 12, 2003
    Posts:
    471
    Location:
    Brazil
    I did not receive the key :( :'(
     
  9. Technical

    Technical Registered Member

    Joined:
    Oct 12, 2003
    Posts:
    471
    Location:
    Brazil
    Is this a fraud? o_O
    I mean, I never receive the key... :(
     
  10. novirusthanks

    novirusthanks Developer

    Joined:
    Nov 5, 2010
    Posts:
    704
    Location:
    Italy
    Yes, it protects a process from termination (kernel-mode).

    Yes, NPP can be an additional "self-defense" for other security applications.

    Technical, I delayed the PM because I wanted to send you the fixed version of NPP, check your PM :)

    [27-08-2011] v1.1.0.0

    + Added auto-refresh of running processes
    + Fixed process protection bug
    + Added restore form size
    + Added multi protect/unprotect
    + Minor fixes

    All users should receive the download link by email.
     
  11. ExtremeGamerBR

    ExtremeGamerBR Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    1,115
    Hello, I just got my license, thanks!

    I wonder if you would support x64 systems?

    Thank you!
     
  12. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,713
    Location:
    Kolkata, India
    Received the new installer. :)
    Wishlist:
    Please add an option to kill protected processes from NPP, a right click menu option. Otherwise we had to unprotect and then kill from task manager.
     
  13. ExtremeGamerBR

    ExtremeGamerBR Registered Member

    Joined:
    Aug 3, 2010
    Posts:
    1,115
    +1! :thumb:
     
  14. Technical

    Technical Registered Member

    Joined:
    Oct 12, 2003
    Posts:
    471
    Location:
    Brazil
    Thanks. Got it, installed it and I'm testing.
    First impressions.

    I want to protect two processes: avast antivirus service and Prey (anti thieve tool for notebooks).

    1. avast antivirus service (with avast self defense module off, otherwise I can't touch the service).
    * I could stop the service and NVT Process Protector does NOT block me to do it (with admin rights).
    * I could NOT restart the service, what is bad as I can't restore the protection.
    * If I disable avast shields by it's own UI, the shields are disabled, but I can't restart them all (miss WebShield) and stay into a non protected situation.
    * With NVTPP protecting avast service, I could stop it and I could restart it. I could not kill avastsvc.exe.
    * With NVTPP protecting avast service, I lost the update capacity. See the screenshot.
    * With NVTPP protecting the antivirus service, even if the interface shows everything is running, I can't browse due to Web Shield inconsistence. When removed the protection, I can access the webpage (for instance, this one).

    2. With Prey, it's weird. Adding it to NVTPP just stop the service o_O (so I miss the protection).
    * I could NOT restart the Prey service if NVTPP is protecting it.
    * I could restart the service when NVTPP releases the protection over Prey service.
    * Removing the NVTPP protection and then, adding it again, protect the Prey service from killing the service (cronsvc.exe).

    Well, my first impression is that NVTPP is not increasing my protection, on contrary, it does not allow to restart/reenable the antivirus shields and update process and it allows protecting services (sometimes) to be killed and worse, not restarted.

    What I'm doing wrong?
     
  15. Technical

    Technical Registered Member

    Joined:
    Oct 12, 2003
    Posts:
    471
    Location:
    Brazil
    +1 You can ask for the password in this case.
     
  16. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,713
    Location:
    Kolkata, India
    Yes and in addition to kill a restart option would be handy too...
     
  17. blasev

    blasev Registered Member

    Joined:
    Oct 25, 2010
    Posts:
    763
    Its been a while since last time I use windows, NVTPP surely becoming more interesting :)

    Thx for the license :D:thumb:
     
  18. Tarnak

    Tarnak Registered Member

    Joined:
    Feb 5, 2007
    Posts:
    3,875
    Thank you for the license.

    I have been have been having a tug-of-war between NortonAV2011 and the utility Active Ports which is an old program that I have had on this system since the beginning . NAV keeps removing it to quarantine, and I keep restoring it.

    Earlier this morning I tried Process Protector, to protect this process.

    However, it failed, since NAV 2011 removed the active process. See screenshots.
     

    Attached Files:

  19. sg09

    sg09 Registered Member

    Joined:
    Jul 11, 2009
    Posts:
    2,713
    Location:
    Kolkata, India
    @NVT: Are you still actively supporting this app?
     
  20. Doraemon

    Doraemon Registered Member

    Joined:
    Aug 5, 2009
    Posts:
    202
    As much as I find these latest releases from this company very interesting, it's a shame that they-re 32-bit ONLY.

    Any plans on releasing 64-bit versions?

    Thanks! :eek: :eek: :eek:
     
  21. Hungry Man

    Hungry Man Registered Member

    Joined:
    May 11, 2011
    Posts:
    9,148
    How does it work/ protect the process?
     
Loading...
Thread Status:
Not open for further replies.