Here is a new v4.0 (pre-release) test13:
http://downloads.novirusthanks.org/files/exe_radar_pro_4_setup_test13.exe
*** Please do not share the download link, we will delete it when we'll release the official v4 ***
So far this is what's new compared to the previous pre-release:
+ Added new signers to Trusted Vendors list
+ Fixed If you sort columns in Rules, they get auto-resized. And column-size in Events should be saved even after restart of the ERP GUI.
+ On Rules tab, renamed "Copy Selected Rule to Clipboard" to "Copy Selected Rule(s) to Clipboard" and it now supports multiple selected rules (copying them to clipboard)
+ Support ESC to close the dialog also on "Export Rules", "Event Details", "Excluded Processes" windows
+ Added "Support for Drag & Drop" of files for rule creation (just drag & drop a .exe file on the Rules tab and "Expression Builder" will open with pre-filled file details)
+ Removed the orange button "NoVirusThanks" on the top-left of the GUI window
+ On Rules tab, renamed "Create Internal List of Vulnerable Processes Rules" to "Re-create Vulnerable Processes Rules"
+ Added msra.exe and mstsc.exe to Vulnerable Processes rules (you need to right-click the Rules tab listview and click on "Re-create Vulnerable Process rules"
+ Minor fixes and optimizations
To install it, first uninstall the previous build, then reboot (not really needed but may help), and install the new build.
@blueblackwow65
Events of blocked and allowed processes are saved here:
C:\ProgramData\NoVirusThanks\EXE Radar Pro\Events
The next time you get an alert, please send me the .log file or only the snippet of the event that caused the alert.