Reply to thread

Message

<blockquote data-quote="93803123" data-source="post: 835976">RoxasDev ran the test with self-protection enabled under the Security settings:[ATTACH=full]225283[/ATTACH]Heilig Defense RansomOff is a U.S.-based company based in ARLINGTON, VAThis company offers us an advanced Anti-Ransomware solution to protect you from 0day ransomware attacks that traditional antivirus doesn&#039;t see.RansomOff is coded with a HIPS-Lite module that is a shield that protects against intrusions on the system and allows to authorize actions only through legitimate and approved processes. This module was automatically configured by the software I didn&#039;t touch the settings in it.In terms of the protection of records, nothing has been touched.Unfortunately the dropper LaunchMe dropp Kyrox in the folder %temp% and registered to restart the machine, once the machine restarted the machine is fully encrypted, the bypass was quite simple, Kyrox simply prevented the start of ransomOff at the restart of the system since Kyrox launches itself even before the Anti-Ransomware protection, so my home ransomware was able to stop RansomOff&#039;s services.Conclusion: Heilig Defense RansomOff is not bad, it remains a very good security tool to protect you from 0day ransomware attacks, but it would be necessary to add a secure start of the machine and better protect the services and processes of the software to prevent this type of action from happening. Otherwise this software can be a real benefit for security coupled with a traditional antivirus.Kyrox was developed for testing purposes. It is not available on the internet and never will be./!&#039;- Don&#039;t bother asking me for the sample of Kyrox, it won&#039;t be shared publicly /!</blockquote>

[QUOTE="93803123, post: 835976"] RoxasDev ran the test with self-protection enabled under the Security settings: [ATTACH type="full"]225283[/ATTACH] Heilig Defense RansomOff is a U.S.-based company based in ARLINGTON, VA This company offers us an advanced Anti-Ransomware solution to protect you from 0day ransomware attacks that traditional antivirus doesn't see. RansomOff is coded with a HIPS-Lite module that is a shield that protects against intrusions on the system and allows to authorize actions only through legitimate and approved processes. [B][COLOR=rgb(0, 168, 133)]This module was automatically configured by the software I didn't touch the settings in it.[/COLOR][/B] In terms of the protection of records, nothing has been touched. Unfortunately the dropper LaunchMe dropp Kyrox in the folder %temp% and registered to restart the machine, once the machine restarted the machine is fully encrypted, the bypass was quite simple, Kyrox simply prevented the start of ransomOff at the restart of the system since Kyrox launches itself even before the Anti-Ransomware protection, so my home ransomware was able to stop RansomOff's services. Conclusion: Heilig Defense RansomOff is not bad, it remains a very good security tool to protect you from 0day ransomware attacks, but it would be necessary to add a secure start of the machine and better protect the services and processes of the software to prevent this type of action from happening. Otherwise this software can be a real benefit for security coupled with a traditional antivirus. Kyrox was developed for testing purposes. It is not available on the internet and never will be. /!'- Don't bother asking me for the sample of Kyrox, it won't be shared publicly /! [/QUOTE]

Verification