the run32 is a vulnerable windows process so you can't totally whitelist it (because it can be hijacked by malware).Ok Thks did not know about parent process, i keep getting a prompt for a run32.dll file when faststone viewer opens a photo.
haltedDoes anybody know is this program is still in progres or not?
Too long is the same version in BETA.
It was meDev is gone for a while now. Someone said he had a project and when he is done with it he will be active again but i would not hold my breath.
by putting this character * instaed of the changing part of the command lineI use FreeDownloadManager which needs to install its extension to browser. Mine is Opera.
Eachtime I launch the browser, ERP (alert mode) always prompts for the command line calling FDM from parent process Opera, though I've already whitelisted the cmd line (I suppose it changes everytime).
How do I completely whitelist this?
because it is cmd.exe; it is a vulnerable process so you will always get an alert for it. only choice is to remove cmd.exe from vulnerable process list, but by doing this you will reduce ERP protection. iCC:\WINDOWS\system32\cmd.exe /c "C:/Program Files/FreeDownloadManager.ORG/Free Download Manager/browsernativehost.exe" --parent-window=0 chrome-extension://ahmpjcflkgiildlgicmcieglgoilbfdp/ < \\.\pipe\chrome.nativeMessaging.in.956c10a40d8418eb > \\.\pipe\chrome.nativeMessaging.out.956c10a40d8418eb