Evjl's Rain
Level 47
Thread author
Verified
Honorary Member
Top Poster
Content Creator
Malware Hunter
- Apr 18, 2016
- 3,684
Monitor and block suspicious processes behaviors to prevent infections by malware, ransomware, and other threats. This security application analyzes parent processes and prevents, for example, MS Word from running cmd.exe or powershell.exe, it prevents ransomware from deleting shadow copies of files via vssadmin.exe, it blocks processes with double file extensions (i.e invoice.pdf.exe), it blocks USB-spreading malware, and much more. It monitors commonly exploited processes (such as MS Office, Java, Web Browsers, Adobe PDF, Flash, etc) and blocks suspicious child processes, blocking the exploit payloads and thus preventing the malware infection.
This program is compatible with other security software and adds an additional layer of defense to prevent malware and ransomware infections. So far, we have added more than 30 smart policies to block malicious processes behaviors and improve your system security. You don't have to configure anything, just install it and forget about it. If needed, you can enable or disable the policies via the "Configurator" application, that needs Admin privileges.
An Additional Layer of Defense
This smart security application focuses on preventing a malware infection by applying smart and intelligent rules that block bad processes behaviors. This tool can block threats not detected by your installed security solution. Add to your system an additional layer of defense to prevent infections by malware and ransomware!
You don't have to configure anything, just install it and forget about it. We have already added more than 30 smart policies to improve your system security with this security application.
Basic Anti-Exploit
Analyze parent processes and child processes blocking exploit payloads.
Protect MS Office Apps
Prevent WINWORD.EXE or EXCEL.EXE from executing malicious processes.
Monitor Applications
Monitor Adobe PDF Reader, MS Office, OpenOffice, Web Browsers, etc.
Block USB Malware
Prevent execution of processes started via autorun.inf from USB devices.
Block Command-Lines
Block processes with command-line strings commonly related to malware.
Protect Shadow Copies
Block system processes (vssadmin.exe, etc) from deleting shadow copies of files.
Block File Download
Block specific command-lines related to download of remote files.
Block .COM & .PIF
Block execution of processes with .COM or .PIF obsolete file extensions.
Filter System Processes
Block wscript.exe, mshta.exe, etc if they match our rules of bad behaviors.
Block Bcedit.exe
Prevent important and critical system modifications from Bcedit.exe
Block Schtasks.exe
Block the execution of schtasks.exe (commonly used by malware).
Block Bitsadmin.exe
Prevent Bitsadmin.exe from downloading (/download) remote files.
PowerShell Rules
Block execution of encoded or malformed commands via PowerShell.
Svchost & Explorer
Block suspicious behaviors related to Svchost.exe and Explorer.exe.
Block RegisterXLL()
Prevent calling of Application.Excel RegisterXLL() via command-line.
Block Remote Scripts
Prevent Regsvr32.exe or Mshta.exe from loading remote scripts.
Very Lightweight
The software application uses only a few MBs of memory, you will not even notice it.
Free to Use
This software is completely free to use for anyone, at home and at work.
For Windows XP, Vista, 7, 8, 10 (32\64-bit)
*** Doesn't support Secure Boot for now ***
Download & more info here:
Prevent Malware and Ransomware Infections with OSArmor | NoVirusThanks