NoVirusThanks OSArmor

[NoVirusThanks]

We've released OSArmor v1.8.1:

Download OSArmor for Windows 7, 8, 10, 11 (32 & 64-bit) | OSArmor

Download the setup file for OSArmor Personal, Business and Enterprise version for Windows 7, 8, 10, 11 (32 & 64-bit). All executable files are digitally signed and free from adware.

www.osarmor.com

Here is the changelog:

[25-Sep-2022] v1.8.1.0

+ Added more signers to Trusted Vendors list
+ Added new internal rules to block suspicious behaviors
+ Added Protect other popular applications with anti-exploit module
+ Updated NVT License Manager with latest version
+ Added Block execution of .msp scripts
+ Added Block execution of .msu scripts
+ Added Block execution of .msrcincident scripts
+ Added Block execution of .mhtml\mht scripts
+ Added Block execution of .nfo scripts
+ Added Block execution of .chm scripts
+ Added Block execution of .hlp scripts
+ Fixed all reported false positives
+ Minor improvements

If you have automatic updates enabled then OSArmor should auto-update in the next hours.

Else you can install it "over-the-top" of the installed version, reboot is not needed.

* If you used test builds you should manually update to this final version (install over-the-top is fine).

If you find false positives or issues please let me know.

@Guilhermesene

Regarding OSArmor nothing needs to be done, it works fine on W11 22H2.

Regarding SysHardener you may need to re-apply the tweaks again after major OS upgrades because sometimes the OS may factory-reset or change some settings.

For both applications just make sure to use the latest versions.

@Back3

Thanks for reporting it, fixed now.

 

[blackice]

@NoVirusThanks I got these blocks again while system was idling with just MS Edge open. Medium protection with no changes.

Spoiler: Blocks

Date/Time: 9/29/2022 11:00:01 AM
Process: [19740]C:\Windows\Microsoft.NET\Framework64\v3.5\AddInUtil.exe
Process Size: 40.9 KB (41,880 bytes)
Process MD5 Hash: 169271A10EBCD60D97EE87DE7522012E
Parent: [12340]C:\Windows\System32\msiexec.exe
Parent Process Size: 172 KB (176,128 bytes)
Rule: BlockAddInUtilExecution
Rule Name: Block execution of addinutil.exe
Command Line: "c:\WINDOWS\Microsoft.NET\Framework64\v3.5\addinutil.exe" -AddInRoot:"c:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\AppInfoDocument\." -Rebuild
Signer: Microsoft Corporation
Parent Signer: <NULL>
User/Domain: SYSTEM/NT AUTHORITY
System File: True
Parent System File: True
Integrity Level: System
Parent Integrity Level: System


Date/Time: 9/29/2022 10:59:57 AM
Process: [10616]C:\Windows\Microsoft.NET\Framework64\v3.5\AddInUtil.exe
Process Size: 40.9 KB (41,880 bytes)
Process MD5 Hash: 169271A10EBCD60D97EE87DE7522012E
Parent: [19076]C:\Windows\System32\msiexec.exe
Parent Process Size: 172 KB (176,128 bytes)
Rule: BlockAddInUtilExecution
Rule Name: Block execution of addinutil.exe
Command Line: "c:\WINDOWS\Microsoft.NET\Framework64\v3.5\addinutil.exe" -AddInRoot:"c:\Program Files (x86)\Common Files\Microsoft Shared\VSTA\AppInfoDocument\." -Rebuild
Signer: Microsoft Corporation
Parent Signer: <NULL>
User/Domain: SYSTEM/NT AUTHORITY
System File: True
Parent System File: True
Integrity Level: System
Parent Integrity Level: System

 

[NoVirusThanks]

Thanks for re-reporting it, will be fixed in the next days (didn't notice that the path at the end was different).

 

[blackice]

Thanks for re-reporting it, will be fixed in the next days (didn't notice that the path at the end was different).

As always thanks for the great interaction with your users!

 

[Gandalf_The_Grey]

Here is a pre-release test 1 version of OSArmor PERSONAL v1.8.2:

https://downloads.osarmor.com/osa-personal-1-8-2-setup-test1.exe

Here is what's new so far:

+ Added option to manually check for updates
+ Added new internal rules to block suspicious behaviors
+ Fixed all reported false positives
+ Minor improvements
You can install it "over-the-top" of the installed version, reboot is not needed.

Let me know if you find issues or FPs.

NoVirusThanks OSArmor: An Additional Layer of Defense

Question... when changes are made to Protections in Configurator, is a reboot required for them to take effect? TY No.

www.wilderssecurity.com

 

[Back3]

Issue when I use Privazer to clean up my PC: OSA protection is set at Medium. Many log files about wevtutil.exe...over 50 ! I have installed 1.8.2 test 2.

Date/Time: 2022-10-05 09:14:37
Process: [3256]C:\Windows\System32\wevtutil.exe
Process Size: 276 KB (282 624 bytes)
Process MD5 Hash: 9D242D2F61A50D91B4D5C131B559D9C7
Parent: [7204]C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
Parent Process Size: 440 KB (450 560 bytes)
Rule: PreventImportantSystemModifications
Rule Name: Prevent important system modifications
Command Line: "C:\WINDOWS\system32\wevtutil.exe" cl AMSI/Debug
Signer: <NULL>
Parent Signer: <NULL>
User/Domain: *****/DESKTOP-RVRBA7M
System File: True
Parent System File: True
Integrity Level: High
Parent Integrity Level: High

 

[Back3]

OSA 1.8.2 test 3

https://downloads.osarmor.com/osa-personal-1-8-2-setup-test3.exe

 

[franz]

Is this an upgrade to my 1.8.2 program

 

[plat]

He fixed some false-positives (one was for the test build of Sandboxie that kept blocking Firefox from opening boxed despite adding Sandman to Exclusions) and "some minor improvements."

So far, working fine for me. Why not give it a try (it is a test build, though).

NoVirusThanks OSArmor: An Additional Layer of Defense

Is this a new rule? Block processes with hidden file (+H) disk attribute Blocking both my games' launchers. Had to exclude both and reboot the...

www.wilderssecurity.com

Edit: meh, spoke too soon. Reverted to the release build of 1.8.1. Keeps blocking Sandboxie from opening Firefox even though Sandman was added to Exclusions. Needs some more work, imo.

 

[Mops21]

Hi all

Here is a pre-release test 3 version of OSArmor PERSONAL v1.8.2:

Code:

https://downloads.osarmor.com/osa-personal-1-8-2-setup-test3.exe

Mainly just fixed FPs and some minor internal improvements.

You can install over-the-top, reboot is not needed.

@Krusty @plat

FPs should be fixed now, thanks for reporting.

@Rasheed187

I mean they are not different from Win Explorer right?

Each third-party file manager can behave differently when executing processes in many aspects compared to the Windows built-in File Explorer, supporting any third-party file manager in terms of FPs would not be that easy. Additionally, third-party file managers are generally used for better search/rename/copy/preview multimedia files (photos, videos, etc) and less to specifically run applications.

@cruelsister

Thanks for confirming.

NoVirusThanks OSArmor: An Additional Layer of Defense

Is this a new rule? Block processes with hidden file (+H) disk attribute Blocking both my games' launchers. Had to exclude both and reboot the...

www.wilderssecurity.com

With best Regards
Mops21

 

[Gandalf_The_Grey]

Here is a pre-release test 4 version of OSArmor PERSONAL v1.8.2:

https://downloads.osarmor.com/osa-personal-1-8-2-setup-test4.exe

Fixed FPs and some minor internal improvements.

You can install over-the-top, reboot is not needed.

NoVirusThanks OSArmor: An Additional Layer of Defense

Is this a new rule? Block processes with hidden file (+H) disk attribute Blocking both my games' launchers. Had to exclude both and reboot the...

www.wilderssecurity.com

 

[franz]

NoVirusThanks OSArmor: An Additional Layer of Defense

Is this a new rule? Block processes with hidden file (+H) disk attribute Blocking both my games' launchers. Had to exclude both and reboot the...

www.wilderssecurity.com

Do you think that v1.4.3.0 should no longer be used, that it can no longer do what it was meant to do

 

[plat]

Do you think that v1.4.3.0 should no longer be used, that it can no longer do what it was meant to do

My thoughts: if you keep Windows updated to latest, you should do the same w/your security software.

He also implemented a bunch of new rules since that version, to keep up with the latest threats, not to mention: fixed a number of bugs.

I'm sure the free version still works but you don't know for sure the extent of its remaining functionality..

 

[Gandalf_The_Grey]

Here is a pre-release test 5 version of OSArmor PERSONAL v1.8.2:

https://downloads.osarmor.com/osa-personal-1-8-2-setup-test5.exe

Here is what's new compared to previous build:

+ Do not ask for password when Enable Protection is clicked
+ Improved Block execution of Group Policy Editor
+ Fixed all reported false positives
+ Updated Help/FAQs file

You can install over-the-top, reboot is not needed.

NoVirusThanks OSArmor: An Additional Layer of Defense

I meant that if any malware tried to attack my comp which was very rare security suits always did their job thus the apps in question didn't even have...

www.wilderssecurity.com

 

[Intel_iRIS81]

Is there a guide somewhere for the configurator. Outside of the Main Protection, there is a ton of options to enable or not.

 

[Gandalf_The_Grey]

//Everyone

Here is a 30% OFF coupon code for OSArmor Personal valid for 25 orders (promo ends this December 31): XMAS2022

Xmas is coming, Merry Christmas and happy holidays to everyone

NoVirusThanks OSArmor: An Additional Layer of Defense

Oh, Bye the Bye, Happy and Safe Holidays to everyone here at Wilders. Ho, Ho, Ho, Robert

www.wilderssecurity.com

 

[Zero Knowledge]

Already have a license with a 20% code when it launched. tempted to get another one but $2 saving isn't much.

 

[Sorrento]

Just bought it with discount

 

[Gandalf_The_Grey]

Here is a pre-release test 6 version of OSArmor PERSONAL v1.8.2:

https://downloads.osarmor.com/osa-personal-1-8-2-setup-test6.exe

Here is what's new compared to previous build:

+ Fixed all reported false positives
+ Updated NVT License Manager with latest version
+ Renamed Extreme Protection profile in Maximum Protection
+ Updated Help/FAQs file
+ Minor improvements

You can install over-the-top, reboot is not needed.

Let me know if you find issues or FPs.

NoVirusThanks OSArmor: An Additional Layer of Defense

Oh, Bye the Bye, Happy and Safe Holidays to everyone here at Wilders. Ho, Ho, Ho, Robert

www.wilderssecurity.com

 

[NoVirusThanks]

We've just released OSArmor blog:

OSArmor Blog

Welcome to OSArmor blog! Here we talk about cybersecurity, malware analysis, ransomware and smart security advices to improve Windows security.

blog.osarmor.com

We'll talk about malware analysis and security advices to mitigate online threats.