NoVirusThanks OSArmor

[shmu26]

I get this error after installing OS armor 1.4 test

"a digitally signed driver is required"

"a digitally signed driver is required" - Google Search

How can I fixed it? it happens as well with the version 1.3 downloaded from NVT web

BTW I have seen that ERP will be updated to v4 soon, any details about this? dates, features?

If you got that error, don't install. If you did, then you must uninstall the program before you reboot, or else disable safe boot. If you ignore the warning, your system will become unbootable.
Or you can wait until Andreas gets the co-signed drivers and issues a new version.
Or... install in a VM. Most VMs don't have safe boot.

 

[ForgottenSeer 58943]

I ordered a 10 pack of ASUS Chromebook Flip C302 laptops for the house. I am replacing all of the Windows 10 Notebook/Laptop devices with those and putting the whole security theater behind me. Gaming machines are another story, that leaves 4 gaming rigs that will still have to run Windows 10. But at least the security of all of the devices coming and going to the home will be handled properly without all of the Windows theater.

 

[shmu26]

I ordered a 10 pack of ASUS Chromebook Flip C302 laptops for the house. I am replacing all of the Windows 10 Notebook/Laptop devices with those and putting the whole security theater behind me. Gaming machines are another story, that leaves 4 gaming rigs that will still have to run Windows 10. But at least the security of all of the devices coming and going to the home will be handled properly without all of the Windows theater.

That's pretty impressive, if you can put 10 laptops to use, in one home!

 

[ForgottenSeer 58943]

That's pretty impressive, if you can put 10 laptops to use, in one home!

5 will be put to immediate use. 5 spares. I'm anal about cold spares for everything and backups/duplicates as needed. Also 10 allowed me to get wholesale pricing from one of our suppliers, basically giving me 1 for free.

 

[ForgottenSeer 58943]

The slowdown issue cropped up on my camera server, which is Win10 based, clean install with only a few things running.

After installing OSA my camera software was showing major issues and cameras weren't updating it properly, the whole thing came to a standstill.. Removed it and restarting, hopefully it's back to normal!

 

[Kuttz]

Average Joe does not care about Windows security and is not going to put effort into learning about it. Average Joe's priority is more or less what's for supper and what is on television.

Microsoft focuses on feeding features and ways to make money via Windows to Average Joe and not educating Average Joe one bit - especially not educating Average Joe about Windows security.

Look at Exploit Guard on Windows Home and explain to Average Joe in a few sentences, in terminology, that Average Joe can easily and quickly comprehend and immediately put into action to configure his\her system - easily, quickly, and correctly. You can't. No one can.

It's a pathetic state of affairs.

The point is every person was an Average Joe at some point in his life. When bitter experiences happen to them sometimes repeatedly he starts an introspection and learn and transcend the problem in front of him that is how one become wise. If a particular person is an Average Joe in something he may be an expert, knowledged, wise person in something else. For example you may be knowledged in so so PC security but may be an Average Joe or even poor in other aspects of life. If you visit web forums that is not about PC security people like you there will call you an "Average Joe" :X3:

 

[Antimalware18]

Any ETA on when the driver will be signed? I'm eager to get this on my system for a spin but when I tried before windows wouldn't let the driver install
because it wasn't signed and I don't want to turn off the driver protection.

 

[Deleted member 178]

Any ETA on when the driver will be signed? I'm eager to get this on my system for a spin but when I tried before windows wouldn't let the driver install
because it wasn't signed and I don't want to turn off the driver protection.

they just got the certificate, so expect it in few days.

 

[Andy Ful]

The point is every person was an Average Joe at some point in his life. When bitter experiences happen to them sometimes repeatedly he starts an introspection and learn and transcend the problem in front of him that is how one become wise. If a particular person is an Average Joe in something he may be an expert, knowledged, wise person in something else. For example you may be knowledged in so so PC security but may be an Average Joe or even poor in other aspects of life. If you visit web forums that is not about PC security people like you there will call you an "Average Joe" :X3:

Everyone is an average Joe in some aspects. I know very intelligent people that have a serious problem with simple mathematics.
I know people that studied informatics and are average Joes in computer security.
The phrase 'average Joe' on MalwareTips should be read: average computer user.

 

[shmu26]

Everyone is an average Joe in some aspects. I know very intelligent people that have a serious problem with simple mathematics.

Average Joe isn't so bad. It's the areas in which I am sub-average Joe that really have me worried.

 

[Deleted member 178]

When i mention Average Joe, by this i mean the classic computer user just browsing, gaming, social media-ing and working...if you are participating on any security forums for more than few days; you aren't Average Joe anymore. You may still be a noob tough

 

[Kuttz]

When i mention Average Joe, by this i mean the classic computer user just browsing, gaming, social media-ing and working...if you are participating on any security forums for more than few days; you aren't Average Joe anymore. You may still be a noob tough

According to you an Experienced Joe in security who is not participating other forums for "few days" has to be an Average Joe again. You are still a so called Average Joe in something else

The Average Joe may have been participating many things in his life including security forums. To an Average Joe participation in a security forum may be like one is picking a fish from the ocean for fun whereas an experienced fisherman who captures thousands of fish each day making fun of the person who casually picked a fish for fun is the real bankrupt personality here Its like the Experienced fisherman laughing at Albert Einstein's poor fishing skills

 

[shmu26]

Its like the Experienced fisherman laughing at Albert Einstein's poor fishing skills

Great line.

 

[Handsome Recluse]

When i mention Average Joe, by this i mean the classic computer user just browsing, gaming, social media-ing and working...if you are participating on any security forums for more than few days; you aren't Average Joe anymore. You may still be a noob tough

Unless the distribution is completely skewed, those not participating won't be average, would they?

 

[plat1098]

I read it like the ones with experience and expertise are disparaging those who aren't in the same tiny little circle. "Noob" and "Average Joe" can be disparaging to those who participate here in some way, especially when you already know where you stand relative to the others. I enjoy the use of OSArmor and it's interesting to learn a bit about how it interacts with Windows. I'll just maintain that frame of mind and ignore the rest.

 

[AtlBo]

3 ReHIPS with isolation disabled

ReHIPS can be used as an anti-exe, if you just delete the rules for the isolated programs. And what's more, the limitations of the demo version will not apply. I tried it, it works great.

Interesting. Thanks for mentioning this.

 

[Andy Ful]

...
3 ReHIPS with isolation disabled
...

I tested the newest version of ReHIPS (as anti-exe). It is as good as NVTERP in blocking payload execution from scripts. I wait for the new version of OSArmor to test.

 

[ForgottenSeer 58943]

When i mention Average Joe, by this i mean the classic computer user just browsing, gaming, social media-ing and working...if you are participating on any security forums for more than few days; you aren't Average Joe anymore. You may still be a noob tough

The thing is, enterprise/corporate can be secured better than most home users simply by virtue of Windows Pro, AD, Radius and GP control, VDOMS, VLANS and active SIEM. It isn't uncommon in for us to push out GPs that disable windows scripting, .net, and whatever else the environment needs. Out of the box Windows is incredibly insecure, it can be made 'somewhat' secure in a controlled enterprise environment. Once that is done an endpoint AV is dropped on the systems and the whole kit is put behind a UTM/NGFW and things are much more secure.

This is how we operate in a management environment with 33,000 endpoints and not spend 24/7 doing malware cleanups and ransomware removals. Of course with a targeted attack all bets are off. A threat actor will observe, probe and patiently craft a specific attack to intrude on the network. However getting into a network and moving laterally within the network are two very different things even for a skilled attacker. If you want to keep most intruders out you'll prevent laterally movement with tagged VLANS and policy based routing, control ingress/egress and setup policy limitations.

 

[AtlBo]

I tested the newest version of ReHIPS (as anti-exe). It is as good as NVTERP in blocking payload execution from scripts. I wait for the new version of OSArmor to test.

3 ReHIPS with isolation disabled

@shmu26, somehow I ended up with chrome.exe appearing as an unbound program. I think I deleted the default rule and created one manually for it to run outside containment. So this appears to be one way to keep isolation enabled while using Chrome without restriction. I still have IE and Firefox running in a container.

 

[Andy Ful]

The option 'Block any process executed from wscript.exe' does not work properly on my computer. I tested, for example, the below VBS script:

Set WshShell = CreateObject("WScript.Shell")
WshShell.Run("C:\Users\Public\Downloads\osarmor_setup.exe")
WScript.Quit

In my previous tests WScript.Shell method was blocked by OSArmor. Yet, I noticed that it is not always blocked.
Even when it has been blocked, I can still execute it by double-clicking one or more times on the script file.