Reply to thread

Message

<blockquote data-quote="NoVirusThanks" data-source="post: 728946" data-attributes="member: 68429">Here is a new v1.4 (pre-release) test60:<a href="http://downloads.novirusthanks.org/files/osarmor_setup_1.4_test60.exe" target="_blank">http://downloads.novirusthanks.org/files/osarmor_setup_1.4_test60.exe</a>*** Please do not share the download link, we will delete it when we&#039;ll release the official v1.4 ***So far this is what&#039;s new compared to the previous pre-release:+ Improved Block suspicious processes+ Improved Block suspicious command-line strings+ Improved Block processes located in suspicious folders+ Added self-protection against process termination via kernel-mode driver+ Kernel-mode drivers for self-protection are co-signed by Microsoft+ Only Task Manager can terminate OSArmorDevSvc.exe and OSArmorDevUI.exe+ Save and restore window size of Configurator GUI+ Instead of playing the beep sound it now plays a WAV sound when something is blocked+ Events are now saved as topmost on the log file+ Minor fixes and optimizations+ Fixed some false positivesTo install it, first uninstall the previous build, then reboot (not really needed but may help), and install the new build.If you find any false positive or issue please let me know. [USER=70265]@128BPM[/USER]Please try this new build, it should fix that FP.[USER=50782]@Windows_Security[/USER] Do you still have the log file with the blocked events during the Windows 7 updates?The internal whitelisting rules should take care of them.</blockquote>

[QUOTE="NoVirusThanks, post: 728946, member: 68429"] Here is a new v1.4 (pre-release) test60: [URL]http://downloads.novirusthanks.org/files/osarmor_setup_1.4_test60.exe[/URL] *** Please do not share the download link, we will delete it when we'll release the official v1.4 *** So far this is what's new compared to the previous pre-release: + Improved Block suspicious processes + Improved Block suspicious command-line strings + Improved Block processes located in suspicious folders + Added self-protection against process termination via kernel-mode driver + Kernel-mode drivers for self-protection are co-signed by Microsoft + Only Task Manager can terminate OSArmorDevSvc.exe and OSArmorDevUI.exe + Save and restore window size of Configurator GUI + Instead of playing the beep sound it now plays a WAV sound when something is blocked + Events are now saved as topmost on the log file + Minor fixes and optimizations + Fixed some false positives To install it, first uninstall the previous build, then reboot (not really needed but may help), and install the new build. If you find any false positive or issue please let me know. [USER=70265]@128BPM[/USER] Please try this new build, it should fix that FP. [USER=50782]@Windows_Security[/USER] Do you still have the log file with the blocked events during the Windows 7 updates? The internal whitelisting rules should take care of them. [/QUOTE]

Verification