Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Security Apps
Other security for Windows, Mac, Linux
NVT Smart Object Blocker Update Thread
Message
<blockquote data-quote="Raul90" data-source="post: 444056" data-attributes="member: 1217"><p>Would just like to share some info from <em>Wilders </em>about SOB, (ask a friend to try--take over my trials-- for a while and post it there) because I was busy with family matters and I am still not a registered member there. </p><p></p><p>There was some luck in blocking opera_autoupdate.exe with rules:</p><p></p><p><em>[%PROCESS%: *\opera_autoupdate.exe][%PARENTPROCESS%: *\opera.exe]</em></p><p><em>[%PROCESS%: *\opera_crashreporter.exe][%PARENTPROCESS%: *\opera.exe]</em></p><p></p><p>But it was so with the deletion of default rules for Behavioral_Process.DB / Exclude_Behavioral_Process.DB (missed that when I tried it out)</p><p></p><p><em>a.<strong>Block Rules_Process.DB</strong></em></p><p><em>-- [%PARENTPROCESS%: *\opera.exe]</em></p><p><em>b.<strong>Exclude Rules_Behavioral</strong></em></p><p><em>-- [%FILESIGNER%: Opera Software ASA] [%PARENTPROCESS%: *\opera.exe]</em></p><p></p><p><img src="http://imgur.com/rk6thzA.png" alt="" class="fr-fic fr-dii fr-draggable " style="" /></p><p></p><p>SOB logs:</p><p></p><p>[10/14/2015 2:15:38 AM] Blocked Process: C:\Program Files (x86)\Opera\31.0.1889.131\opera_crashreporter.exe</p><p>Rule: [%PROCESS%: *\opera_crashreporter.exe][%PARENTPROCESS%: *\opera.exe]</p><p>Command Line: C:\Program Files (x86)\Opera\31.0.1889.131\opera_crashreporter.exe</p><p>Process Id: 3524</p><p>Parent Process Id: 3104</p><p>Parent Process: C:\Program Files (x86)\Opera\31.0.1889.131\opera.exe</p><p></p><p>[10/14/2015 2:15:43 AM] Blocked Process: C:\Program Files (x86)\Opera\31.0.1889.131\opera_autoupdate.exe</p><p>Rule: [%PROCESS%: *\opera_autoupdate.exe][%PARENTPROCESS%: *\opera.exe]</p><p>Command Line: C:\Program Files (x86)\Opera\31.0.1889.131\opera_autoupdate.exe</p><p>Process Id: 1236</p><p>Parent Process Id: 3104</p><p>Parent Process: C:\Program Files (x86)\Opera\31.0.1889.131\opera.exe</p><p></p><p>I still need to work things out and maybe later on try it again here. The Wilders link of the reply and post is <a href="http://www.wilderssecurity.com/threads/smart-object-blocker-block-exe-dll-drivers.378369/page-9#post-2532520" target="_blank">HERE</a></p></blockquote><p></p>
[QUOTE="Raul90, post: 444056, member: 1217"] Would just like to share some info from [I]Wilders [/I]about SOB, (ask a friend to try--take over my trials-- for a while and post it there) because I was busy with family matters and I am still not a registered member there. There was some luck in blocking opera_autoupdate.exe with rules: [I][%PROCESS%: *\opera_autoupdate.exe][%PARENTPROCESS%: *\opera.exe] [%PROCESS%: *\opera_crashreporter.exe][%PARENTPROCESS%: *\opera.exe][/I] But it was so with the deletion of default rules for Behavioral_Process.DB / Exclude_Behavioral_Process.DB (missed that when I tried it out) [I]a.[B]Block Rules_Process.DB[/B] -- [%PARENTPROCESS%: *\opera.exe] b.[B]Exclude Rules_Behavioral[/B] -- [%FILESIGNER%: Opera Software ASA] [%PARENTPROCESS%: *\opera.exe][/I] [img]http://imgur.com/rk6thzA.png[/img] SOB logs: [10/14/2015 2:15:38 AM] Blocked Process: C:\Program Files (x86)\Opera\31.0.1889.131\opera_crashreporter.exe Rule: [%PROCESS%: *\opera_crashreporter.exe][%PARENTPROCESS%: *\opera.exe] Command Line: C:\Program Files (x86)\Opera\31.0.1889.131\opera_crashreporter.exe Process Id: 3524 Parent Process Id: 3104 Parent Process: C:\Program Files (x86)\Opera\31.0.1889.131\opera.exe [10/14/2015 2:15:43 AM] Blocked Process: C:\Program Files (x86)\Opera\31.0.1889.131\opera_autoupdate.exe Rule: [%PROCESS%: *\opera_autoupdate.exe][%PARENTPROCESS%: *\opera.exe] Command Line: C:\Program Files (x86)\Opera\31.0.1889.131\opera_autoupdate.exe Process Id: 1236 Parent Process Id: 3104 Parent Process: C:\Program Files (x86)\Opera\31.0.1889.131\opera.exe I still need to work things out and maybe later on try it again here. The Wilders link of the reply and post is [url=http://www.wilderssecurity.com/threads/smart-object-blocker-block-exe-dll-drivers.378369/page-9#post-2532520]HERE[/url] [/QUOTE]
Insert quotes…
Verification
Post reply
Top