Advice Request OS Armor test

[DDE_Server]

Hi everbody,
today i wanted to try OS Armor as a compliment for my Antivirus(Webroot secure anywhere for now ). i disabled Webroot protection and executed Ecisr test file .exe . it did not not respond (although the status in os armor shows that the protection i s enabled
also i found that the desktop icons hanged out and freezed. i restarted it explorer.exe from process hacker and everything is ok now.
i want to know if this was a failure from os armor or i misunderstood something.
i want to test if Anti-exe i use is effective to be second defense if my antivirus is bypassed.
what is your opinion guys ?? the version i use is 1.4.1

 

[SHvFl]

Os armor is not an anti exe. It blocks only specific predefined stuff you can enable from the gui.

 

[DDE_Server]

Os armor is not an anti exe. It blocks only specific predefined stuff you can enable from the gui.

so it is not something as voodoo shield ??

 

[bribon77]

VodooShield is an anti-exe, NVT EXE Radar Pro is also an anti-exe, OSArmor is not as you have already been told.

 

[Nightwalker]

so it is not something as voodoo shield ??

It isnt, it is more akin to a post-exploitation solution with mitigation techniques.

It wont stop a ransomware payload per se, but it will stop a malicious macro in Office for example and will stop exploitation of some vulnerable Windows components (like Powershell).

It is a unobtrusive solution with very low system impact, it has value in almost any security combo.

 

[shmu26]

OSArmor will do some or many of the things that Voodoo does, it depends a lot on the settings you enable. If you enable every possible setting in OSArmor, my guess is that it will protect pretty well, even without AV or other security. The only thing that will get through is signed malware, but OSA will stop the payload. AFAIK.