Q&A Regarding on NVT EXE Radar PRO?

  • This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn more.

jamescv7

Level 61
Verified
Mar 15, 2011
12,660
17,639
Operating System
Windows 10
Installed Antivirus
Microsoft
#21
@Davidov: What do you mean? Voodoshield provide as much as possible an anti-exploit functionality that blocks any possible scripts to execute same goes to NVT too.
 

CMLew

Level 22
Oct 30, 2015
1,176
2,961
Operating System
Windows 10
Installed Antivirus
Default-Deny
#22
@Davidov: What do you mean? Voodoshield provide as much as possible an anti-exploit functionality that blocks any possible scripts to execute same goes to NVT too.
I thought NVT by itself is a pure anti-executable?
 
Oct 23, 2014
994
2,664
#24
@Davidov: What do you mean? Voodoshield provide as much as possible an anti-exploit functionality that blocks any possible scripts to execute same goes to NVT too.
Apparently VoodooShield had integrated a basic anti-exploit function. I don't think EXE Radar Pro has that, at most what it does have is the "Vulnerable process" function which I think could help protect processes from being exploited. Though other users like @Umbra and @hjlbx could confirm or deny that.
 

CMLew

Level 22
Oct 30, 2015
1,176
2,961
Operating System
Windows 10
Installed Antivirus
Default-Deny
#26
Apparently VoodooShield had integrated a basic anti-exploit function. I don't think EXE Radar Pro has that, at most what it does have is the "Vulnerable process" function which I think could help protect processes from being exploited. Though other users like @Umbra and @hjlbx could confirm or deny that.
That's what I thought too.
Possibly what could happen is that in NVT you can whitelist them and put it into vulnerable process. Then set it to alert mode. But that's about it.
Correct me if I'm wrong. :oops:

Anyway, side topic here.
Another question on NVT too.

Recently I've been updating softwares like ZAM, EIS and such.
I realise when NVT set to Alert mode, it prompt twice: one is exe and another one is TMP.
Is that normal? Thought NVT wouldn't block/alert those non-exe?
 

Umbra

Level 61
Content Creator
Verified
May 16, 2011
17,471
30,678
Operating System
Windows 10
Installed Antivirus
Default-Deny
#27
NVT doesn't block exploit, but it monitors the child processes, that is maybe why the tmp files are detected.