Reply to thread

Message

<blockquote data-quote="WiseVector" data-source="post: 860887" data-attributes="member: 76851">Thanks for your interests in WiseVector StopX.WiseVector StopX V2.6 will introduce a new feature called code-level tracer. This name sounds a bit odd because we don&#039;t have a better idea to name this feature<img src="data:image/gif;base64,R0lGODlhAQABAIAAAAAAAP///yH5BAEAAAAALAAAAAABAAEAAAIBRAA7" class="smilie smilie--sprite smilie--sprite111" alt=":(" title="Frown&nbsp; &nbsp; :(" loading="lazy" data-shortname=":(" />The new feature is meant to detect DLL side-loading (Signed exe+Malicious dll). Dll side-loading is an ancient attack technique but it is still a nightmare for most AV today. The new function will provide code-level visibility into malicious events so it can even make WV to detect Dll injection at post-injection stage.Now with real-time memory inspection(V2.5), Hijack thread scanner(V2.5), New machine learning model to detect banking trojans (We bring a new model in WV 2.5 to detect special banking trojans (Metamorfo trojan for example). These trojans often abuse Windows Installer MSI to download archives that contain multicomponent DLL side-loading banking trojan. We are very glad to see WV become more and more efficient in detection of advanced stealth threats.We also need to fix two major problems exist in V2.5,.False positives on installers created with WinRAR, Inno Setup and NSIS..Conflicts with other security program when real-time memory inspection enabled.</blockquote>

[QUOTE="WiseVector, post: 860887, member: 76851"] Thanks for your interests in WiseVector StopX. WiseVector StopX V2.6 will introduce a new feature called code-level tracer. This name sounds a bit odd because we don't have a better idea to name this feature:( The new feature is meant to detect DLL side-loading (Signed exe+Malicious dll). Dll side-loading is an ancient attack technique but it is still a nightmare for most AV today. The new function will provide code-level visibility into malicious events so it can even make WV to detect Dll injection at post-injection stage. Now with real-time memory inspection(V2.5), Hijack thread scanner(V2.5), New machine learning model to detect banking trojans (We bring a new model in WV 2.5 to detect special banking trojans (Metamorfo trojan for example). These trojans often abuse Windows Installer MSI to download archives that contain multicomponent DLL side-loading banking trojan. We are very glad to see WV become more and more efficient in detection of advanced stealth threats. We also need to fix two major problems exist in V2.5, .False positives on installers created with WinRAR, Inno Setup and NSIS. .Conflicts with other security program when real-time memory inspection enabled. [/QUOTE]

Verification