CryptoPrevent

Separated Prevent BCDEDIT.EXE option from the default protection settings, and put it in the Advanced menu. It was interfering with some backup applications.

Kliknij aby rozwinąć...

- Fixed a setting not being remembered correctly on program relaunch.
- Added some email features for the Bulk Premium custom installers.

Kliknij aby rozwinąć...

CryptoPrevent is no longer based solely on Windows software restriction policies, and now includes a real-time filter and definitions files/updates!

New ‘Filter Module’ that can filter certain executables against hash based definitions, can also filter based on other criteria using a more complex rule set, and allow user the option to run the file anyway. Enabled for CPL, SCR, and PIF files by default – advanced options allow to enable for EXE/COM files also (experimental!)
New Policy Editor for software restriction policies, create your own custom path rules (premium feature.) You can also view, search, and selectively delete blacklist policies in effect.
User defined hash rules for MD5/SHA256 (meaning, you can create your own hash based definitions for the Filter Module.)
Separated all main protection policies so they may be individually applied or removed.
Added policy to disable Windows Sidebar/Gadgets due to security vulnerabilities.
Daily updates are now for the new definitions, and a new weekly schedule will be created for application updates.
New email options for bulk premium custom installers.
Easier to install and apply protection with the free version.

Kliknij aby rozwinąć...

Minor UI tweaks and added some additional information and links to the interface.

Kliknij aby rozwinąć...

Fix for running certain screen savers with .SCR filtering enabled.

Kliknij aby rozwinąć...

Fix for a minor annoyance of mine, not worth mentioning.

Kliknij aby rozwinąć...

Improved Recycle Bin executable protection.
Added feature to remove ALL software restriction policies (created by CryptoPrevent or not) from the Advanced > Software Restriction Policies menu.
Added feature to block %localappdata%\* in Advanced menu > Software Restriction Policies (max protection, but this includes a block on %temp% so it may cause issues with legitimate apps; generally not recommended.)
Added ability to install (or force install) from CryptoPrevent portable and uninstall/force uninstall from the installed version. Force option is only offered if standard methods fail. Not 100% perfect so only use the force option if absolutely necessary (e.g. the installer won’t run due to access denied errors.)
Bulk Installers now have the option of creating custom whitelist rules during installation.
Misc tweaks.

Kliknij aby rozwinąć...

Simplified and easy to understand interface, replacing the many obscurely labeled protection option check boxes with a few simple protection “levels” to select from (the old interface still exists in the Advanced menu, and it has been updated as well.)
Updated to not trigger Malwarebytes Anti-Malware detections with the installed version (thanks to the MBAM research team.)
Improved Filter Module function.
Changed recommended defaults slightly.
Enabled optional “Experimental Protection” level (the Experimental EXE/COM settings in the Filter Module.) NOTE: This setting is not largely tested and is NOT recommended for most people, as there may be side effects which could potentially cause system instability. Please understand I cannot accept responsibility for your usage of this setting. If you do wish to use this setting, I would love to hear your feedback on any issues you suspect may be related to having it enabled.

Kliknij aby rozwinąć...

Added new misc. protections for known malware processes (specifically dealing with “child porn” related ransomware going around currently)
which is applied to Default level of protection and higher, or listed as the “Known malware processes” check in the Advanced interface.

Fixed two bugs associated with creating custom whitelist policies in the Software Restrictions Policy Editor (Advanced interface)

Kliknij aby rozwinąć...

CryptoPrevent v7.3.x brings some new features, more clarity on protection levels, and improved protection
First, CryptoPrevent now supports SSL/TLS encryption and StartTLS for your SMTP server settings! This enables support for a wider variety of SMTP servers, allowing users requiring this level of encryption to configure their email alert functionality. Previously only SSL was supported
Second, CryptoPrevent’s experimental “Program Filtering” has reached BETA status. Program Filtering compares executable files to a hash based definitions system consisting of a database of current ransomware threats. It has been tested well on every supported Windows OS, and unsupported OSes were excluded. Supported Windows versions are XP, Win 7 with SP1, Win 8.x, and Win 10. Sorry, Windows Vista is not supported for Program Filtering

Kliknij aby rozwinąć...

Resolved an issue with the Program Filtering BETA which caused it to incorrectly flag existing security software as a threat that matched hash definitions.

Testing resolution of an issue preventing the Program Filtering BETA from logging blocked events to the event logs.

Kliknij aby rozwinąć...

Corrected a minor bug with the blacklisting rule creation for Max protection.

Kliknij aby rozwinąć...

Some reports indicated that there were issues with existing security software and the BETA protection, however with the 7.4.2 release those issues appear to be resolved.

Kliknij aby rozwinąć...

New: Folder Watch – Monitors and protects common folders from items that match malware definitions.

New: Submit Malicious Files – This will allow you to submit malicious files (which are not in our malware definitions) to review for inclusion in the default definitions.

Improved: Program Filtering Protection – The original ‘BETA’ program filtering protections were very effective, but caused issues with running certain programs; now it offers vastly improved reliability as it is based on the new code platform of the coming 3rd generation ‘d7x’ PC technician utilities, it is thoroughly tested, and recommended for mass usage!

Improved: SRP Protection – The original protection method since CryptoPrevent version 1 was automatically created “SRP” rules (aka “Software Restriction Policies” which are normally only available in “Professional” editions of the Windows operating system and only scriptable across Active Directory/domain environments.) CryptoPrevent v1 created 8 SRP rules for protection and v7.4.21 (the final v7) created just under 400 SRP rules, while version 8.0 currently creates just under 4000! That’s 10x as many as v7 and 500x as many as v1!

New/Improved: Expanded Malware Definitions (Optional) – Expanded malware and ransomware detection definitions add cutting edge detection power to CryptoPrevent, and are updated at least weekly, although they may increase the risk of ‘false positive’ malware detections. (These are entirely optional; you may elect to keep the standard definition set with less risk of ‘false positive’ detections.)

Kliknij aby rozwinąć...

CryptoPrevent 8.0.1.14

New:

• Folder Watch – Monitors and protects common folders from items that match malware definitions.
• Submit Malicious Files – This will allow you to submit malicious files (which are not in our malware definitions) to review for inclusion in the default definitions.

Improved:

• Program Filtering Protection – The original ‘BETA’ program filtering protections were very effective, but caused issues with running certain programs; now it offers vastly improved reliability as it is based on the new code platform of the coming 3rd generation ‘d7x’ PC technician utilities, it is thoroughly tested, and recommended for mass usage!
• SRP Protection – The original protection method since CryptoPrevent version 1 was automatically created “SRP” rules (aka “Software Restriction Policies” which are normally only available in “Professional” editions of the Windows operating system and only scriptable across Active Directory/domain environments.) CryptoPrevent v1 created 8 SRP rules for protection and v7.4.21 (the final v7) created just under 400 SRP rules, while version 8.0 currently creates just under 4000! That’s 10x as many as v7 and 500x as many as v1!

New/Improved:

• Expanded Malware Definitions (Optional) – Expanded malware and ransomware detection definitions add cutting edge detection power to CryptoPrevent, and are updated at least weekly, although they may increase the risk of ‘false positive’ malware detections. (These are entirely optional; you may elect to keep the standard definition set with less risk of ‘false positive’ detections.)

Kliknij aby rozwinąć...

v8.0.3.9 (May 19th, 2017)

• Major performance increase when apply protections
  • from the command line and from the GUI
• Corrected issues with Windows 8-10 Scaling
  • DPI changes could still cause problems if defined manually and not with the scaling in Windows
  • Windows XP-7 will still get warning
• Corrected minor interface issue
  • Issue resulted in some changes in 8.0.3.8
    • Unable to read tabs, but still clickable
    • GUI subtabs looked step sided/pushed to the right some
  • Applied to the Protection Settings sub tabs
  • Applied to the Policy Editor sub tabs

We STILL have several more improvements already in development and testing, so there should be additional updates in the coming days.
You can subscribe to this category of our blog to stay current on any new additions or changes!

Kliknij aby rozwinąć...