Tomasz Bielski
Bardzo aktywny
No właśnie nie. Bo wnioskująć po nazwie jest on i płatny i darmowy. Pobrałem go z instalek i z oficjalnej - i za każdym razem pisało, że 30 dni użytkowania TRIAL. Więc po co to w nazwie "/Free".
mariuszsaj napisał:Witam.Mam pytanie do użytkowników tego dobrego softu-jaka może być przyczyna że nie chce się uruchomić wraz ze startem Windowsa.Windows 7 64,na kompie SpyShelter Premium i Malwarebytes Pro,usługa NoVirusThanks się uruchamia,w opcjach programu startuj z Windows zaznaczone.
New build 2 V10:
Please note that I updated only the x64 version.
Changelog:
Quote:
+ Added option "Allow safe modules to be loaded by Rundll32.exe"
+ Removed the pre-defined list of safe commandline strings
+ Added option "View commandline string" in the popupmenu of Events tab
+ Added option "View commandline string" in the popupmenu of CommandLine tab
+ Removed completely whitelist commandline that used md5 hash
+ Enable "Manage Trusted Vendors" only when the associated radiobutton is checked
+ Optimized the initial whitelist for Windows 8.1
+ Optimized the configuration wizard
+Fully support for Windows 8.1 32-bit/64-bit
+Changed a little the GUI
+Added option in "Settings"->"Signed Processes"->"Disable the function that checks if a process is signed"
+Added a new mode named "Learning Mode": when it is enabled, it auto-whitelists all the executed processes, except for processes located in Temp folder, starting with tmp* (setup remnants), etc.
+Changed the buttons "Allow/Block" in the alert dialog (let me know if you like them or how do you prefer they should look)
+Minor fixes and optimizations
- Merged "Trusted Folders" with "Path Comparison"
- Merged "Edit selected item" with "View/edit commandline string" in "WhiteList"->"CommandLine" RMB
- Added "Remove selected item" and "Copy to Clipboard" in "WhiteList"->"Path Comparison" RMB
- Fixed the bug about the password protection window and the X button
- Moved "Password protected processes" and "Password protected commandline strings" to "Settings"->"Password" TAB
- Fixed display of buttons with the arrow in the prompt dialog
- When the trayicon is double-clicked it shows/hide the main window
- Removed the alert messages when the OK or Cancel button is pressed in "WhiteList"->"CommandLine" RMB
- Fixed the bug in "Learning Mode"->"Enable for 1 hour"
- Added option to enable "Learning Mode" until reboot and permanently
- Other small usability optimizations
+ Improved detection of new processes using a kernel-mode driver
+ Detects code executed by using thread local storage (TLS) callbacks (thanks to Fabian Wosar and Liviu Itoafa for their PoC)
+ Do not show balloon hints when the PC is booted and the protection is enabled
+ Added option "Password protect disabling of real-time protection"
+ Remember the last enabled Protection Mode when ERP is closed
+ Optimized the loading of blacklist and whitelists when the PC is booted
+ Updated the menu Help -> Online Help File
+ Added option "View commandline string" in the popupmenu of Events/CommandLine tab
+ Removed completely whitelist commandline that used MD5 hash
+ Optimized the graphical user interface, settings window and prompt dialog
+ Simplified the configuration wizard
+ Merged the "Trusted Folders" tab with "Path Comparison" tab
+ Minor fixes and optimizations
These issues should be fixed:
-Sometimes when ERP is closed or the PC is restarted the lists are emptied
-Sometimes when the PC is booted I receive "Failed to retrieve driver handle!"
+ Added more safe command-line strings in the Recommended Configuration
+ Improved detection of parent process path and PID
+ Fixed display of blank strings for process name on Windows 8.1 64-bit
+ Fixed the issue of empty whitelist/blacklist
Now ERP correctly detects the parent process of Sandboxie, so it is also possible to auto-allow all processes started inside Sandboxie (Start.exe as parent process).
To update, follow these steps:
1) Close EXERadar (if it is running)
2) Uninstall EXERadar (you can keep your current settings)
3) Install the new build
A reboot is not needed.
What's new ?
+ Improved the main GUI and other application windows
+ Added option to change the application header background using pre-defined flat colors (Settings -> Header Color)
+ Re-organized Settings -> Signed Processes tab
+ Re-organized Settings -> Password Options tab
+ Added more useful options in all right-click menus (whitelists, events, etc)
+ Optimized the alert dialog
+ Optimized the block-notify window
+ Improved saving events to log file
+ Save the PC name in the log file