NoVirusThanks Registry Guard Service

[OXYGEN THIEF]

NoVirusThanks Registry Guard Service to mały i bezpłatny program który pozwala zablokować wybranym procesom możliwość zapisywania/odczytywania/kasowania wybranych kluczy rejestru i ich wartości.Program może być użyty na przykład do zapobiegania infekcjom malware które często wykorzystują auto-start.

Zaloguj lub Zarejestruj się aby zobaczyć!

 

[Jarom]

NoVirusThanks Registry Guard Service 1.5.0.0

[13-July-2017] v1.5.0.0
+ Added option to log events to Windows Event Log

[21-May-2017] v1.4.0.0
+ Improved deletion of log files older than N days
+ By default, delete logs older than 30 days

[24-Apr-2017] v1.3.0.0
+ Added "Passive Mode" useful to test rules without blocking the registry modifications

[30-Mar-2017] v1.2.0.0
+ Fixed multi-line comments in certain situations when they were executed instead of stripped

[24-Mar-2017] v1.1.0.0
+ Log the new value to Logs (when performing a write operation on a value's contents)
+ Added [%OPR%: RENAME_KEY] option to prevent processes from renaming a registry key
Example: [%OPR%: RENAME_KEY] [%EXE%: *] [%KEY%: *\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
// prevents "Run" key from being renamed
+ Added dynamic unloading of driver + deletion
+ Added DeleteLogsOlderThanNDays option in Config.ini
+ Updated the Rules.db to include rules to block the "Double Agent" PoC
+ Appended \Logs\ to LogPath

[23-Feb-2016] v1.0.0.0
+ Initial release

Zaloguj lub Zarejestruj się aby zobaczyć!