What's new in NoVirusThanks EXE Radar Pro 3.0.0.0 Build 15
Mar 26, 2014
- Improved detection of new processes using a kernel-mode driver
- Detects code executed by using thread local storage (TLS) callbacks (thanks to Fabian Wosar and Liviu Itoafa for their PoC)
- Do not show balloon hints when the PC is booted and the protection is enabled
- Added option "Password protect disabling of real-time protection"
- Remember the last enabled Protection Mode when ERP is closed
- Optimized the loading of blacklist and whitelists when the PC is booted
- Updated the menu Help -> Online Help File
- Added option "View commandline string" in the popupmenu of Events/CommandLine tab
- Removed completely whitelist commandline that used MD5 hash
- Optimized the graphical user interface, settings window and prompt dialog
- Simplified the configuration wizard
- Merged the "Trusted Folders" tab with "Path Comparison" tab
- Minor fixes and optimizations
New in NoVirusThanks EXE Radar Pro 2.7.7.0 (Jul 20, 2013)
- Added buttons Allow and Block with drop-down menu in the alert dialog
- Optimized list of whitelisted commandline strings for x64 and x86 OS
- Changed file description of services to "NoVirusThanks EXE Radar Pro
- x64/x86 Service"
- Added option "Notify me when a new version is available"
- After Menu-Restore Default Settings action: "Close the balloon hints
- after" is set to 5 secs
- Fixed issue when exporting an empty list, when the settings are
- imported, the list is cleared correctly
- Added option "Check for Updates" in Help menu
- Created an auto-updater application used to automatically update to
- the latest version
- If user do not want to update to the new version, remind of the new
- version available everytime ERP is started
- When the main window is maximized and then closed, the window state is
- saved correctly
- Added option "Allow Microsoft Windows 8 Start Screen processes" to
- reduce popups in Windows 8 OS
- Optimized Settings window (removed icons, added Signed Files tab,
- optimized text, etc)
- Added new custom mode: "Lockdown Mode (Basic)" that is same as
- "Lockdown Mode" but it ignores the "Vulnerable Processes"
- Added new custom mode: "Lockdown Mode (Advanced)" that is same as the
- old "Lockdown Mode" but it will show an alert dialog for "Vulnerable
- Processes"
- Added new custom mode: "Lockdown Mode (Extreme)" that is same as
- "Lockdown Mode" but it will block "Vulnerable Processes"
- Added new custom mode: "Alert Mode" that is the default mode (alert
- when an unknown process is executed)
- Updated the tray icon popup menu with the new custom modes
- Removed the tab "Custom Modes" from the Settings window
- Renamed option "Custom Modes" to "Protection Modes" in tray icon
- Optimized the tab "Balloon Hints" in the Settings window
- Protection mode can be changed only from the tray icon
- Optimized saving of whitelists
- Added options to reset lists to default, export lists and import lists
- Added option "Search Hash on VirusTotal" on Quarantine, Blacklist and
- Whitelist RMB
- Fixed saving of whitelists items from the alert dialog
- Optimized auto-generated whitelist of system processes for Microsoft
- Windows 8.1 OS
- Optimized the configuration wizard
- Minor fixes and optimizations
New in NoVirusThanks EXE Radar Pro 2.7.0.0 (Nov 19, 2012)
- Added cleanup of the old versions of a whitelisted exe when the user whitelists a new version
- Fixed whitelist/blackist of exes in particular situation
- Fixed service timeout problem when user installs the application in a custom location
New in NoVirusThanks EXE Radar Pro 2.6.6.0 (Nov 19, 2012)
- Fixed IE problem that allowed it to start a process if "Auto-Allow System Processes" was checked
New in NoVirusThanks EXE Radar Pro 2.6.5.0 (Nov 19, 2012)
- Added support for 64-bit OS
- Minor fixes
New in NoVirusThanks EXE Radar Pro 2.6.0.0 (Nov 19, 2012)
- Updated to use the core of the Pro version
- Removed few features, available in the Pro version
- Moved Settings tab in Menu->Settings
- Minor fixes and optimizations
New in NoVirusThanks EXE Radar Pro 1.3.6.5 (Mar 29, 2012)
- Fixed right-click menus in the Alert Dialog
- Fixed tray icon when injection fails
New in NoVirusThanks EXE Radar Pro 1.3.6.4 (Mar 29, 2012)
- Optimized Process Behavioral Engine
- Optimized first run WhiteList for Windows XP OS
- Fixed small memory leak (CoTaskMemFree)
- Removed additional features (enabled in PRO version)
- Optimized GUI
- Fixed "Menu"->"Add a file to Whitelist"
- Added "Enable/Disable Expert Mode"
- Minor fixes and optimizations
- Signed EXERadar.exe
- Added "Splash Screen" (removed in PRO version)
- Added tray->"Processes"->"View Running Processes"
- Added tray->"Processes"->"WhiteList All Processes"
- Added tray->"Processes"->"WhiteList System Processes"
- Added "Allow all software from the Programs Files folders"
- Added "Whitelist"->"Add"
- Added "Blacklist"->"Add"
New in NoVirusThanks EXE Radar Pro 1.3.4.0 (Oct 18, 2011)
- Added "Automatically Update Database" (every 1 hour) for "Malware Signature Scanner"
- Added "Enable EXE Radar Remote PHP Notification"
- Added button to check UID
- Updated "Export/Import Settings"
- Fixed save of remote PHP notification config
- Updated "Reset settings to defaults"
- Added "Enable Custom Scanners" -> Integrate any cmdline AV scanner (multiple scanners allowed)
- Add as many scanners as you want
- Easy to configure INI file
- Support Yara
- Option to show commandline windows (for testing)
- Option to test scanners with a custom file (ex: eicar.com)
- Added new "Rules" structure (more customizable from users)
- Added "Enable "Allow ALL" Mode (Allow Any Process)"
- Optimized Malwarehash.com API query system
- Now "Rules" are checked before "Custom Modes"
- Fixed "Password Protect Stealth Mode"
- Fixed "Delete File" in "Events" TAB (disabled if no items)
- Minor fixes
New in NoVirusThanks EXE Radar Pro 1.3.3.3 (Oct 18, 2011)
- Added "View File Content..." for "Block Processes by File Content Using Regex"
- Added "Behavioral" -> "Malware Signatures Scanner" (we maintain our own DBs with regex, malware processes, signatures, etc)
- Added "Behavioral" -> "Malwarehash.com API Service" -> Cloud-Based Process Scanner that uses malwarehash.com service
- Added "Remote PHP POST Notification on Process Execution"
- Included an example PHP script for Remote PHP Notification
- Updated Hook Module to v1.3.2.0
- Minor fixes and optimizations
New in NoVirusThanks EXE Radar Pro 1.3.3.2 (Oct 18, 2011)
- Added "Block processes by File Extension" + Manage List
- Added "Remove All" in "Manage List" forms
- Fixed "Block Processes Using Regular Expressions"
- Fixed "Remove" in "Manage List" forms
- Added "Events" -> "Delete File"
- Minor fixes
New in NoVirusThanks EXE Radar Pro 1.3.3.1 (Oct 18, 2011)
- Fixed Alert Dialog -> "View File Content"
- Fixed Menu -> "Load Settings"
- Fixed Menu -> "Reset Settings to Defaults"
- Fixed Alert Dialog -> "Add Certificate Signer"
- Optimized Settings TAB
- User can select the logs folder
- Remove multiple items in "Manage List"
- Minor fixes
New in NoVirusThanks EXE Radar Pro 1.3.3.0 (Oct 18, 2011)
- Added "Hint" on mouse-over in commandline parameter (Alert Dialog)
- Added right-click "Copy to Clipboard" on commandline parameter (Alert Dialog)
- Fixed "Rename extension to .ext" for Alert Dialog -> Block and Quarantine
- Added "Reset Settings to Defaults"
- Added new detection of Blackhole Exploit Kit and Best Exploit Pack payloads
- Added "Go in Stealth Mode when Windows Starts"
- Optimized "Alert if regsvr32 tries to load silently a DLL"
- Fixed "Alert ONLY for Processes Executed by Specific Caller Processes"
- Added "Check for Updates" to check if there is available a new product version
- Added "Menu" -> "Save Settings" -> To save all EXE Radar Pro settings in a single file
- Added "Menu" -> "Load Settings" -> To load all EXE Radar Pro settings from a single file
- Added "Processes" -> "Terminate Process BlackList File"
- Added right-click on "Process" (Alert Dialog) -> "View File Content" (using notepad.exe)
- Added "Block Processes that try to Run from USB"
- Added "Block Processes that try to Run from CD-ROM"
- Added "Block Processes that try to Run from Network Drives"
- Fixed "Bad Database Data!" error
- Added "Allow Digital Signature Owner" Manage Allowed List
- Added in the popups an option to add the current digital signature to the allowed list
- Added date column on BlackList and WhiteList TABs
- Added format byte size in the size column
- Added the ability to order the whitelist and blacklist by added date
- Added "Beep when Alerted"
- Added "Block Processes by File Content Using Regex" Manage List
New in NoVirusThanks EXE Radar Pro 1.3.2.0 (Oct 18, 2011)
- Optimized Behavioral Analysis to detect the new Blackhole Exploit Kit payload
- Optimized refresh of new processes in Processes TAB
- Show a message when operation has finished "WhiteList Entire System EXEs"
- Show a message when operation has finished "WhiteList Custom Folder EXEs"
- Fixed "Allow Signed Files" when Gaming Mode is enabled
- Added "Alert when regsvr32 tries to silently load a DLL"
- Added "Copy All Files To..." in "WhiteList" right-click menu
- Added "Copy All Files To..." in "BlackList" right-click menu
- Added "Copy All Processes To..." in "Processes" right-click menu
- Rename extension of quarantined files to .ext
- Added "Block Processes by Commandline Using Regex" Manage List
New in NoVirusThanks EXE Radar Pro 1.3.1.0 (Oct 18, 2011)
- Added "Behavioral" TAB
- Added "Action" -> "Block Process" if detected by Process Behavioral Analysis
- Added "Action" -> "Color Process Name in Red" if detected by Process Behavioral Analysis
- Fixed bug in TrayIcon -> Processes
- Set your own quarantine folder
- Optimized removal of processes protected by password
- Added "Menu" -> "WhiteList Entire System EXEs"
- Added "Menu" -> "WhiteList Custom Folder EXEs"
- Enabled "Allow System Processes" option for Gaming Mode
- Added option "Block Process Quarantine File" for "Behavioral" TAB
- Added "Are you sure you want the remove the entire blacklist?"
- Added "Are you sure you want the remove the entire whitelist?"
- Added button to remove master password
- Fixed a small bug which allowed 16-bit applications running in Windows Compatibility Mode to bypass the current 32-bit process execution protection
- Optimized Process Behavioral Analysis
New in NoVirusThanks EXE Radar Pro 1.3.0.0 (Oct 18, 2011)
- Added "Alert Dialog option" -> "Block File and Send To RecycleBin"
- Added "Alert Dialog option" -> "Block File and Send To Quarantine"
- Added Master Password to:
- Password Protect Execution of Specific Executables
- Password Protect Stealth Mode
- Sort items by column click in "Executables" TAB
- Show File Description and File Size in the Alert Dialog
- Added "Open/Clear Quarantine Folder"
- Partial Fix for Big Fonts
- Enabled "Allow Processes with Digital Signature" with Gaming Mode
New in NoVirusThanks EXE Radar Pro 1.2.1.0 (Oct 18, 2011)
- Added "Block Processes Executed by Specific Caller Processes" Manage processes list
- Added "Allow Processes Executed by Specific Caller Processes" Manage processes list
- Added "Block Processes Using Regular Expressions" Manage regex list
- Fixed Bug in "Self-Protection against termination" for Windows Vista/7 OS
- Optimized Uninstaller: it now asks if you want to delete the settings (default btn is NO)
- Optimized Gaming Mode
- Optimized Process Behavioral Analysis
- Show MD5 Hash in Alert Dialog
- Right-Click on MD5 Hash on Alert Dialog -> Search on Google
- Right-Click on MD5 Hash on Alert Dialog -> Copy to Clipboard
- Option to set default browser to use for "Search on Google"
- Make sure to not block system directories ("Block Processes Located in Custom Directories)
- Check if the file is a system file before add in the exclusions list (Allow System Protected Files)
- Added "CmdLine:" in Alert Dialog to see commandline of executed process
New in NoVirusThanks EXE Radar Pro 1.2.0.0 (Oct 18, 2011)
- Fixed "Block and Delete File"
- Added "Alert Only for Specific Caller Processes" Manage processes list
- Added Self-Protection against termination
- Added "Allow Task Manager to Terminate NoVirusThanks EXE Radar"
- Changed "Enabled: True/False" to "Real-Time Protection: ENABLED/DISABLED"
- Changed Protection Status "True/False" to "ENABLED/DISABLED"
- Enable or Disable "Gaming Mode" from right-click menu of the tray icon
- Added "Always Allow Processes Located in Custom Directories" Manage directories
- Added "Exclusion List" for "Always Allow Microsoft System Protected Processes"
- Added "Exclusion List" for "Always Allow Processes with a Digital Signature"
- Added "Always Allow Custom Processes Without Check MD5 Hash" Manage processes list
- Added "Block Processes by Custom Process Name" Manage processes list
- Added "Advanced" TAB for advanced options
New in NoVirusThanks EXE Radar Pro 1.1.0.0 (Oct 18, 2011)
- Added Processes TAB -> Start New Process...
- Added Processes TAB -> Copy to Clipboard
- Added Processes TAB -> Search Hash on Google
- Added Processes TAB -> Search Process on Google
- Added Events TAB -> Copy to Clipboard
- Added Events TAB -> Search Hash on Google
- Added Events TAB -> Search Process on Google
- Added Events TAB -> Show File Properties
- Added Events TAB -> Open Containing Folder
- Added Blacklist TAB -> Copy to Clipboard
- Added Blacklist TAB -> Search Hash on Google
- Added Blacklist TAB -> Search Process on Google
- Added Whitelist TAB -> Copy to Clipboard
- Added Whitelist TAB -> Search Hash on Google
- Added Whitelist TAB -> Search Process on Google
- Added Utilities Menu
- Optimized Process Behavioral Analysis
- Show number of total events in column
- Show number of total processes in column
- Fixed Whitelist option
- Fixed removal of Vista/Seven startup entry
- Optimized installer/uninstaller script
- Fixed application crash in Windows Seven OS
- Added sort items on column click
- New logged events are topmost
- Minor fixes