Cytat:Here is the new beta build:

Kod:

http://downloads.novirusthanks.org/files/EXERadar_Pro_x86_x64_v3.1_24022015_BUILD1.exe

* Added more safe command-line strings
* Added "Install Mode"
* Minor fixes and optimizations

Here is how it works:

1) When you get an alert (for the setup file) you click on the button "Install Mode":

[Aby zobaczyć linki, zarejestruj się tutaj]

2) When you click on "Install Mode", a new window on bottom-right of the screen is displayed:

[Aby zobaczyć linki, zarejestruj się tutaj]

3) From now on, all processes started by the setup file (including sub-processes) are auto-allowed

4) When the installation has finished, just click the "Deactivate" button to deactivate the "Install Mode"

We do this since there is no real way to know when an application has been fully installed, so you have to deactivate manually the "Install Mode".

Cytat:To update:

1) Close ERP from trayicon->exit
2) Uninstall ERP completely
3) Reboot the PC (very important)
4) Install ERP

This build fixes few issues reported by two users when they login/logoff the system and ERP now has the "Install Mode" fully automated.

Cytat:You can download the new beta build from this link:

[Aby zobaczyć linki, zarejestruj się tutaj]

+ Fixed issue with RDP sessions
+ Improved configuration wizard
+ Added more safe command-line strings
+ Minor fixes and optimizations
To update:
1) Close ERP from trayicon->exit
2) Uninstall ERP completely
3) Reboot the PC (very important)
4) Install ERP

Cytat:Please try this new beta build:

[url=http://downloads.novirusthanks.org/files/EXERadar_Pro_x86_x64_v3.1_12052015_BUILD1.exe][/url]

Kod:

[url=http://downloads.novirusthanks.org/files/EXERadar_Pro_x86_x64_v3.1_12052015_BUILD1.exe]http://downloads.novirusthanks.org/files/EXERadar_Pro_x86_x64_v3.1_12052015_BUILD1.exe[/url]

+ Added more safe command-line strings
+ Minor fixes and optimizations

To update:

1) Close ERP from trayicon->exit
2) Uninstall ERP completely
3) Reboot the PC (very important)
4) Install ERP

[Aby zobaczyć linki, zarejestruj się tutaj]

[Aby zobaczyć linki, zarejestruj się tutaj]

(23.04.2015, 06:55)ichito napisał(a):

[Aby zobaczyć linki, zarejestruj się tutaj]

Wyszła kolejna wersja z poprawkami...

(24.05.2015, 12:46)Quassar napisał(a):

[Aby zobaczyć linki, zarejestruj się tutaj]

Poprawiono drobne błędy powodujące wysypanie programu.

[Aby zobaczyć linki, zarejestruj się tutaj]

[Aby zobaczyć linki, zarejestruj się tutaj]

[Aby zobaczyć linki, zarejestruj się tutaj]

[Aby zobaczyć linki, zarejestruj się tutaj]

Cytat:The only change should be: "better detection" of files within directories where only the administrator have access to (mentioned in my post:

[Aby zobaczyć linki, zarejestruj się tutaj]

)

I can get into more detail later but i think you'll notice the change.

[Aby zobaczyć linki, zarejestruj się tutaj]

Cytat:EXERadar_Pro_x86_x64_v3.1_24062015_BUILD1.exe
Only some weeks newer than the latest beta-release but it fixes one important thing:

If you copy a whitelisted file to your administrator-directory (or c:\windows\temp) and execute it, you always get a "Unknown Application"-prompt, right?
But it's whitelisted, there shouldn't be a prompt...
Why is there a prompt? Because EXERadar.exe which has only Medium Integrity is checking the file. And it has no access to the administrator-directory = "Unknown Application"
But with the newer release the Service ERPSvc.exe is now checking the file, which has sufficient rights (=System Integrity).
Now there should be no prompt anymore for whitelisted files in such directories.

[Aby zobaczyć linki, zarejestruj się tutaj]

Cytat:@ Everyone

ERP is not dead, we're back at developing a new ERP from scratch, here is why:

- We will use SQLite to handle rules with search\edit\filter\sort\pagination\etc
- We will save more info about a rule, such as when it was added and when it was last modified
- You will be able to enable or disable a rule
- We are discussing a new way to match processes with rules, a possibility we are evaluating now is like this (we're open to ideas of course):

Cytat:[proc.parent = “C:\Windows\Explore.exe”] and  [proc.name = “abc.exe”] and [proc.signer = “Microsoft Corporation”] [action = “allow”]
[proc.name = “explorer.exe”] and [proc.signer <> “Microsoft Corporation”] [action = “deny”]

- We will add support for categorization of rules, i.e "Windows Updates", "Firefox Updates", "Windows Processes", etc
- We have improved the method to gather information about a process
- All will be focused in a super easy way to manage rules
- New UI

When we'll have the first beta build ready I will update here so anyone can test it.

[Aby zobaczyć linki, zarejestruj się tutaj]