Monitor and block suspicious processes behaviors to prevent infections by malware, ransomware, and other threats. This tool analyzes parent processes and prevents, for example, MS Word from running cmd.exe or powershell.exe, it prevents ransomware from deleting shadow copies of files via vssadmin.exe, it blocks processes with double file extensions (i.e invoice.pdf.exe), it blocks USB-spreading malware, and much more. It is lightweight, zero-configuration and runs in the background protecting your system. For Windows XP, Vista, 7, 8, 10 (32\64-bit).
An additional layer of defense
This smart security application focuses on preventing a malware infection by applying smart and intelligent rules that block bad processes behaviors. This tool can block threats not detected by your installed security solution. Add to your system an additional layer of defense to prevent infections by malware and ransomware! You don"t have to configure anything, just install it and forget about it. Includes more than 30 smart policies to improve your system security with this security application.
OSArmor 1.4 changelog:
- More than 250 built-in protection options to choose from
- Thousands of internal rules to block suspicious process activities
- Very effective in blocking MalDocs (DOC/XLS/RTF/etc) payloads
- Block execution of scripts, unwanted programs, powershell.exe or cmd.exe
- Options to mitigate UAC bypasses, whitelisting/device guard/applocker bypasses
- Block unsigned processes elevated with high or system privileges
- Really many smart protection options that you can enable with a click
- Added "Anti-Exploit" module to protect commonly exploited programs
- The Configurator has now 3 tabs: Main Protections, Anti-Exploit, Advanced
- Integrated a smart caching mechanism to improve performances
- Improved support for Fast User Switching and Logouts
- Added "Passive Logging" to just log the blocked event without blocking it
- Option to Enable internal rules for allowing safe behaviors
- Option to disable protection temporarily, for 10 minutes, 30 minutes, 1 hour
- Option to use only your own custom block rules (ignoring built-in protection options)
- Option to play a WAV sound when something is blocked
- Option to User must be in the Administrators Group to change protection
- Extended process and parent process cmdline to 8192 chars (max for Windows)
- Disabled /silent and /verysilent uninstallation
- Added basic and process-termination self-defense
- The program is now installed on Program Files
- You can now exclude a process from being blocked
- Added support for exclusions via Exclusions.db file
- Added support for custom block-rules via CustomBlock.db file
- Supports vairables (like %PROCESS%) on Exclusions and Custom Block rules
- Added a basic GUI application to create exclusions
- Added option "Disable Protection" on tray icon menu
- Added option "Manage Exclusions" on main GUI and on tray icon menu
- Added option "Custom Block-Rules" on main GUI and on tray icon menu
- Support Secure Boot (drivers are co-signed by Microsoft)
- Added a simple Help/FAQs file
- Fixed all reported issues on Windows XP
- Fixed all reported false positives
- Many bug fixes and optimizations
Note: Make sure to first uninstall v1.3 and then install the new version.
Download: OSArmor 1.4 | 7.9 MB (Freeware)
View: OSArmor Home Page