OSArmor 1.4

OSArmor

Monitor and block suspicious processes behaviors to prevent infections by malware, ransomware, and other threats. This tool analyzes parent processes and prevents, for example, MS Word from running cmd.exe or powershell.exe, it prevents ransomware from deleting shadow copies of files via vssadmin.exe, it blocks processes with double file extensions (i.e invoice.pdf.exe), it blocks USB-spreading malware, and much more. It is lightweight, zero-configuration and runs in the background protecting your system. For Windows XP, Vista, 7, 8, 10 (32\64-bit).

An additional layer of defense

This smart security application focuses on preventing a malware infection by applying smart and intelligent rules that block bad processes behaviors. This tool can block threats not detected by your installed security solution. Add to your system an additional layer of defense to prevent infections by malware and ransomware! You don't have to configure anything, just install it and forget about it. Includes more than 30 smart policies to improve your system security with this security application.

OSArmor 1.4 changelog:

More than 250 built-in protection options to choose from
Thousands of internal rules to block suspicious process activities
Very effective in blocking MalDocs (DOC/XLS/RTF/etc) payloads
Block execution of scripts, unwanted programs, powershell.exe or cmd.exe
Options to mitigate UAC bypasses, whitelisting/device guard/applocker bypasses
Block unsigned processes elevated with high or system privileges
Really many smart protection options that you can enable with a click
Added "Anti-Exploit" module to protect commonly exploited programs
The Configurator has now 3 tabs: Main Protections, Anti-Exploit, Advanced
Integrated a smart caching mechanism to improve performances
Improved support for Fast User Switching and Logouts
Added "Passive Logging" to just log the blocked event without blocking it
Option to Enable internal rules for allowing safe behaviors
Option to disable protection temporarily, for 10 minutes, 30 minutes, 1 hour
Option to use only your own custom block rules (ignoring built-in protection options)
Option to play a WAV sound when something is blocked
Option to User must be in the Administrators Group to change protection
Extended process and parent process cmdline to 8192 chars (max for Windows)
Disabled /silent and /verysilent uninstallation
Added basic and process-termination self-defense
The program is now installed on Program Files
You can now exclude a process from being blocked
Added support for exclusions via Exclusions.db file
Added support for custom block-rules via CustomBlock.db file
Supports vairables (like %PROCESS%) on Exclusions and Custom Block rules
Added a basic GUI application to create exclusions
Added option "Disable Protection" on tray icon menu
Added option "Manage Exclusions" on main GUI and on tray icon menu
Added option "Custom Block-Rules" on main GUI and on tray icon menu
Support Secure Boot (drivers are co-signed by Microsoft)
Added a simple Help/FAQs file
Fixed all reported issues on Windows XP
Fixed all reported false positives
Many bug fixes and optimizations