OSArmor

[anon]

Monitor and block suspicious processes behaviors to prevent infections by malware, ransomware, and other threats. This tool analyzes parent processes and prevents, for example, MS Word from running cmd.exe or powershell.exe, it prevents ransomware from deleting shadow copies of files via vssadmin.exe, it blocks processes with double file extensions (i.e invoice.pdf.exe), it blocks USB-spreading malware, and much more. It is lightweight, zero-configuration and runs in the background protecting your system.

https://www.novirusthanks.org/products/osarmor/

If you use a real-time antivirus or antimalware, this is a good complement for it, and even if you don't, you may still find it useful as a safety net. Many interesting features within.

[H265]

https://www.novirusthanks.org/products/osarmor/

If you use a real-time antivirus or antimalware, this is a good complement for it, and even if you don't, you may still find it useful as a safety net. Many interesting features within.

Is it ok to use this with an antivirus software? I have eset installed.

[anon]

Yes, it's designed to work alongside an antivirus. Some of the options may overlap with what you already have, but in any case you should read the documentation first instead of using the default settings or enabling everything

[yoco]

So I just open this and leave it running in the background?

[anon]

In principle, yes... but do read the manual

[alpacino]

No longer free, now it's shareware with a trial period.

[anon]

The trial is likely resettable (sadly I can't check at the moment), and if it's not, here's the last free version. I suggest blocking network access for it.

*removed*

[Renk]

I can confirm this soft is very good. I use it for years. Light and effective. A last line of defense against malwares. But I still use the version 1.4.3 because it's the last free version. I don't know any mean to periodically rest the trial (as it's doable with Kaspersky's products).

[anon]

Made a quick check. The installer creates two services, OSArmorDevSvc and NVTLicenseManager, and leaves these files and registry keys behind after uninstalling, even if you choose to delete all settings.



Closing OSArmor, stopping the two services, deleting the files and values above and restarting could be what it takes to get another 30 days... if there aren't extra checks on the InstallDate, file system timestamps or other objects, the machine GUID, firmware UUID or some other unique identifier is not sent a server to "validate" the trial (this isolated VM had no Internet access) or other tactics aren't used. Maybe we'll be lucky and it's just what I posted above... confirmation is welcome.

[alpacino]

The last version was so more paranoid then the first version I had. I would block me from deleting files inside an open file dialog. Also had many problems with adding exclusions for game launchers on newer version.