OSArmor 1.6.0.0

OSArmor is a security tool that analyzes the operation of the system in the background and blocks potentially malicious processes. The application can serve as an additional layer of protection to prevent infection with malware and ransomware Trojans. More than 250 policies are available to improve system security. There is an opportunity to write your own blocking rules.

The main features of OSArmor:

• Analysis of parent and child processes and blocking of exploits payload.
• Constant monitoring of Adobe PDF Reader, MS Office, OpenOffice, browsers and other applications.
• Blocking command line string parameters used by malware to download deleted files.
• Blocking wscript.exe , mshta.exe and other processes, if they show signs of malicious behavior.
• Blocking the process execution Schtasks.exe , which is often used by malware.
• Blocking execution of encoded or incorrect commands via PowerShell.
• Preventing Application calls.Excel RegisterXLL() using the command line.
• Preventing the launch of malicious processes in WINWORD.EXE or EXCEL.EXE .
• Blocking the execution of processes registered in autorun.inf files on USB drives.
• Blocking attempts to delete shadow copies of files by system processes (vssadmin.exe and others).
• Blocking the execution of processes with outdated file extensions .COM or .PIF.
• Preventing the process from changing critical important system zones Bcedit.exe .
• Preventing the process from downloading files Bitsadmin.exe .
• Blocking suspicious behavior related to system processes Svchost.exe and Explorer.exe .
• Preventing processes from loading and executing remote scripts Regsvr32.exe or Mshta.exe .
• And much more...