Three cheers for Nick, Lawrence and Bleeping Computer! I tried CryptoPrevent (CP) on several machines and it installs and works like it should. Executables in several AppData folders wouldn't run and, while I certainly don't know enough to give it a solid test, that's good enough for me. I read about the new MAX + Program Filtering mode in v7.3.5 and decided to try that version and license it at the same time. Good news right off the bat...
The new policies CP put in place had one desired effect right away. Foxit PDF reader calls its updater when it runs, but the updater is located in Local>Temp so CP's policy rules kept it from running. I had been running last week's CP and was going to have to figure out how to manually allow the updater. I installed v7.3.5 set to MAX+filtering, then ran Foxit to get the updater's path to whitelist it. I was very pleasantly surprised when CP asked ME if I wanted to allow the updater! It also asked me if I wanted to allow DropBox, which lives in AppData>Roaming.
Their white/blacklist interface is comprehensive (haven't figured out yet whether it maintains a listing of the programs I tell it to whitelist - the box was empty even after allowing the updater), but even better is that I don't have to get too deeply into it or learn how to manually edit security policies. I know - I should learn - and I will - some day - when I have the spare time. Meanwhile, I'll pay Nick to do it for me.
Just to qualify myself - I'm one of those whacko's who run paid versions of MBAM, SAS and Norton360. Most people on this forum are probably laughing at me, but that's alright; I've made it for years without an infestation and will do my best to keep them from the family's PCs. There are too many criminals after my money and a few bucks a year in prevention seems like a pretty good deal. Chalk it up to the price of computing in these crooked times. Are these three programs complimentary or overlapping? I've read opinions on all sides of the discussion and haven't seen one compelling reason to ditch any of them. As long as they aren't conflicting with each other, I'm running them.
I urge everyone to license the Pro version of CryptoPrevent after you try it and find out how slick it is. Auto-updating and some other things come with it, PLUS licensing software like this (it's cost makes licensing the pro version a no-brainer, especially with BC's discount code that just worked for me for a combo license for the family's machines and another CP license for a business PC) keeps Nick and other developers like him improving their programs and staying on top of the blackhats so we can get on with other things. I have no connection with either Nick, Lawrence or BC but, unless I'm really wrong, know a great value proposition when I see one.
Alan
Edited by AlanCole, 14 October 2014 - 12:04 AM.