WiseVector StopX V3.00 beta

[harlan4096]

WiseVector StopX V3.00 Beta:

June 21, 2021

1. Added firewall, web protection, network intrusion detection.

2. Both HIPS and firewall support security level adjustment. Users can adjust the security level according to their needs.

3. Add support to write HIPS and firewall rules. Users can write rules according to their needs to get better protection.

4. Improved the process injection detection, added multiple multi-step models to detect malicious programs using advanced injection techniques.

5. Improved stealer malware detection, in addition to the already exists multi-step models, we added multiple single-step models based on artificial intelligence and reputation. When a program that is not trusted by the AI and trying to access the user’s sensitive data, such as username and password saved in the browser, cryptocurrency wallet data, etc. WiseVector StopX will prompt the user to allow or deny each operation detected. This is a good strategy against some stealer malware that utilized bat files, lnk files, Python scripts to harvest user’s data . Although the code of these malware is relatively simple, the attack is very tricky to detect by multi-step models.

6. Enhanced stability and reliability of behavior monitoring. For example, driver loading, Webcam access, scheduled task creation monitoring is more efficient and stable than before.

7. Other bug fixes.

Download at: https://update2.wisevector.com/WiseVector_StopX_V30.exe

Recommended for experienced users to download and test.

[harlan4096]

Introducing the Firewall level and HIPS level

Starting from WiseVector StopX 3.0, we decided to give more options to advanced users, who can write their own rules and adjust the security level to get personalized protection.
 
Firewall Level:

Block All: Blocks all network activity, recommend choosing when you walk away from your computer for a long time or if your computer is infected.

Maximum Security: Whitelisted programs will be allowed to access the network. The user will be prompted to allow or deny the connection for all other programs, including Microsoft's own programs. This mode has most pop-ups. It is recommended for experienced users.

High Security: Whitelisted programs will be allowed to access the network. The user will be prompted to take action for programs that are identified to be moderately suspicious by AI.

Automatic mode: Whitelisted programs will be allowed to access the network. The user will be prompted to take action for programs that are identified to be highly suspicious by AI.

Low-level Security: It relies entirely on the AI's independent judgment, and basically there will be no pop-ups.
Rules-based mode: Only match the rules written by the user, the connections will be allowed if it does not match any rule.
 
HIPS level:

All risky behaviors will be analyzed by the AI first, and if they are determined to be malicious, they will be terminated directly without prompting the user. Those events that are not automatically processed will proceed to the following levels,

Maximum Security: This is the strictest mode, which is very similar to the Default Deny mode provided by other security software. Where all risky behaviors are prompted to the user except for whitelisted programs. For example, running untrusted programs, running scripts, running PowerShell, creating startup items, creating scheduled tasks, accessing user's private data, accessing the camera, etc. In this mode, there are many pop-ups, so it is recommended for experienced users.

High Security: Whitelisted programs will be allowed. The user will be prompted to take action for programs that are identified to be moderately suspicious by AI.

Automatic mode: Whitelisted programs will be allowed. The user will be prompted to take action for programs that are identified to be highly suspicious by AI.

Low-level Security: The AI will judge the behavior completely by itself, basically there will be no pop-ups.

Rule-based mode: Only match the rules written by the user, the action will be allowed if it does not match any rule.

Source

[harlan4096]

WiseVector StopX V3.01 BetaJuly 15, 2021
1. Fix the issue that the program may crash under certain circumstances.
2. Fix the issue that may cause computer freezes.
3. Fixed a bug in firewall driver that may cause BSOD.
4. Fixed the high CPU usage when the network traffic is high.
5. Fix the problem that the software updates may fail under Windows XP system and also optimized resource usage in XP.
6. Optimized the firewall for maximum performance.
7. Now only prompt once for the same malicious DNS queries, to avoid too many popups.
8. Other bug fixes.

Download at: https://update2.wisevector.com/WiseVector_StopX_V30.exe

Note: You can perform an overwrite installation.