Secure Folders to protect folders (and use as anti-executable)

@Mister X +1
Knowing SF a bit I think only apps designed to browse/creation/modification of specific kind of protected files (extensions) can be added to trusted list...and 3-rd file managers also which are usualy not so vulnerable and not so exploitable as explorer.exe that can be used also as a parent process for malware.

 

Or you could use OSArmor which has very good protection for explorer.exe especially under the Advanced tab (unsigned processes, auto elevation attempts, etc.) and leave exe.exe as trusted. I also use EXE Radar Pro to block non-whitelisted exe's that malware might try to use to compromise a system process.

 

Brought and quote your comment to this thread cause I don't want to keep hijacking @bellgamin 's thread anymore.

I'm reading users posts and going to make my test asap. Thanks for the link. I'm going to comment here in this thread all my findings.

I'm interested in protecting my folders from others reading stealing information and encryption by ransomware.

 

@lucd

I found this, doing a quick test on a UFD once with NTFS then other with FAT32

<<HIDE>>
One file/folder
Changing drive letter once does not unhide them

Whole drive
Changing drive letter is not allowed see pic attached





<<READ-ONLY>>
One file/folder
Editing file is not allowed
Renaming file/folder is not allowed
Deleting file/folder is not allowed
Writing a folder within the folder is ALLOWED - bad
Writing a file within the folder not allowed
Formatting the drive is not allowed
Changing the drive letter once does not allow to edit, rename, write or delete file/folder except when wrongly allowed

Whole drive
Editing file is not allowed
Renaming file/folder is not allowed
Deleting file/folder is not allowed
Writing a folder within the folder is ALLOWED - bad
Writing a file within the folder not allowed
Writing a folder on the drive root is ALLOWED - bad
Writing a file on the drive root not allowed
Formatting the drive is not allowed
Changing the drive letter once does not allow to edit, rename, write or delete file/folder except when wrongly allowed



For me, SecureFolders is good enough to protect vs ransomware... scary. lol

 

To mee it's like windows folders protection (EDIT: WD antivirus folder pritection), the problem are ransmware that encrypt MBR or system files, thanks for checking since I like programs that allow of tweaking

 

Lol, of course it's windows folders protection, what is it you expected?

We all know this is a problem. We have at disposal other solutions. Secure Folders wasn't designed for this end.

So Secure Folders is good enough to prevent prying eyes stealing my docs and encryption by ransomware.

You're welcome.

 

no I did not mean windows default tools but folder protection of windows defender, that if you have WD off you can use secure folder in its stead I like the idea of write protecting folders . Looks good I might try it

 

I'd like to see this feature in Secure Folders.
Someone developing anything similar to this great program is needed.

 

Hi,
"DavidXanatos" & " Mr.X"

With Sandboxie Classic and/or Sandboxie Plus....... Or Comodo Firewall........

Hey there, Mr. X,what is your Security Setup or Config, now of days?

And have you all look at Easy File Locker? Made by Shadow Defender!

 

Heres another related program (formerly paid, now freeware)...
https://www.majorgeeks.com/files/details/setacl_studio.html

 

May I ask you to run the same tests with Secure Folders please?

 

I don't get it, where did she post this, was this inside this thread? Would indeed be interesting to see how Secure Folders would perform.

 

https://www.wilderssecurity.com/threads/folderfication.428531/page-2#post-3133958

 

OK thanks, so it was posted in a thread about another tool named Folderfication, which isn't available anymore, or at least the website is down.

 

You can always click the tiny blue arrow pointing up inside the quoted message to figure out where it comes from.

 

Oh cool thanks, didn't even know about this after all these years LOL.

 

Yes, but in context of that thread, posted about Jetico Bestcrypt Data Shelter.

 

Yes I know, I just wanted to summarize for other people who might have been confused. And now there luckily is a dedicated thread about Bestcrypt Data Shelter, I see that the mods have merged the relevant posts.

 

This is a response to: https://www.wilderssecurity.com/thr...n-hijacking-attack.450989/page-2#post-3139810

Thank you very much for this test Cruelsister! The reason why I asked is because you recently tested another file protection tool named BestCrypt Data Shelter and it totally bombed even though it's made my Jetico. But I'm very glad to read that Secure Folders is able to protect against ransomware and most likely also against datastealers when folders are locked down.

About your comment, I do have explorer.exe set as a trusted process, so I wonder if this matters in terms of protection results. The reason is because you want to be able to copy and paste data. And the rest of the system would indeed be trashed but that's why I also use AppCheck as my first line of defense against ransomware.

 

Cool!
I'm a user of old Secure Folders still.

 

Good news indeed. Back it comes!

 

Yep. I continue to use in on any and all my systems with solid protection results.

For a file/folder locker it serves a system very well.

 

Yes, great tool that really works in practice, so that's why I wondered if it would work against ransomware. What I haven't been able to figure out is why I couldn't load Vivaldi from a certain protected folder even though vivaldi.exe is a trusted process, so sometimes it's a bit too protective LOL.

 

Which IS a good thing at least for those who have been bitten at all by a sinister Ransomware or similar. Secure Folders really Locks down well.

But i bet if you played with the settings a bit, you might possibly find a workaround or remedy to that.

 

Although it is nice to have things like Documents, Photos, etc protected from ransomware, please note that the real clear and present danger is not ransomware, but an increasing number of data stealers that target bank accounts and crypto wallets.

There is a much greater financial gain for the Blackhat in stealers vs ransomware.