OSArmor

What is OSArmor?

OSArmor is a Windows application that monitors and blocks suspicious processes to safeguard against malware, ransomware, and other threats. The tool analyzes parent processes to prevent specific applications, such as Microsoft Word, from running unauthorized utilities like cmd or PowerShell. It also stops ransomware from deleting shadow copies of files via the vssadmin utility, blocks processes with double file extensions (e.g., invoice.pdf.exe), and prevents the spread of USB-borne malware. OSArmor operates in the background, offering comprehensive protection for the system with a lightweight, zero-configuration design

Highlights

• Monitors and blocks suspicious parent-child process behaviors to prevent malware infections
• Blocks ransomware from deleting shadow copies of files using the vssadmin utility
• Prevents execution of processes with double file extensions, a common malware technique
• Blocks the spread of USB-borne malware