CPv8 Client Manual in Video Format

View on Youtube to access segmented times and additional links in the description

Foolish Tech Show 1702-20 (CyptoPrevent v8 Client Manual)

d7xTech1.87K subscribers

CryptoPrevent v8 Client Manual

If there are any issues expanding the Client Manual click here for the listed version or click here the single page version.

CryptoPrevent Client Installation

Installation of CryptoPrevent is carried out with very few steps: (Note: Bulk/White-Label Client installation may vary slightly from the below)

  1. Extract the ZIP archive downloaded from our site to a location of your choosing and make note of the location. This file contains the installer/setup routine for CryptoPrevent.

  2. Launch the installer executable file from the above location.

  3. Click next.

  4. It is not possible to proceed without accepting the license agreement and clicking next.

  5. Choose whether or not to create a desktop shortcut and click next.

  6. Click install to initiate the installation.

  7. Click finish to close the installation and launch CryptoPrevent. Uncheck the box shown if you do not want to configure CryptoPrevent or apply protection.

Note: CryptoPrevent will not protect your PC just by installing it. It is required that protections be reviewed and applied for CryptoPrevent to start working.

  1. You will be asked if you are in possession of product key for the purposes of enabling all premium features. If you have purchased and received an email containing your key, please choose yes.

  2. Copy and paste your product key exactly as you received it and click ok.

  3. You will be asked if you would like to schedule daily updates. You may either choose to do that with a random time or you may opt not to and select a time of your choosing at a later time.

  4. Click ok to proceed to the main interface.

CryptoPrevent Client Apply Protections Tab

Apply Protection tab:

  • Protection plans are an easy way to apply sets of CryptoPrevent protections.
    • Minimal plan: includes all protections available in the original release of CryptoPrevent for blocking CryptoLocker and similar ransomware. These are a bare minimum level of protections and may not protect against more modern threats.
    • Default plan: includes additional protections to prevent a wider range of threats. More restrictive plans could impact software installations and this is the highest plan that should not interfere with that.
    • Maximum plan: includes additional protections that will block even more threats. Please use this plan with caution as it has the potential to interfere with software installations and certain backup applications.
    • Extreme plan: enables every available protection feature, including those considered “beta”. Please test in your environment with these settings to determine if they will negatively impact the use of your PC.
    • Custom settings: when settings do not specifically follow a predefined protection plan. It’s advisable to start with the Default plan and check any additional protections that you are able to tolerate.
  • Enable Active Protections: includes master check boxes for active protections beyond software restriction policies.
    • FolderWatch (real-time) allows specified folders to be monitored for items that match the loaded hash definitions list.
  • Kill Apps Now button: closes all running non-essential applications. Please be aware that using this option will not prompt you to save any work.
  • CryptoPrevent QuickAccess (Premium only feature): a notification icon will appear in the system tray to expose CryptoPrevent functionality.

Test Protection button

  • Currently tests only the protection location of %appdata%. It indicates mainly if the Software Restrictions Policies have been enabled and taken effect.

CryptoPrevent Protection Settings->Software Restriction Policies->Minimum Plan Tab

The Minimum plan tab:

  • Protect each of these locations from executable files:
    • %appdata%
    • %localappdata%
    • Recycle Bin
  • Double File Extensions: protects from executable files with a path of *.[dbl extension item].[executable extension].
  • Right-to-Left Override: exploits related to the direction of text interpretation. Info on Right to Left Override

CryptoPrevent Protection Settings->Software Restriction Policies->Default Plan Tab

The Default plan tab

  • Protect each of these locations from executable files:
    • %programdata%
    • %userprofile%
    • Startup Folders
  • Block Windows Programs: legitimate tools that have been known to be co-opted by malicious software.

CryptoPrevent Protection Settings->Software Restriction Policies->Maximum Plan Tab

The Maximum plan tab:

  • Protect each of these locations from executable files:
    • %localappdata%*
  • Block Executables Temporarily Extracted from Archives: selected rules will block certain executables.

CryptoPrevent Protect File Types Tab

Prevent File Types tab:

  • CryptoPrevent includes a program filter module that can selectively block certain executable file types.

CryptoPrevent FolderWatch Tab

FolderWatch tab:

  • FolderWatch provides additional monitoring of common folders and custom folders (Premium Only).
  • Quarantine Location: files flagged as potentially malicious will be quarantined in specified folders.

CryptoPrevent FolderWatch HoneyPot Tab

FolderWatch HoneyPot tab:

Whitelist Policies Tab

Whitelist policies tab:

  • The whitelist is a list of programs explicitly allowed.

Blacklist Policies Tab

Blacklist policies tab:

  • The blacklist is a list of programs explicitly blocked.

User Hash Definitions Tab

User Hash Definitions tab:

Submit New Hash Tab

Submit New Hash tab:

CryptoPrevent Email Settings Tab

Email Settings tab:

  • This tab is used to enable email notifications of alerts.

CryptoPrevent History Tab

History tab:

  • The History tab logs information about CryptoPrevent activity.

CryptoPrevent Updates Tab

Updates tab:

  • Enable a daily update schedule.

CryptoPrevent About Tab

About tab:

  • This tab displays information about CryptoPrevent including its history, evolution, and honorable mentions.

Command Line Parameters (Premium Only Feature)

Command Line Parameters:

  • /undo: Remove protections but leave whitelists.
  • /l=#: Set a specific plan level set of protections.
    • #=0 for None Protection Plan

    =1 for Minimal Protection Plan
    =2 for Default Protection Plan
    =3 for Maximum Protection Plan
    =5 for Extreme Protection Plan
    =a for Custom Plan.

Applying Protections (Plan/Custom Settings) & Final Notes

Once you have confirmed all your desired settings at this point, click the Apply Protection Plan button. If issues occur, remediation may include whitelisting or alteration of settings. For further assistance, contact our Help Desk via email: support@d7xtech.com