New at NirSoft

Submit portable freeware that you find here. It helps if you include information like description, extraction instruction, Unicode support, whether it writes to the registry, and so on.
Message
Author
Specular
Posts: 443
Joined: Sun Feb 16, 2014 10:54 pm

Re: PropertySystemView

#376 Post by Specular »

billon wrote: Tue Feb 04, 2020 12:26 pm Added to the database, please vote
I took a peek at the edits page and noticed this was originally an entry for EaseUS Data Recovery Wizard Free, updated a few times between 2017-2018, including by webfork. Any particular reason this entry was completely repurposed (became adware, etc)?

Not sure if that also explains the half-star rating the current entry has (if it's a left-over from the original).

billon
Posts: 843
Joined: Sat Jun 23, 2012 4:28 pm

Re: New at NirSoft

#377 Post by billon »


Specular
Posts: 443
Joined: Sun Feb 16, 2014 10:54 pm

Re: New at NirSoft

#378 Post by Specular »

billon wrote: Wed Feb 05, 2020 1:52 pm @Specular
👍

At least such entries are put to some good purpose.

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: New at NirSoft

#379 Post by webfork »

billon wrote: Wed Feb 05, 2020 1:52 pm @Specular:

See: viewtopic.php?f=18&t=15826&start=15#p90408
Also: viewtopic.php?f=18&t=24723#p95136
It was spam entry from the start
There are many of them
Good summary, thanks

billon
Posts: 843
Joined: Sat Jun 23, 2012 4:28 pm

Re: New at NirSoft

#380 Post by billon »

Special wrote: Mon Aug 26, 2019 7:13 am
InstalledAppView
InstalledAppView
InstalledAppView is a tool for Windows 10 that displays the details of Windows 10 apps installed on your system. For every Windows app, the following information is displayed: App Name, App Version, Registry Name, Registry Modified Time, Install Folder, Install Folder Owner, Uninstall Command, and more...
InstalledAppView allows you to load the Windows 10 apps list from your local system, remote computer on your network, and from external disk plugged to your computer.
InstalledAppView also allows you to view the XML files of the Windows app (AppxManifest.xml and AppxBlockMap.xml), uninstall apps, quietly uninstall apps, open the install folder of the app, and more...
Image

billon
Posts: 843
Joined: Sat Jun 23, 2012 4:28 pm

InstalledAppView

#381 Post by billon »


Special
Posts: 219
Joined: Wed Aug 14, 2013 7:22 am

Re: New at NirSoft

#382 Post by Special »

Seems safe...

User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: InstalledAppView

#383 Post by webfork »

billon wrote: Tue Mar 10, 2020 1:04 pm Added to the database, please vote
Done!

billon
Posts: 843
Joined: Sat Jun 23, 2012 4:28 pm

Re: New at NirSoft

#384 Post by billon »

Special wrote: Mon Aug 26, 2019 7:13 am
WinDefThreatsView
WinDefThreatsView
WinDefThreatsView is tool for Windows 10 that displays the list of all threats detected by Windows Defender Antivirus and allows you to easily set the default action (Allow, Quarantine, Clean, Remove, Block, or No Action) for multiple threats at once. You can use this tool on your local computer and also on remote computer, as long as you have permission to access WMI on the remote machine.
For every threat, the following information is displayed: Filename, Threat Name, Severity, Process Name, Initial Detect Time, Status Change Time, Remediation Time, Threat ID, Threat Status, Default Threat Action, and more...


System Requirements

This tool works only on Windows 10 and Windows 8.1.
Image

billon
Posts: 843
Joined: Sat Jun 23, 2012 4:28 pm

WinDefThreatsView

#385 Post by billon »


User avatar
webfork
Posts: 10818
Joined: Wed Apr 11, 2007 8:06 pm
Location: US, Texas
Contact:

Re: WinDefThreatsView

#386 Post by webfork »

billon wrote: Fri Mar 27, 2020 1:20 pm Added to the database, please vote
I love how the screenshot just has loads of Nirsoft false-positives. He made a really great tool to get around a Windows security problem specific to his software. :)

User avatar
SYSTEM
Posts: 2041
Joined: Sat Jul 31, 2010 1:19 am
Location: Helsinki, Finland

Re: New at NirSoft

#387 Post by SYSTEM »

BTW, I ran into a blog post that explains how a malicious NPM package stole software developers' passwords with WebBrowserPassView.

https://blog.reversinglabs.com/blog/the ... -passwords

This is why many antiviruses detect NirSoft tools. If you have one in your system and it's not supposed to be there, it's likely an attack.
My YouTube channel | Release date of my 13th playlist: August 24, 2020

User avatar
Midas
Posts: 6710
Joined: Mon Dec 07, 2009 7:09 am
Location: Sol3

Re: New at NirSoft

#388 Post by Midas »


Thanks, great read. And a real eye-opener -- leading to immediately (re-)set all my browsers master passwords, which unless one does so are just laying around in plaintext(!) in a 'logins.json' file in your profile folder -- if you're a Firefox user that is. :dizzy_face:

For general awareness (and TL;DR), the article details how Nirsoft's WebBrowserPassView can be a PUA in certain contexts.

Also, please note the following highlights...

A single line of code that changes the logic of the program can be a backdoor that allows unauthorized access to the system. Similarly, a single line of code is all it takes for a script to reach out to a remote server and download instructions to execute on the infected machine. Because of this, such supply chain attacks are usually detected post-infection, by developers themselves, upon realization that something odd is going on in the system.
NPM, node package manager, aimed primarily at JavaScript developers, is one such behemoth. It hosts almost 9M packages, which in turn consist of 1.7 billion files, or just under 37.5TB worth of data - numbers that are only getting bigger with each passing day.

billon
Posts: 843
Joined: Sat Jun 23, 2012 4:28 pm

Re: New at NirSoft

#389 Post by billon »

Special wrote: Mon Aug 26, 2019 7:13 am
SecurityQuestionsView
SecurityQuestionsView
SecurityQuestionsView is a tool for Windows 10 that allows you to view the security questions and their answers stored in the Registry by Windows 10 operating system.
SecurityQuestionsView can decrypt the security questions stored on your current running system (Requires elevation) and it can also decrypt the security questions stored on external hard drive.

SecurityQuestionsView displays the security questions of all users on your system that chose to set their security questions, for every user there are usually 3 questions.
Image

billon
Posts: 843
Joined: Sat Jun 23, 2012 4:28 pm

SecurityQuestionsView

#390 Post by billon »


Post Reply