View Full Version : NEW RELEASE: Process Guard v3.0
Jason_DiamondCS
September 20th, 2004, 04:52 AM
HOT OFF THE HARD DRIVE!
We're pleased to announce the highly anticipated release of Process Guard version 3.0 - the most advanced kernel & process protection system available for Windows. Now made even easier to use, the user interface has been completely redesigned. However, while ProcessGuard v3.0 is now easier to use it's actually even more powerful than before. Important breakthroughs in our research, dozens of driver optimizations and an enhanced architecture all combine to make PGv3 one of the strongest security systems ever made.
This is a Public Beta and is available only to registered Process Guard users (click here (http://www.diamondcs.com.au/processguard/index.php?page=purchase) to register). ProcessGuard registration is one-off, so all existing registered users are entitled to upgrade for FREE! Our beta team has tested ProcessGuard v3.0 relentlessly so we aren't anticipating any problems, but if you do encounter any issues please email processguard@diamondcs.com.au - thanks. This public beta contains everything except the helpfile which is still being worked on. Other than that, it's the complete package.
To download, log into the Members Area (http://www.diamondcs.com.au/processguard/index.php?page=members), from where you'll 1) be able to download ProcessGuard v3.0, and 2) be able to retrieve your serial which you'll need to 'unlock' the program so that it can be used. If you have an older version of ProcessGuard on your machine you'll need to uninstall that first and reboot before installing ProcessGuard v3.0 . After downloading and installing ProcessGuard v3.0 you'll be asked to enter your unlock serial (from the Members Area). That's all there is to it - your system is now secured against a vast array of attacks, including rootkit installation, process termination, modification, DLL injection, and much more.
We look forward to your comments, and we hope you enjoy the program! Feel free to post screenshots if you want in the screenshot thread.
The DiamondCS Team
Jason_DiamondCS
September 20th, 2004, 04:57 AM
Some of the new features in ProcessGuard v3.000 include :-
* A completely new way of handling alerts. Now you only get alerted when the events happen, rather than when they possibly may happen.
* Reduced complexity of adding protection to programs by minimizing the privileges to Terminate, Modify and Read.
* New, easier to use interface.
* New global hook blocking method.
* New execution protection method, works across multiple user accounts.
* New Learning mode which learns a lot more now.
* Physical Memory Protection (protects ProcessGuard and your system from physical memory attacks).
* Improved close message handling.
* Many stability and reliability improvements (Driver/Service/GUI).
* Now blocks all rootkit installation methods.
* Full Windows XP support, including SP1 and SP2.
* Full Windows 2003 support.
* Full Windows 2000 support.
* Full UNICODE support.
Jason_DiamondCS
September 20th, 2004, 05:08 AM
After you have uninstalled ProcessGuard v2.0 or whatever you were using previously, make sure pguard.dat no longer exists in your c:\windows\system32 directory.
It is incompatible with the new version, and may cause problems if the new version finds it there.
Pilli
September 20th, 2004, 05:13 AM
Here are some screenshots : http://www.wilderssecurity.com/showthread.php?p=260517&posted=1#post260517
Wayne - DiamondCS
September 20th, 2004, 05:19 AM
I'll be working through the night but if I get a chance I'll post a screenshot of some advanced attacks in action being blocked (rootkit installation being blocked, process terminations, etc)
JW Clements
September 20th, 2004, 05:31 AM
-{ Quote: "After you have uninstalled ProcessGuard v2.0 or whatever you were using previously, make sure pguard.dat no longer exists in your c:\windows\system32 directory.
It is incompatible with the new version, and may cause problems if the new version finds it there." }-
Hi Jason, does this mean that pghash.dat is OK to keep?
Jim C
Jason_DiamondCS
September 20th, 2004, 05:33 AM
No, the installer will delete that one automatically, which is why I didn't mention it. :)
JW Clements
September 20th, 2004, 05:39 AM
-{ Quote: "Hi Jason, does this mean that pghash.dat is OK to keep?
Jim C" }-
Plus, remind folks to save a copy of their Protection List to make it easier to restore security... JC
Jason_DiamondCS
September 20th, 2004, 05:40 AM
Yes, exporting your current list will be helpful if the new learning mode doesn't find all your security programs for you.
Bowserman
September 20th, 2004, 05:43 AM
Working great here ;D....good work guys.
Regards,
Jade.
Meed
September 20th, 2004, 09:42 AM
When will the free finished, none beta, version be available for dl ?
???
September 20th, 2004, 09:47 AM
Looks good. Is there any chance to purchase PG directly from DiamondCS (not involving Regsoft)?
Jason_DiamondCS
September 20th, 2004, 10:14 AM
When will the final be released? When at least 99% of the problems people are experiencing are removed, and the suggestions have been added. :)
You can purchase ProcessGuard through paypal and a few other methods, simply email us at sales@diamondcs.com.au , we can pretty much arrange anything.
tuatara
September 20th, 2004, 10:34 AM
Thanks DCS, I've been stress testing for some hours now,(with other apps and malware)
And this program is working great !
It is better, easier, faster to configure and even safer.
Hard to believe that the number one security tool could be/has improved !!!
Congratulations.!!!
I stayed up all night but it was worth it!
Now i can go to sleep knowing that there is a good lock on my door (PC)
;)
Oremina
September 20th, 2004, 11:40 AM
Not sure whether to post here or start a new thread about odd happenings.
Whatever, here's one. Fortunately, I never (never) execute a new app without doing a Drive Image backup up - been bitten too many times in the past.
However, d/l'd and executed PG3. All seemed to be going well until I tried to open the app I keep my passwords in - PasswordSafe.
Told me I had entered the wrong "safe combination". I know this particular password so well, but it wouldn't have it. Tried several times but that came nearer to hospitalising me than anything else recently.
So I did a DI restore (wish I had a pound/dollar for everytime that has saved my bacon!) and all was well again.
I'll wait until the non-beta version is out and hope that all is well then. Possibly if I went through the whole process again it might be different, but I am a bit hesitant about doing so.
Any ideas?
Pilli
September 20th, 2004, 11:46 AM
Oremina, You probably need to add your Safe app (it's main .exe) to the PG protection list and it may need some allows such as global hooks. :)
HTH Pilli
Oremina
September 20th, 2004, 11:56 AM
Pilli - Thanks for your quick reply. I'll try it again later this evening and do as you suggest- at least I've always got a safe restore point.
I did not have Password Safe's exe file in my protection list on v2 but I'll certainly give that a try.
Pilli
September 20th, 2004, 12:38 PM
PG3 works slightly diferently in some ways especially regarding global hooks and this could be causing the problem, worth a try anyway, watch the alerts in PG's alert log for guidance.
Cheers.
nick s
September 20th, 2004, 02:57 PM
-{ Quote: "I did not have Password Safe's exe file in my protection list on v2 but I'll certainly give that a try." }-
Adding pwsafe.exe to the protection list with install global hooks resolved the problem for me.
Nick
Pilli
September 20th, 2004, 03:16 PM
Cherrs Nick, Hope it works for Orimena as well :)
Oremina
September 20th, 2004, 03:42 PM
Hi nick s and pilli
Am trying it all again. At the moment I have all 4 Global Protection Options enabled (ticked). The problem I had with PasswordSafe appears to have vanished this time. :D Hope it stays like that but I do not (not) have the pwsafe.exe in Protection either.
Odd... guess it will all clear up in time as the newness wears off. I am not sure if having all the 4 GPO's ticked is the right way to go and would appreciate some guidance on this at sometime, but all seems pretty quiet for now.
Tatersalad
September 20th, 2004, 07:26 PM
Lookin good, V3 took less than an hour to configure compared to weeks with V2. Nice job on the learning mode.
I liked the four boxes rather than the check box to remember this answer though. But thanks for fixin the cursor xp problem on the pop up window.
The most annoying thing I can find wrong so far is the program checksum list (security tab). You can't change the run options in the list now and double clicking no longer gives you the properties of the executable.
Thanks DCS
nick s
September 20th, 2004, 09:02 PM
CursorXP working here as well. And so is BOClean (with Block Global Hooks enabled). Worth the wait. Thanks to DCS and the beta testers.
Nick
redwolfe_98
September 21st, 2004, 12:07 AM
i installed pg3, but it didn't seem to work, for me.. first of all, it didn't recognize my kerio 2.15 firewall.. i added kerio ie persfw.exe to the protected processes list, but still, when i would test pg3 using "process kill", process kill would kill kerio AND pg3 (pguard.exe, or whatever it was) every time.. i tried it over and over, with various configurations, and every time, those two processes were killed.. the one process of the three listed that "process kill" would not kill was my etrust ez av.. i assume that etrust ez av it has its own protection..
Pilli
September 21st, 2004, 01:39 AM
Hi Redwolfe_98,
The most likely reason the you could kill those processes is because they were running when you enabled Securely handle windows closure.
You must stop the service or process and restart for close message handling to work. This is because Process Guard needs to inject procguard.dll into the process.
You can see whether the injection has occurred properly by using programs such as Sysinternals Process Explorer or Faber Toys.
HTH Pilli
MEGAFREAK
September 21st, 2004, 02:18 AM
pg needs a intelligent recognition method otherwise the user needs to much time adjusting.. especially you should add processxp, filemon and regmon as standards in your pg!! Otherwise you have to turn on and off and on and off .. this hits the nerves and the precious time of each individual
Marine06
September 21st, 2004, 03:17 AM
Have it installed and everything is running well.
A few suggestions(?):
- Ability to import protection list from v2.0. I could not find this option anywhere and was hoping that it was possible. Allow one to save v3 protection list so when the final version is available one does not have to reconfigure the settings (i'm assuming that the settings will be wiped and will not be saved when the new version is released).
- Allow dragging programs into the protected list for easier configuring of applications.
- In the "Security" tab, allow one to change the last option setting to one of the five options (like before). Also, allow one to double click the filename inorder to obtain the settings as if one viewed the program's properties.
Pilli
September 21st, 2004, 03:17 AM
Megafreak, Learning mode is an intelligent method, most ppl will have a good set up within hours. Obviously if you are forever installing and uninstalling programs then you will have to spend more time on on your settings.
Pilli
Pilli
September 21st, 2004, 03:32 AM
-{ Quote: " Ability to import protection list from v2.0. I could not find this option anywhere and was hoping that it was possible. " }-
I is not possible to convert for Version 3 as stated in Jason's initial post :)
I expect that if you copy your .dat files to another folder, when copied back after installing the release version, they will work - providing DCS do not change the fromat in the meantime.
I am sure that drag and drop will be reinstated, the same applies to the Security list re. right clicking on an item, hopefully there will be even more options than in V2.
Marine06
September 21st, 2004, 04:21 AM
Thanks for the prompt reply. I should pay more attention to the initial post :P
redwolfe_98
September 21st, 2004, 04:25 AM
i reinstalled pg3 and it seems to be working for me, now.. i don't know why it didn't seem to work properly when i first installed it..
i need advice about what "global protection" options should be enabled on the "main" tab.. i currently have them all checked..
pg3 seems stable, or rather, i feel that it is not causing my computer to be unstable, and it is not too complicated to use..
what is the proper way to uninstall pg? do you simply run the uninstall from add/remove? to uninstall pg, what i did was, i disabled all protection in pg, closed the associated processes running in the task manager/processes, and then i ran the uninstall from add/remove..
in the help file, it mentions a "manual uninstall", where it says to run the uninstall from add/remove in safe mode, but, if i am not mistaken, i tried that once, and it did not work out.. my conclusion was that one cannot run an "uninstall" in safe mode..(?)
Pilli
September 21st, 2004, 04:52 AM
Hi redwolfe_98, I usually have all four general tabs enabled & have not had problems though you do need to watch the alerts so that any necessary allows can be enabled.
The proper way to uninstall PG is to disable protection got to start - All programs - Process Guard and use the uninstall option. You will need to re-boot to complete the process.
You can uninstall in Safe mode but it is a little more complex.
HTH Pilli
Jason_DiamondCS
September 21st, 2004, 05:05 AM
-{ Quote: "i reinstalled pg3 and it seems to be working for me, now.. i don't know why it didn't seem to work properly when i first installed it..
i need advice about what "global protection" options should be enabled on the "main" tab.. i currently have them all checked..
pg3 seems stable, or rather, i feel that it is not causing my computer to be unstable, and it is not too complicated to use..
what is the proper way to uninstall pg? do you simply run the uninstall from add/remove? to uninstall pg, what i did was, i disabled all protection in pg, closed the associated processes running in the task manager/processes, and then i ran the uninstall from add/remove..
in the help file, it mentions a "manual uninstall", where it says to run the uninstall from add/remove in safe mode, but, if i am not mistaken, i tried that once, and it did not work out.. my conclusion was that one cannot run an "uninstall" in safe mode..(?)" }-
Yes that is actually the correct method to uninstall PG3 for this beta. You simply run the uninstall utility, it will popup the ProcessGuard interface, you disable protection, close the program, then the uinstall Program will continue.
The final release of ProcessGuard v3 will have much a improved uninstall, but still require the user to first disable protection themselves. The final version will tell the user to do this, compared to how it is now where the user must know to disable protection the close the program.
The reason for this is obviously ProcessGuard protects itself so well that unless it's protection is disabled by a person, there is no way you can remove it from the system. That is one feature that no other security programs incorporate.
Khaine
September 21st, 2004, 08:06 AM
Couple of suggestions from playing around with it :
1) When protection is disabled thier is no identification of that in the system tray icon
2) It would be nice to hide the systray icon and have a hotkry to open it up, or have balloon tips when something is blocked (option)
3) thier is no option for process guard to verify that all the files in the security tab still exist and remove useless entries
4) It would be nice to see the checksums of the protected files, both in the database anad when the process guard dialog box is displayed
5) Perhaps the option for process guard to verify the protected list files every x hours/min/days/ or when idle or something to ensure that they haven't been modified. I know that DCS didn't want PG to turn into a file checker but trust is of upmost importance to process guard. You must trust that the process you have run, that is being protected by process guard, is the correct one not some form of malware
Khaine
September 21st, 2004, 08:24 AM
One other small thing, some of the System Internal's Tools like TDI Mon try to get services.exe to install their driver to work :
Tue 21 - 22:18:49 [DRIVER/SERVICE] c:\windows\system32\services.exe [948] Tried to install a driver/service named TDIMSYS
Now I don't want to allow anything to use this method to install drivers, I only want to let selected programs do that. I have no idea how {if at all} it is possible for you guys to let this work, but if anyone can its DCS :)
Also anther issue I've noticed, its impossible to disable logging
Pilli
September 21st, 2004, 08:31 AM
Khaine, You would have to place those tools on the protection list and allow them to install drivers/services. This is necessary for Process explorer for instance. Though giving them terminate allow would probably noy be a good idea.
BTW thanks for your suggestions, I am sure DCS will consider them all. :)
poogimmal
September 21st, 2004, 09:09 PM
v3.0 seems to be running fine here. I had stability problems with v2.0 and ultimately could not run it, but v3.0 seems to be running as it should and no system crashes that I experienced with v2.0.
only anomaly seen is that I have asus mobd and run asusprobe.exe which v3.0 has ID'd as "always permit" but this morning it seemed like it started to execute but then its GUI display never appeared on desktop. so there maybe some sort of "conflict" with asusprobe, but that is a minor annoyance. the fact that v3.0 is working and stable more than outweighs that minor bug. I'll see if I can track it down further.
Pilli
September 22nd, 2004, 02:41 AM
Hi poogimmal, With asusprobe, try disabling it's autostart and then create a shortcut to asusprobe.exe & place it in your Run - All programs - Start menu.
This will start it slightly after your other autostart programs and may solve the problem.
HTH Pilli
Paranoid2000
September 22nd, 2004, 06:37 AM
I've been able to download the beta but no unlock code is displayed in the box underneath (checking the HTML source for the page gives <TEXTAREA ROWS=6 COLS=70 READONLY></TEXTAREA> for the empty box). This is even after putting Proxomitron in bypass mode, disabling HTML filtering in Outpost (Ad + Active Content filters) and setting Opera 6.05's user ID to MSIE (Opera itself has everything enabled bar Flash). Even bypassing JAP makes no difference.
Is there another method of getting this code or am I missing something?
Pilli
September 22nd, 2004, 07:29 AM
Hi Paranoid2000, A a licenced user, once you have logged into the members area the box below the PG3 download link has the code to copy and paste, usually a local proxy is no prblem.
We may have to wait for a DCS response on your particular problem.
Pilli
Wayne - DiamondCS
September 22nd, 2004, 07:48 AM
There does appear to be a problem, we are working on it and we apologise for any inconvenience in the meantime
poogimmal
September 22nd, 2004, 11:07 AM
-{ Quote: "Hi poogimmal, With asusprobe, try disabling it's autostart and then create a shortcut to asusprobe.exe & place it in your Run - All programs - Start menu.
This will start it slightly after your other autostart programs and may solve the problem.
HTH Pilli" }-
on my box asusprobe is not an autostart, but I did find "the problem." When PG3.0 is set to protect physical memory, asusprobe will not run. tracked it down in the PG Alert log. excellent! not so sure about best Global Protection Option settings (I had not run v2.0 in several months so I'm rusty with PG). When I UNprotected physical memory asusprobe ran fine. I typically only run that probe once a day to look for developing problems (none so far). After I closed asusprobe, I reset PG3.0 to protect physical memory. Eager to read the 3.0 Help, I'm reviewing the 2.0 help.
meanwhile, a new sticky_wicket. Printing a pdf doc from MS Word using the Adobe Acrobat Distiller which is installed as a printer. Is it a device, or is an application, or both ?? I use Distiller for work, and last night had to disable PG3.0 to print to a pdf. not clear how to load the pdf distiller process(es) into PG to "always permit" or even "permit once." Last night, PG seemed not to see them, but not sure.
But those issues aside, I'm lovin' it.
Pilli
September 22nd, 2004, 11:40 AM
You could add it to your protection list a give it the Access Physical Memeory flag. :)
poogimmal
September 22nd, 2004, 12:20 PM
-{ Quote: "You could add it to your protection list a give it the Access Physical Memeory flag. :)" }-
YES, did as you suggest & now asusprobe runs with main setting protecting physical memory. as a pg3.0 user I'm weak on the finer points. eagerly awaiting 3.0 help. I will study the adobe acrobat distiller "problem" and thinking I'll get it set correctly. THANKS!! PG3.0 quickly becoming one of my favorite apps. (I was somewhat "soured" by 2.0, but I DL'd 3.0 as soon as I heard it was available. tech support worked very hard on my 2.0 problem and even though we did not solve it, DCS is tops IMO opinion -- I run TDS3, PE, WG, RegProt & now PG3.0) "is it safe?" ;-)
Pilli
September 22nd, 2004, 12:29 PM
-{ Quote: ""is it safe?" ;-)" }- Should that read "Is it A safe?" ;D
Pilli
Kentish
September 22nd, 2004, 03:48 PM
I downloaded and installed PG3 last night, having removed PG2 first..and my first impressions are it looks easier..but...I want to disable the start up menu that I get, PG2 would just start up and run in the background but PG3 takes over the whole desktop until I close it down. Also the help files for PG3 all show PG2 screen shots etc.
I have found PG3 has made my system more unstable, with more IE crashes since irs been on than I ever had with PG2.
I also like to play Rainbow6 Athena Sword, but unless I disable PG3 the game will not run.
I have all 4 global protection options checked, so any advise or suggestions would be greatfully recieved.
Cheers
Pilli
September 22nd, 2004, 04:01 PM
Hi Kentish, Did you leave PG3 in learning mode whilst you ran your games?
Learning mode is much more advanced in V3.
As stated in Jason's opening posts the new help file is not in this beta.
To alter the startup try the following:
Right click the start button - Open - Programs - Startup - Right click the Process Guard icon - Properties - Make target look like this Target "C:\Program Files\ProcessGuard\procguard.exe" -minimize
PG should now minimise when started.
HTH Pilli
Kentish
September 23rd, 2004, 09:36 AM
Cheers, I sorted the start-up of PG3. As for running PG3 in Learning Mode for my gaming...it makes no difference, I have to disable PG3 to be able to play . :(
Pilli
September 23rd, 2004, 09:50 AM
You may have to find the offending .exe an place it on the protection list, see what alerts it gives and make the allows it wants.
HTH Pilli
Arctic
September 23rd, 2004, 10:45 AM
Could you tell me how to save a copy of my Protection List to make it easier to restore security. If I uninstall PG and install the new PG3 I am not really sure how to save my list and settings. I would also like to make a suggestion. I was hoping that someone would create a list of all process that should be protected by PG3 and what privileges they should have. Some people (including myself) are just not sure what programs should be protected and it would be a great help to have a list with the privileges listed. :)
Pilli
September 23rd, 2004, 10:56 AM
Hi Arctic, Making a list of all programs that could be protected and their settings is an incredibly difficult task, though Gavin hopes to compile something in the future based on user feedback.
Learning mode is much better now so a lot of the pain has been taken from that.
To back up your lists:
Disable Process Guard. Navigate to the *\windows\system32 folder and locate pguard.dat & pghash.dat copy them to another folder or to a ZIP file.
Hopefully Jason will give us a "Back up" button.
HTH Pilli
Arctic
September 23rd, 2004, 12:17 PM
When you say copy pguard.dat & pghash.dat to another folder do you mean to right click on them and copy and then paste it to another folder or do the drag and drop to another folder? If I drag and drop them to another folder doesn't that remove them from PG?
Also once I have my copy how do I put them into the new PG3? Once the program is installed do I just find where I have the folders copied and then drag and drop them into the new PG3 and save them replacing the ones that are in the new version PG3?
Sorry to be so much trouble. :-\
Pilli
September 23rd, 2004, 02:08 PM
Hi Arctic, Not drag as this moves them - Copy & paste is what I meant :)
To replace if needed then again disable PG ans copy and paste back and allow replace.
You can also use XP's compress function - Right click on them and send to a compressed file. If you do it within the system32 folder then you will have pguard.zip etc.
HTH Pilli
Arctic
September 23rd, 2004, 02:26 PM
Thank you again for all of your help Pilli. :)
Andreas1
September 23rd, 2004, 05:02 PM
arctic,
but do keep in mind that you will not be able to use those .dat files from PG v2 in PG v3. What you can do is save your .dat files from the current v3 beta and use them when PG3 reaches final, but you won't be able to do the same thing if you're in PG v2 right now. If the latter is the case, then, unfortunately there is no way for you to save or import your current settings into the new version (and I doubt that this will change when PGv3 goes gold). But the new version has a very powerful learning mode which will let you build your protection ruleset very quickly. Trust me - or do some more reading on this forum, there have been plenty of reports of how easy this is now.
Andreas
Pigitus
September 24th, 2004, 02:14 AM
Congrats to DCS for a version 3 tha runs better and seems smarter.
Here are a few comments that may help some users.
PG3 is streamlined. PG2 features that seem to have disappeared are simply merged more logically into other functions. Although it seemed unthinkable, I first thought that file fingerprinting had disappeared, until I read the 3rd option on the main page. It implies that PG3 not only keeps tracking program signatures, but the user can no longer fool with that function as was the case in PG2.
As usual with PG, the way to get great protection and still not trip over yourself is to keep the radical global options on while simply offseting them for the specific EXE files you want to protect. For instance, generally blocking hooks while still making hooks possible for trusted applications that open a file with a user password. If unable to make hooks, this kind of programs (e.g., Quicken 2001) seems to tell you that you have entered a wrong password when you may not have even seen the password window yet.
One new global option I have not turned on yet is RAM-access blocking. Some users say they have turned on all 4 global options. Yet the RAM option looks like something you want to turn on only after you stop installing new programs and after you have routinized your operations ... or when you feel a bad guy is already in the system and you must keep it out of RAM. But then again, if this thing is on each app you want to run has to be granted individual access to RAM. This is a great option but, not handled well, it could get you "hospitalized", as someone said, because it's supposed to defeat programs.
I especially appreciate the new feature where you see which program is lauching the application that's asking permission to run. If that specific launching sequence changes in the future, I assume PG3 will flag up an alert! For instance, if Internet Explorer is ever launched by something other than C:\Windows\explorer.exe.
Conclusion: it may be too early to tell, but PG3 seems like another DCS score.
Next step? Fingerprint DLLs? :-)
Pilli
September 24th, 2004, 04:37 AM
Hi Pigitus, Thanks for your comments. :)
-{ Quote: "Next step? Fingerprint DLLs? :-)" }-
I am not sure if this is easily achieved in the current Process Guard environment and would be concerned about the resources such an addition would need ie. logging and hashing all those files.
If it is or may be possible it would probably be better as a switchable option like the current .exe checksumming.
Pilli
Oremina
September 24th, 2004, 05:22 AM
-{ Quote: "
Here are a few comments that may help some users.
One new global option I have not turned on yet is RAM-access blocking. Some users say they have turned on all 4 global options. Yet the RAM option looks like something you want to turn on only after you stop installing new programs and after you have routinized your operations ... or when you feel a bad guy is already in the system and you must keep it out of RAM. But then again, if this thing is on each app you want to run has to be granted individual access to RAM. This is a great option but, not handled well, it could get you "hospitalized", as someone said, because it's supposed to defeat programs.
" }-
I have mine turned on, but Pigitus has given me food for thought.
Comments please? (Pilli, DCS, anyone?) :)
Pilli
September 24th, 2004, 06:17 AM
Hi Oremina, I do not give any applications Allow - install global hooks, install drivers / services or Access Physical memory unless I have a problem running an app and the Alert log is showing a reasonable Block message for that app.
But that's me, I like building my lists slowly but once done Process Guard just sits quietly in the backround doing it's job only alerting when I add new apps or updates etc.
HTH Pilli
Oremina
September 24th, 2004, 06:29 AM
-{ Quote: "
HTH Pilli" }-
It does Pilli. All four Global Protection Options ticked and watch for alerts, which is what I have been doing. Thanks.
Paranoid2000
September 24th, 2004, 12:09 PM
-{ Quote: "There does appear to be a problem, we are working on it and we apologise for any inconvenience in the meantime" }-The problem appears to be fixed and I can now see an unlock code. Thanks!
Chris12923
September 27th, 2004, 09:28 PM
If I purchase PG 2 now and register can I install the beta and also upgrade to PG 3 for free when it's released?
Thanks,
Chris
nick s
September 27th, 2004, 09:42 PM
-{ Quote: "If I purchase PG 2 now and register can I install the beta and also upgrade to PG 3 for free when it's released?
Thanks,
Chris" }-
Quoting Jason/DCS:
"This is a Public Beta and is available only to registered Process Guard users (click here to register). ProcessGuard registration is one-off, so all existing registered users are entitled to upgrade for FREE!"
Nick
Chris12923
September 27th, 2004, 09:58 PM
Don't know how I missed the 2nd part but I did. Thanks Nick. Now it sounds like I should just wait till it's released which shouldn't be long so I can get free upgrade to 4 then.
Thanks,
Chris
Jason_DiamondCS
September 27th, 2004, 11:58 PM
-{ Quote: "Don't know how I missed the 2nd part but I did. Thanks Nick. Now it sounds like I should just wait till it's released which shouldn't be long so I can get free upgrade to 4 then.
Thanks,
Chris" }-
We currently do not impose version restrictions on upgrades. Hence our ProcessGuard v1.000 customers, still get version v3.000 as a free upgrade. As will ProcessGuard v2.0 purchasers get v4.0 or v5.0 if/when they are released. :)
Chris12923
September 29th, 2004, 12:06 PM
Just purchased version 2 last night but installed PG 3 beta of course. All I can say is I love it and wish I would have purchased sooner.
Thanks,
Chris
vBulletin® Copyright ©2000-2012, Jelsoft Enterprises Ltd.
Copyright ©2002 - 2012, Wilders Security Forums