Wormguard 4 Suggestions

[Jason_DiamondCS]

This thread is to start a list of features that you guys want in Wormguard 4. I know a lot has been suggested previously in this forum and probably through email but this is just to compile it into one place. Things I am looking for are "minor tweak" to "midrange features/improvments" about Wormguard 3 you would like to see to make WormGuard 4 a better/easier to use product overall. I will of course consider all the features submitted, but it might not be possible to add all of them. And with that... let them being :D
-Jason-

[DolfTraanberg]

Hi Jason
I love to see a lot of commandline-options, like where to scan, what to scan, what to log where to log, or if it has no scanning possibilities, a way to execute a file in "protected mode" to see if it's ok, and sure, also from the command-line ;D
Dolf

[Tassie_Devils]

Hi Jason:

I would love to see a "right click"

Scan with Wormguard [already available]

PLUS

Scan with Wormguard..... [where the "...." will give you a 'Navigation' option so you can navigate to folders/sub-folders/files, whatever
instead of having to open up Explorer then navigating opening up the folders manually, then selecting a file to scan.

I do this a bit for a] tests b] If downloading to a specific folder instead of desktop.

Also: Is it possible to add the "confirmation no baddies found" option after such scan so put people's minds at rest. {mrBlaze asked about this also, so don't want to steal his idea}

Thanks. ;D

[Jason_DiamondCS]

I will add a fair amount of command line options which should please you Dolle :). The confirmation on whether or not a file is a worm is already added. Plus with the right click menu I will have some options in there in a Wormguard 4 submenu I think, like Winzip's
-Jason-

[FanJ]

Maybe this is off-topic here (if it is: sorry!):
in the past there was a conflict with an early version of NIS (I don't know about newer versions of NIS vs. WG); if it could be possible to solve this.....

[Tassie_Devils]

{QUOTE-> quoting: Jason / DiamondCS link=board=6;threadid=5593;start=0#36714 date=1040285405]
I will add a fair amount of command line options which should please you Dolle :). The confirmation on whether or not a file is a worm is already added. Plus with the right click menu I will have some options in there in a Wormguard 4 submenu I think, like Winzip's
-Jason- <-QUOTE}

You've SOLD me then Jason. Thanks :)

[Loki]

Hi Jason,

I would like to know if wormguard4 could scan a file being downloaded? Also an update feature, I've heard there will be something like reference type files for known worms. I hate having to download and install updates so something simple would be great ;D. How about a cool graphic with the file warning ;D. I know Wormguard4 will be great ;), but it's hard to wait, so how about some more hints? ;D Any chance of integrating with email?

Thanks
Loki 8)

[Jason_DiamondCS]

Thanks for the headsup FanJ, I will look into that as a BETA approaches. The updating is going to be easily done, at least I think it is, simply click on "update database" and it installs it automatically for you after downloading, no unzipping or whatever necessary. Cool graphic with the warning? Hmm already done ;) .
Integrating with email... what do you mean by that? With the protection that Wormguard 4 currently has, it won't allow any worms to be executed at all on your system. So if for some reason you click on an attachment, or an attachment is automatically run somehow from your mail program, then Wormguard4 will pick it up. I don't know if its "any" use doing things like scanning on download etc, we are looking at other methods of popular programs which we can integrate with to provide higher protection. But with the execution protection, if you have WormGuard 4 installed on your system the chance of a worm running on it would be almost nil. This is due to the combined "generic" detection and database detection.
As a side note I added generic detection for certain types of EXE based worms the other day and it automatically picked up the new "iraq_oil.exe" worm and stopped it from executing. So even if someone managed to manipulate your network system and put a worm on it and try and get it to run, the chance is very high WormGuard4 will warn you that a this file is trying to be executed, do you want it to run? :)

-Jason-

[Mr.Blaze]

Will i love worm guard cause its newby frindly out of all the dimonds products worm guard was the easyest to use click it on and forget it software

im actualy surprise i didnt put it on the newby list its definitly up there port explorer even if its easyer to under stand is made for an advance newby.

but still newby frindly for the most part just requires a little back ground reading.

as for worm guard the things you and the guys done so far have been great no real need for inprovement really.

adding to worm guard 4 no worm found message was much apreachiated.

but if you want to really make it a perfect 10 rather then a 9.9 id say hire gladiator to do the worm guard interface desghien none of the technique stuff cause thats perfect just the apearence.

then you have a perfect 10 cause not only will it be newby frindly great software but it be pure eye candy with a talking sexy voice.

i sugest you try out gladiattor so you can see what im talking about.

the man is a artist geniuse

[Jason_DiamondCS]

The gladiator AV interface surely is different, there are a few "issues" that I find with it but I won't discuss them since it contains no relevance to this forum.

With Wormguard4 I have been given a lot more freedom on the interface design so hopefully you will like it when you see it =) . While Port Explorer's interface isn't THAT pretty, it is pretty versatile and easy to navigate, etc, which is what is most important in any product. Pretty graphics come second, but with Wormguard 4 I will show you some of what I can do in interface design. 8)

-Jason-

[Mr.Blaze]

now thats sweet im save up my money for worm guard 4 its refreshing to see some eye candy with state of the art software.

but your right eye candy is second but still it be nice to see a dimond product with eye candy look just once i bet more people will be drawen to it.

like gladiator software i was drawen on the looks at first glance it cought my attintion as totaly being diffrent from every software i ever seen related to security.

and it only gets better with talking voice and im sure more things to come.

thats way cool they gave you freadom to stretch your arms with worm guard 4

im actualy very excited now finaly a dimond product with not only high quality security for peace of mind that we all love and enjoyed from you guys but now the feel and look of a brand new porch easy on the eyes yessssssssssssssss pure eye candy

[Loki]

{QUOTE-> quoting: Jason / DiamondCS link=board=6;threadid=5593;start=0#36860 date=1040360422]

With Wormguard4 I have been given a lot more freedom on the interface design so hopefully you will like it when you see it =) . While Port Explorer's interface isn't THAT pretty, it is pretty versatile and easy to navigate, etc, which is what is most important in any product. Pretty graphics come second, but with Wormguard 4 I will show you some of what I can do in interface design. 8)

-Jason-
<-QUOTE}

Excellent with what you've done with PE I can't wait to see WG4 ;D
Happy Holidays :D
Loki 8)

[DolfTraanberg]

Hey Jason,
How about some SS3 in WG. Should be easy ;D ;D
Dolf

[Jooske]

Or make it a plugin from TDS?
(i mean the scripts running in TDS for WG functionallity)
or........
WG resident at startup, from there autostart or manually start TDS with all SS3 functionallity etc. for WG and euhmmmmmmm PE too?

[Mr.Blaze]

wouldnt that confuse worm guard cause it is constantly checking scrips for worms wouldnt it cause worm guard to go off like a machine gun

[Jooske]

WG knows better then we or any worm ;D
I'm happy it's on all time so it can catch the first nasties after reboot if they would be there and after the TDS exec protection or nothing against it to have that one there active before anything is running at all :D
After all that our own scripts can do what we want them to.
I'm quite happy with Dolf's port 137 listen SS3 which works nice for me, just as easy as the TCP Port Listen to eleminate all those UDP 137 portscans and logging.
We just might like some collection of modules no matter if parts are called WG or TDS or Socket Spy sniff detector PE blocker netstat function exec prot scan resident spam hater intruders smack hacker bouncing infections thing with a nice voice calling us in the morning with fresh coffee and croissants -- as we devoted operators have the whole DCS collection anyway.
For your machinegun hunt for a machinegun wav or mp3 and play it in the jukebos script ;D

[Mr.Blaze]

will that sounds perty good but i can see problems with that will at least for a few window operating systems.

for example windows me has a problem with starting certin programs on start up espechialy if you have to do a manueal reboot and are protected by the checking for errors fix errors option that comes as a default setting.

example blaze is on aol waol has cause a problem screen freezes

no way around it have to do a manuel reboot

blaze click on button restart puter get box saying checking for errors but it never finishes cause new worm guard 4 becomes instantly active on start up befor i even get to desktop.

meaning the check for errors never complets boclean at one time had that problem thats what i would check out first befor realeasing any security software that becomes active as soon as you turn on your pc literly

[Jooske]

I'm not describing anything new, just what WG is doing now at the moment. And doesn' it work that way for you at this moment?

[Pilli]

Hi Mr Blaze:

{QUOTE-> quoting: MRBLAZE link=board=6;threadid=5593;start=15#37110 date=1040521446]
meaning the check for errors never complets boclean at one time had that problem thats what i would check out first befor realeasing any security software that becomes active as soon as you turn on your pc literly
<-QUOTE}

I cannot remember if ME has Task scheduling or not, if it has surely all you would need to do is have any errant programmes start just after start up? If ME has not got Task Sheduling I am pretty sure there are task sheduling proggies around. ;D

Another thought: May be a nice addition to WG4 for some ppl - A "start" timer such as that found in Spybot Search & Destroy

[Luthorcrow]

One quick question and a suggestion.

? I am using Workguard on a trial run and the About button displays it as WG 4?

Suggestion, I haven't found an option to reduce wormguard to the systray only. I have the following apps running on the net: Wormguard, Spywareblaster, NOD32, Sygate Pro 5, and TDS-3. Which makes for a crowded taskbar for each security app that won't reduce to just a systray icon until either neeeded or going into alert/alarm. If I am missing an option please let me know otherwise I recommend that for future versions.

[Jason_DiamondCS]

Wormguard 3 doesn't have a minimize to systray option, but it will be in v4 for sure :)
-Jason-

[Tassie_Devils]

{QUOTE-> quoting: Luthorcrow link=board=6;threadid=5593;start=15#37209 date=1040598729]
One quick question and a suggestion.

? I am using Workguard on a trial run and the About button displays it as WG 4?

Suggestion, I haven't found an option to reduce wormguard to the systray only. I have the following apps running on the net: Wormguard, Spywareblaster, NOD32, Sygate Pro 5, and TDS-3. Which makes for a crowded taskbar for each security app that won't reduce to just a systray icon until either neeeded or going into alert/alarm. If I am missing an option please let me know otherwise I recommend that for future versions.
<-QUOTE}Hi Luthorcrow:

Do you mean you have each of those apps just sitting on the Task Bar, and not minimised to System Tray. Spyware blaster you just select and protect then close down. NOD32 and Sygate must minimise to sys tray.
As for TDS3. GUI/Configurations/Start-up and check like attached pic

Just wondering why the don't.... :)

[Luthorcrow]

Hi Tassie_Devils,

Actually no, just Wormguard, Spyblaster, and as you saw in the TDS-3 section, TDS-3 as well. Thanks for the help on both. As for Spyblaster, I must be missing something in your description, because after I select the Protect Against Selected Items button, if I close the window, the process for Spyblaster no longer appears on the list on Task Manager?

Anway, I didn't mean to double post, just was trying to keep the same question for two different apps in the appropriate place. I see I shouldn't worry about cross fertilization with help ;D

[Tassie_Devils]

Hi Luthorcrow:

I see what you mean. Well javacool explained that once you set the protection you are actually entering them into the REGISTRY, and no need to have the program 'running'.

This from help:

*********************************************
How does SpywareBlaster work?

-SpywareBlaster works by settings "kill bits" in the registry. These "kill bit" registry entries are set for the spyware ActiveX CLSIDs (unqiue IDs that identify an ActiveX control). When a kill bit is set for a CLSID, the ActiveX control that uses that CLSID cannot install itself via your browser, nor can it run if it already installed. Microsoft sometimes uses these kill bits for fixing Active-X security holes.


#3) But what happens if I ever want to reverse or remove these kill bits?

-SpywareBlaster can do this for you. Simply uncheck every item that you wish to have the kill bit removed for, and press the "Remove Protection for Unchecked Items" button.

****************************************************

So I take it no need to have it 'running' just enable the "kill bits" [protection enabled] then close it, as the Registry entries are already there. At least that was my understanding when I asked him this very same question. Could be wrong though, lol. :)

EDIT: Oops, just realised off topic here. Sorry guys. No more posts re this from me.

[Mr.Blaze]

lol cup holder and leather seats

[Joosky]

Hi, Jooske here from another location

And all that voice commanded available Blazie?

[Pieter_Arntz]

If possible could you see to it that Wormguard 4 recognizes Windows System Restore as something it should allow by default (unless user wants otherwise)

Regards,

Pieter

[ironwalker]

well everytime my vbs files run with task schedular for Coolmon my desktop stats weather etc proggy,wormguard pops up(every 2hrs and 7 vbs files) Is it possible to make an "add to allow list" option also with "override allow list" to check on those allowed scripts incase a baddie was written in after?

I used script sentry but wormguard overrides it so ill just leave it in background unless a problem occurs as it makes great backup:)

[Tassie_Devils]

Ironwalker, Hi.

I have answered a question for you in a new thread, as don't want to get off track in here for the WG4 suggestion thread.

TAS.

edit: http://www.wilderssecurity.com/showthread.php?t=6376

[DolfTraanberg]

is it possible for wg4 to run as a service?
I would like this for TDS4 as well, knowing you're protected, when not logged in.
Dolf

[Jason_DiamondCS]

As far as execution protection goes, in Wormguard 4 and TDS-4 you will be protected as soon as windows is loaded, regardless if you've logged in or not. The Execution protection is loaded as a driver so its very lowlevel.

-Jason-

[Tassie_Devils]

Jason, Hello.

I know that WG does not have to be running, etc. so understand it's protection being loaded on start-up, but will you have to have TDS4 actually listed in the Start-Up List or will the Execution Protection [if installed] will auto-load anyway upon start-up.

I prefer to manually start TDS once boot-up is complete.


Cheers, TAS

[Jason_DiamondCS]

If the execution protection is enabled only the driver will be "active" at loadup. I can only talk for WG4 at the moment but the engine for that is external to the Wormguard 4 program so the execution protection only loads the engine (which is small) when it needs to test something. So the actual driver uses very few resources even when it is scanning something.

The actual Wormguard program can be loaded on startup or manually, it doesn't matter in regards to the execution protection. Its mainly just there for scanning, configuring options, help and database updating.
-Jason-

[Tassie_Devils]

Thanks Jason ;D
Cheers, TAS

[Mr.Blaze]

;Dwill if your more only into programing and not at all on eye candy i say hire mike from gav for interface desghien

it be nice to have eye candy go with great software relly would aprechiate more eye candy

[Paul Wilders]

Blaze,

{QUOTE-> i say hire mike from gav for interface desghien <-QUOTE}

::) to each his own - our taste differs for sure! ;D

regards.

paul

[Jooske]

Blazey, don't underestimate Jason's eye candy and other abilities.
You've seen in PE 's christmas version (no longer available) a little bit of it which i really loved, and which Wayne told us in another place in the DCS forums how we can add our own default color schemes.
Your windows enables you to change several color settings from main GUIs and frames etc already, so be creative with that too!
I did not include any of the screensaver images in any GUI, but knowing your creativity in fact i expect you will succeed in such an experiment soon! The TDS GUI asking for it, don't you think? ;D

[Pilli]

;D Well I like the functional elegance of TDS as it is, so if TDS4 looks the same or similar that's OK with me.
For me keeping the performance & feature set up to date with minimal resources is more important than eye candy. ;)

[Jooske]

This is how all the DCS programs and tools are made, as Wayne ever explained somewhere in the forums.
We can change central from the windows > desktop > properties change our screen lookout, the colors and sizes of everything displayed on it, so if you like a black browser with green texts or all black and white frames, it's up to you and it will not change resources or cause delays;
TDS is easy to create your own custom bar; and let's wait what the guys make for us to enjoy.
If TDS was white with blue texts it would not be as impressive as it is now, for sure! It is already not my TDS when the voice is different.
Now WG is going to be updated on an almost daily basis too we'll see it more frequent. Let's wait and see how it will look like. Time will tell us SOON! (it's around the next corner, you know)

[Paul Wilders]

Pilli,

{QUOTE-> Well I like the functional elegance of TDS as it is, so if TDS4 looks the same or similar that's OK with me. <-QUOTE}

Seems you are in for a big surprise! ;)

regards.

paul

[Jason_DiamondCS]

Interface design is becoming more and more important these days so we are always trying to have something which looks good and performs well. WormGuard 4 is designed so the average user can quickly learn the program just by using and looking at the interface.

I have used a bit of art in the interface, but I have also been conservative in the amount of resources WormGuard uses. I think everyone should be pleasantly suprised about WormGuard, in looks and resource usage.
-Jason-

[Pilli]

Paul, I like pleasant surprises ;D

Jason, Sounds good - Lean, clean, good looking & effective, what more could one want? ;)

[Pieter_Arntz]

{QUOTE-> quoting: Pilli link=board=6;threadid=5593;start=30#55195 date=1050568670]
Jason, Sounds good - Lean, clean, good looking & effective, what more could one want? ;)
<-QUOTE}

If it brings home money and does the dishes, I'll get dumped. So stay away from those. ;D

[Jason_DiamondCS]

{QUOTE-> quoting: Pieter_Arntz link=board=6;threadid=5593;start=30#55197 date=1050569054]
If it brings home money and does the dishes, I'll get dumped. So stay away from those. ;D
<-QUOTE}

Hmm.. they were on the TODO list but after careful consideration we've decided not to include them... for Pieter's sake ;)
-Jason-

[Jooske]

I want them in , i want them in, and doing the vacuum and cooking, calling my local grocary to fill the fridge and do the cooking. Great! Which reminds me:
we have lot of those already in TDS-3, will they keep included there in the 4-family or hmmm the sporting appareil makes me suspicious ....... although on the other hand.... it would mean we finally have time for using them adequately!
Hope you change the ugly worm for something better tasting as an image on our next t-shirts from your shoppe!
We want the whole series, of course!

[Mr.Blaze]

:D then my request is this

Jason have all the freedom over worm guard 4 interface i mean the ablity to push it just remember to keep it simple for us newbs lol ;D

[wizardavc]

Some of the below suggestions have already been suggested in this thread but they deserve to be double suggested :)

- WormGuard should be able to scan directorys and archives from the shell/explorer context menu
- Support for compressed files (I have heard it will be in WG4)
- Get rid of a file name block list, the extentions are good but not blocking by file name
- Deep search files should be set by default and the option for that removed
- Fix testprot.exe or just remove it
- If a file has the same repeat extention then WG should not go off (e.j. filename.exe.exe)

[Jason_DiamondCS]

Hi Wizard, some good suggestions there. WormGuard 4 has support for all the major ARCHIVE formats, also packed EXE files. The filename block list is something I think which should be kept, the new WG4 interface allows the RULESET editor to be much more flexible and easier to use. I think it is good if you only wanted a few EXE files to be able to be run on a machine, it allows filenames, paths and extensions to be added at the moment.

There is no testprot.exe anymore, you'll be able to determine if WG4 is running by an optional systray icon, checking the service's list, or running the WG4 console and seeing if "wormguard active" animation is running ;) .

There has been a LOT of improvements in WG4 already, its a completely new application with lots of new and exciting features. The free download links on our site ARE just that, free. Which is why we use that term (as do a lot of successful shareware companies), our programs usually have some form of way of telling the user that this "free" version is limited in several ways and that by purchasing it, it will unlock the rest of the features, etc.

-Jason-

[Pilli]

Thanks Jason, These insights give us much food for thought ;D Looking forward to a bit of beta bashing. 8)

[Mr.Blaze]

;DJason pleas tell me they gave you freedom for interface

[Wayne - DiamondCS]

Blaze, of course - we have complete freedom over all aspects of our software

[Jason_DiamondCS]

Blaze you will have to wait and see in regards to the interface, it is pretty much finished as it is now. All I can say is its "different" from DiamondCS's other products in look.

-Jason-

[Paul Wilders]

this thread has been splitted; the part regarding TDS has been moved to the TDS3 forum under "TDS4 suggestions"

regards,

paul

[Jooske]

Thanks Paul, was looking into it but had to run before i could.
So continue the WG4 suggestions here :)

[Kirby Smith]

My suggestion is to be able to disable WG reacting to filenames just because they have multiple periods. If the extension is not one that Windows auto executes, and the guts don't look dangerous to the heuristic analysis, then the file's registered program should be able to use it as data. Perhaps the specific extension would have to be inserted into an approved list.

kirby

[Charles Ray]

Please do not forget the Help and Support Center conflict that WG 3 has on Windows XP (the NAV conflict issue has already been mentioned).

Also I still think that WG 3 is causing the "mailto" icon to show up on the desktop. Turning off WG 3 results in the "mailto" icon not appearing on my desktop when I active an e-mail call from a webpage to my AOL Communicator e-mail client. :-\

[Pilli]

Charles & Kirby, I am certain that the new builds of TDS & WG will be fully XP compatable & that all user suggestions are taken very seriously by Wayne & his team. ;D
Personally I can't wait to start beta testing them, hopefully not in the too distant future :) Unfortunately Wayne is not giving any clues as to when that will be.

[FluxGFX]

When can we be expecting something about WG4 ?

[Jooske]

The developers are working on it, no date mentioned.

[Khaine]

Support for windows 2003 server would be nice :-)

[Jooske]

MS finally has unveiled their changes relating to server 2003 so there can finally be worked on that further.

[Jason_DiamondCS]

All NT based systems are currently working in WG4 so nothing to worry about there. Its easier to add support for the newer operating systems then it is Win9x which has been around for ages :)

-Jason-

[Caratacus]

I own licences to TDS and Port Explorer and intend to buy one for PG. I am a big fan of DiamondCS.

I would love to run WG4, but have had problems with running WG 3 on the same machine as RegRun, as discussed in this thread:

http://www.wilderssecurity.com/showthread.php?t=13722

So my contribution to the wish list is that I would like to see this problem sorted, though I realise it might be down to RegRun rather than DiamondCS.

[Jooske]

There is a program in the build to replace RegProtection which you might like to give a try, AutoStart Guard. It's brother AutoStart Viewer is already there.

[redwolfe_98]

i am not sure (if it was caused by wormguard), but after installing wormguard, i found that my intellipoint program would not run automatically at startup.. i tried rightclick/scanning a jpg file and some other file with wormguard, and it didn't show anything. when i rightclicked/scanned an html file, wormguard flagged it. it also flagged a vbs test file. so.. maybe in womrguard 4 you could have it give some reply on all files that are scanned instead of just "dangerous" ones.. (of course, i could be missing something) :)

[snowbound]

Try uninstalling just components of wormguard and then reboot and see if intellipoint starts up.




Snowbound

[Cyborg]

Hi I am new to the forums.

Is Wormguard 4 the very same DCS that others have mentioned in topics. One in particular about TDS3 and DCS.

These 2 programmes work in conjuntion with each other I presume.

Can I have a link to the DCS site I managed to find a link to TDS in the forums.

Thanx and keep up the good work. Great forums and very informative for noobs like me.

[Pilli]

Hi Cyborg, See my reply to your TDS post ;) in A guide to what works with TDS3.
By the way WG4 is not yet available.

[Jodawi]

Curiously, the WormGuard i had installed claimed to be version 4, so i'm now confused to only find 3; i uninstalled because it was causing lots of standard installers to crash.

Anyway, my top wishes:

- Don't cause lots of standard installers to crash.
- Give me the option to always ignore multiple extensions; when i try to open Foo-3.2.75.dwg, it's annoying.
- Raising an alarm due to opening a .xls with the word "virus" in a cell is silly. (File in question actually has "Antivirus" as the word, since it's a list of software and serial numbers.)

[snowbound]

Hi Jodawi :)

Welcome to Wilders.

{QUOTE-> quoting: Jodawi link=board=6;threadid=5593;start=60#msg117394 date=1073511001]
Curiously, the WormGuard i had installed claimed to be version 4, so i'm now confused to only find 3
<-QUOTE}

You will find your answer here,

http://www.wilderssecurity.com/showthread.php?t=13059





snowbound

[Tired]

What is the ETA for WormGuard 4.0?
Thanks.

[bigshot]

Hey, i just thought i could toss my two cents in:
You must have gathered a HUGE list of default trojan/worm/virus/joke filenames right? why not put those inside of wormguard's filename blocklist?

oh, and look into updating the default extension blocklist as well

[Karl G.]

A Red / Green dot, worm, button in the tray...something for -
it's On / it's Off.

Need to dis-engage WormGuard for certain functions...I can't always remember which way I...

....now what was I saying...?

Y'all have great attitudes and products...keep it up.

Thanks,
Karl

[Eliot]

Release date soon ;D I really need WG 4 as 3 causes me many problems with software I have. I can remove the protection, do what I need, then enable it for now.

I would like to see WG 4 and my Audigy 2 EAX, along with installers that create temp files that do work like yahoo and Zone Alarm. *puppy*

[bigshot]

Spot wormlike activity such as high volumes of e-mail or repetitive e-mail content. While the new feature won't stop infections per se, it may slow the spread of mass-mailing worms like the recent Blaster and Sobig.F worms

[Mr.Blaze]

;Dworm guard 4 today now lol

[hojtsy]

I suggest to include a digital signature in each .dll file distributed with WG4 (well also TDS4+PG2), and then the WG4 exe file could verify that before loading it. This could protect from a subset of dll hijacking attacks.

[tutankamon]

Hi Bigshot,
I do not have an "address book" simply because, even though I have as much protection as possible on my computer I do not want to spread any worm or virus to my friends. So I use the old fashioned way of typing their address in, instead of keeping an address book. Thus reducing the spread of so big, netsky etc.

[Jooske]

Hey Tut, that would be an excellent file to keep encrypted in your CryptoSuite.
But WG should protect against such worms even starting to run at all.

[tutankamon]

Hi Jooske,
Yes you are correct about WG protecting me, but I am trying to take every possibilty into account, anyway typing addresses in is good practice.

[Jooske]

You do have CryptoSuite as well in the meantime i hope? Think it's nice to keep all passwordlogfiles and addressbooks inthere, everything sensitive open for any abuse and preying eyes

Does this mean you delete all emails too to prevent harvesting from emails and documents, even from textfiles?

[cyberblob]

Hi Jason
it would be appreciated if the new ver Wormguard 4 has database updates like your TDS 3 etc

Regards CyberBlob *puppy*

[Pilli]

Hi Cyberblob,
{QUOTE-> it would be appreciated if the new ver Wormguard 4 has database updates like your TDS 3 etc <-QUOTE}

Your wish will be granted, as it has been stated previously, though I cannot find the thread ATM :)
I am not sure exactly what path the updates will take, hopefully Gavin will explain.

[dallen]

I have a suggestion. Work harder, faster, more efficiently, and/or more effectively. Finish something.

[wizardavc]

I agree.

{QUOTE-> I have a suggestion. Work harder, faster, more efficiently, and/or more effectively. Finish something. <-QUOTE}

[Dardasaba]

I apologize if it has been posted before, I got too lazy at the 2nd page.
How about an option to disable things that wormguard can be triggered by?
Such as multiple extensions... I have windows set to show all the extensions, so I have no use for it, it just annoys me when I try to open legit files that have v1.5 or something of that sort in them and then, that big WG window pop ups, and as if that's not enough, when I select 'always allow' another window pops up asking me if I'm sure...
Ofcourse I'm sure! Why else would I press on it??? :P

[Jooske]

You can exclude files so they are a.llowed always, but i would not be happy with all dual extensions ignored like
document.text.................(many spaces)........ exe
etc.

[dallen]

Cyberblob,
I am no expert, but I think it's better that WG4 not have a database to update, but rather recognize code that worms use and stop them that way. Again, I'm no expert.

Dardasaba,
I think Jooske is right. WormGuard is simply protecting your system by responding. One way of stopping WG from annoying you would be to simply disable its protection.

[Dardasaba]

There are things that I want WG to protect me from, and there are things that I don't.
All I wanted was to have an option to disable warnings about multiple extensions, not have it disabled by default.
All those warnings get repetetive and I tend to ignore WG's warnings because of that.

[dallen]

Dardasaba,
Initially, I was just giving you a hard time, but the more I think about it the more I think that you raise a good point. One can become desensitized to the alerts and complaisant by getting used to saying "OK...run the file" every time. Next thing you know you just gave permission to the wrong thing.

I am going to step out of my league here and as a technical question. Are the only files that we have to worry about deceiving us by using multiple extension .exe file that are masquerading as something else? Or are there others? My guess is that there are others. If there are a select few, then why not work something into the program that allows for example a .doc file with multiple extensions to run. Maybe I'm answering my own question here, but my guess is that due to executable macros that can be contained within files like .xls files this would be very dangerous. Just a thought.

[Dardasaba]

Any chance of getting a reply about my suggestion from the development team? :'(

[Jooske]

I receive more often then i like doc and xls files these days as attachments and get warnings each time, why? because of multiple extensions in the naming.
file first version01.05.04.doc of course that triggers alarms, but i see macros mentioned too. I always ask the sender about it. Sometimes i take the trouble to rename such a file so it has only one extension and gtry again, i might upload it on the kaspersky online scanner for a second opinion, etc.
But if i get it from a source which forwarded me recently one of the hoaxes to remove the "jb..." bear virus from my system i don't consider that a reliable source so i do take all possible scans to make sure the file should be ok before i open it. And wormguard will keep beeping on the file, surely!
Take the trouble of looking at it in safe mode and WG will tell you what it finds suspicious enabling you to decide better.

[Dardasaba]

http://www.ebaumsworld.com/forumfun/misc15.jpg
;D

[Dardasabaa]

New Suggestion:
Since most worms propogate through e mail, I would love to see a "safe" mail client in wormguard, in the style of "The Bat!".

[Eliot]

Wormguard 4 in June would be nice

[Wayne - DiamondCS]

{QUOTE-> Any chance of getting a reply about my suggestion from the development team? <-QUOTE}
We receive hundreds of suggestions for our software on a very regular basis, it's simply not possible to respond to them all or we'd be spending all our time working on replying to suggestions rather than implementing them. Many good suggestions have been made by a lot of people and the best ones will certainly be incorporated where possible, but please forgive us if we don't have time to discuss your suggestions.

Regards,
Wayne

[poogimmal]

keep it "as is", running in deep background without slowing down the system. I have enough bells and whistles. then again, I don't know enough about worms to make a really meaningful comment. but I assume it's design is basically a good one and strong, so why make it obtrusive with options if that's not it's purpose.

[cjtc]

How about fixing the bug in which the Windows XP Help and Support won't come up from the Start menu? It gives an error dialog about an invalid windows program. Wanna get rid of that shortcut from my desktop.

[Eliot]

If you want to remove that from the start menu, right click the start button, properties. Customize button, advanced tab, in the Start menu items.

http://home.comcast.net/~eliotwatts/linkage.JPG

[Dazed_and_Confused]

Here are a couple:

1. http://www.wilderssecurity.com/showpost.php?p=190766&postcount=3
2. http://www.wilderssecurity.com/showpost.php?p=190754&postcount=8

[Teddy]

As .com-files are used rarly on nt-systems it would be nice to have a possibility to block .com files in general and only allow a few needed for normal work (e.g. ntdetect.com).
I doubt 98% of nt-users will ever need those kind of files but maleware sometimes uses com-extension to looks like an internet link.

[worldcitizen]

{QUOTE-> Wormguard 4 in June would be nice <-QUOTE}

Yep, for sure it'll be out by June 2005!! ;D ;D ;D

DCS must be setting new records for the Guiness Book of Records under the heading 'The Most Waited for Software Upgrades in the World'. How many years and counting. ??? ???

I might get TDS 3 to play " Wouldn't It Be Nice" by The Beach Boys!!

You would think we're living in a monestary being told all the time: 'Patience! Patience!

JOB

[Eliot]

{QUOTE-> Yep, for sure it'll be out by June 2005!! ;D ;D ;D

DCS must be setting new records for the Guiness Book of Records under the heading 'The Most Waited for Software Upgrades in the World'. How many years and counting. ??? ???

I might get TDS 3 to play " Wouldn't It Be Nice" by The Beach Boys!!

You would think we're living in a monestary being told all the time: 'Patience! Patience!

JOB <-QUOTE}

LMAO
;D

Ok, all I want for christmas is my 2 dcs upgrades (tds and wormguard) :D

[Jooske]

Try Wayne's jukebox script from the user submitted SS3 scripts, so you'll be able to have TDS play whatever music you like.
Oops, this is the WormGuard forum. Hm most people have them both installed anyway. *puppy*

[Infinity]

{QUOTE-> Ok, all I want for christmas is my 2 dcs upgrades (tds and wormguard) <-QUOTE}

hmmmmmm, upgrades....hhmmmmmm

:)

[Open Source]

Simplicity overall is better for such a product i prefer clean simple and easy to use.

An adaptable database and a stronger method of catching newly advance worms is all i seek.

You can keep the extra fluff out thank you in advance.

[Gavin - DiamondCS]

Many worms these days are trojans which have spreading capabilities. Script detection is going to feature again as well as worm specific detection using parts of the TDS engine, but really worms are more and more trojans, more specifically worms are usually IRC bots. The type of malware spreading has changed a lot in 3 years.

Wormguard 4 will be somewhat an addon for users of our other programs, since worm detection and prevention is another layer in a way. Prevention is the key, which is always the focus with Wormguard. Keep in mind though that if you run ProcessGuard3 chances are you wont need much else to feel safe! so we can take the time to really make Wormguard 4 as perfect as we can.

It could turn out to be a better big business product for those who allow attachments through and their users DO run a lot of unknown files/scripts (and home users too). In those cases, security is very much dependent on the user !

[Kegel]

{QUOTE-> Wormguard 4 will be somewhat an addon for users of our other programs, since worm detection and prevention is another layer in a way. Prevention is the key, which is always the focus with Wormguard. Keep in mind though that if you run ProcessGuard3 chances are you wont need much else to feel safe! so we can take the time to really make Wormguard 4 as perfect as we can.{QUOTE->

Are you saying that if we have PG3, there is no need for Wormuard 4?

I just downloaded WG and the version says 4 on the about button. Is this the one we have all been waiting for?

[Jooske]

Hi Kegel, we certainly will need WormGuard beside all the others.
No, it's still WG-3, 4 has not been released yet.

[muf]

What about us Win 9x users that can't use PG3? You insinuate that you feel that people can use PG3 while they wait for WG4. Us Win 9x users CAN'T WAIT. We don't have that option. Why don't you stop messing about and finish these products instead of talking about them! Crikey, you are as bad as Lavasoft were when they abandoned their users while developing Ad-aware 6. Pathetic, simply pathetic...

I might just uninstall the bugger and throw it in the dustbin. You have been promising WG4 for far too long now. I really don't like it when companies promise things and fail to deliver. Process Guard was at version 1 when Wormguard was at version 3. currently Process Guard is up to version 3 and wormguard has stagnated at version 3. You have neglected your Wormguard customers, and that to me is unforgiveable.

muf

[Jooske]

Muf, what's your problem with WG3? It works fine on both my win98 and XP systems, no buggering just doing it's job on both systems.
I just installed them with the download from the DiamondCS website, made sure all other applications and most certainly scanners, all resident protection, registry protection, were all temporary disabled, installed WormGuard normal as indicated by it's installer, rebooted after installation and just use it on both my systems without any problem.
Over the time i made sure i kept away from all kind of blockers like htastop, dsostop, and all that kind of special tools which made my win98 rather unfunctional. WormGuard is ok enough for me.
So what's different in your case?
You might like to start a new discussion thread for your problem description.

[muf]

Jooske,

WG3 works on my system. I never said it didn't. Did you actually read one word of what i said? And yes i am starting a new thread to discuss this 'delay' in WG4.

muf

[heatsaver]

Windows XP Professional 64 bit compatiability would be super!

[Dazed_and_Confused]

Not sure if this is on the list yet (it's getting quite long...), but I would like to have the option to import a text formatted file of blocked filenames & extensions (or a list cut / pasted from this site). Adding one at a time can take quite a while.

[JW Clements]

{QUOTE-> Not sure if this is on the list yet (it's getting quite long...), but I would like to have the option to import a text formatted file of blocked filenames & extensions (or a list cut / pasted from this site). Adding one at a time can take quite a while. <-QUOTE}

Hi Daisey, I think that your comment that the list is getting quite long is true. From experience, just keeping things sorted out on a "To do list" takes a lot of time which draws on resources that would otherwise be programming.
However many of the suggestions are very worthwhile (on the 'whole list'), I'd think that only a few can be incorporated at one time because the 'new' package needs beta testing, which also takes more time and extends the release schedule.
So, thanks for your comment, it prompted me to post in defense of DCS. Unfortuneatly, we just fon't know the focus at the moment, PG / WG / PE or something else.

And, after all that, I agree with your suggestion, a quicker way to manage the lists would be welcome.

Jim

[Dazed_and_Confused]

{QUOTE-> ...So, thanks for your comment, it prompted me to post in defense of DCS.... <-QUOTE}

No need to defend them here, JW. It wasn't meant as a criticism - just an observation. Sorry if it sounded that way.

By the way, from what I've read around the Wilders site lately, defending DCS these days could unfortunately work out to be a full-time job. An updated release of ANYTHING would surely help.

[JW Clements]

{QUOTE-> No need to defend them here, JW. It wasn't meant as a criticism - just an observation. Sorry if it sounded that way.

By the way, from what I've read around the Wilders site lately, defending DCS these days could unfortunately work out to be a full-time job. An updated release of ANYTHING would surely help. <-QUOTE}

I just had an evil thought, maybe they should just renumber the existing 'something', say PG and release it as an update, just 'forgetting' to announce what the new features are. Yes, definitely evil, I'm going to the kitchen and wash my brain and get rid of that thought.

Jim