AppGuard 4.x 32/64 Bit - Releases

Discussion in 'other anti-malware software' started by Jryder54, Oct 29, 2013.

Thread Status:
Not open for further replies.
Page 146 of 316
  1. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Well all I can say, .... is a very smart choice.
     
    Peter2150, Sep 30, 2015
    #3626
  2. Online_Sword

    Online_Sword Registered Member

    Joined:
    Aug 21, 2015
    Posts:
    146
    Hi,:) I have a new problem on AG.
    It seems that recently the concept "Kernel Mode Driver" becomes very popular.
    Although I know nothing about kernel mode driver, I still hope to know that, whether AG has a kernel mode driver or not.
    Thanks.
     
    Online_Sword, Oct 2, 2015
    #3627
  3. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Hi Online_Sword

    Actually you don't have any problem. The concept "Kernel Mod Driver" may be new to you, but there is nothing at all new about it. Almost all the software discussed in this forum uses Kernel Mode Drives. That's why you often get conflict using different softwares. You are safe with Appguard

    Pete
     
    Peter2150, Oct 2, 2015
    #3628
  4. Online_Sword

    Online_Sword Registered Member

    Joined:
    Aug 21, 2015
    Posts:
    146
    Hi, Pete.:)
    Thank you for your reply.
    But..."Almost all the software discussed in this forum uses Kernel Mode Drives."...Are you sure about that?
     
    Online_Sword, Oct 2, 2015
    #3629
  5. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Pretty sure, as I have work and talked with the developers of most of the software I use. Kernel mode drivers go back to XP days. Nothing new.
     
    Peter2150, Oct 2, 2015
    #3630
  6. Online_Sword

    Online_Sword Registered Member

    Joined:
    Aug 21, 2015
    Posts:
    146
    Em...well, at first I thought it was a novel technique first used by Bouncer or SmartObjectBlocker.:confused:
    I am still confused by this. I will PM you later.
     
    Online_Sword, Oct 2, 2015
    #3631
  7. Infected

    Infected Registered Member

    Joined:
    Feb 9, 2015
    Posts:
    1,137
    That's the way a read it also. Only a select few use KM.
     
    Infected, Oct 2, 2015
    #3632
  8. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Guy's kernel mode drivers were around back when DiamondCS first released ProcessGuard. and it had a kernel mode driver. When I tested Kaspersky AV V6, it has kernel mode drivers. They are commonly used in most security software. When ERP first came out it was user mode, but then switched to kernel mode. Where you guys read the comment, it pertained to one piece of software.

    What is relatively new is these MiniFilter drivers. They are still kernel mode, but the difference is the old style kernel mode drivers had to have a reboot to install or uninstall. The new MiniFIlter drivers can be installed and removed with out a reboot. If you google it you can get a decent explanation from MS.

    So you can relax about Appguard, you are quite safe.

    Pete
     
    Peter2150, Oct 2, 2015
    #3633
  9. arran

    arran Registered Member

    Joined:
    Feb 5, 2008
    Posts:
    1,156
    where is the download link for the Enterprise version? I can't find it anywhere
     
    arran, Oct 3, 2015
    #3634
  10. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    Last edited: Oct 3, 2015
    Jarmo P, Oct 3, 2015
    #3635
  11. arran

    arran Registered Member

    Joined:
    Feb 5, 2008
    Posts:
    1,156
    yea but there's no actual download link on the blue ridge website for the enterprise version, the only download link is for the home version.
     
    arran, Oct 3, 2015
    #3636
  12. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Hi arran

    That is typical with Enterprise solutions. They want a one on one with you before you can down load. You might contact either Barb_C or sales.

    Pete
     
    Peter2150, Oct 3, 2015
    #3637
  13. WildByDesign

    WildByDesign Registered Member

    Joined:
    Sep 24, 2013
    Posts:
    2,587
    Location:
    Toronto, Canada
    Sorry for this being off-topic from AppGuard, but slightly in line with recent conversation.

    @Online_Sword Peter is 100% correct here. Kernel-mode drivers go way back. The majority of security software out there requires kernel-mode drivers to do much of their enforcing at a low level. Anti-virus suites and other sophisticated security software such as AppGuard likely use multiple kernel-mode drivers for different functions. Kernel-mode drivers are generally loaded from C:\Windows\System32\drivers and potentially other areas. As a matter of fact, NoVirusThanks has a wonderful tool that can help you visualize and understand some of this better, it's a free tool called Kernel Mode Drivers Manager (http://www.novirusthanks.org/products/kernel-mode-drivers-manager/). This will show where these drivers are being loaded from, Publisher, the order in which they are loaded from the kernel, etc. and will also likely help show you which drivers are signed by AppGuard and so on.
     
    WildByDesign, Oct 3, 2015
    #3638
  14. Infected

    Infected Registered Member

    Joined:
    Feb 9, 2015
    Posts:
    1,137
    Infected, Oct 3, 2015
    #3639
  15. acr1965

    acr1965 Registered Member

    Joined:
    Oct 12, 2006
    Posts:
    4,995
    I have ESET av. Should I have the Eset HIPS deactivated with Appguard running? Also, where can I see which version of Appguard I have installed?
     
    acr1965, Oct 4, 2015
    #3640
  16. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Not necessarily. You just need to test a bit to see if there are any conflicts, or if Appguard blocks something of Eset. To see which version of Appguard, right click on the systray icon, and then about.

    Pete
     
    Peter2150, Oct 4, 2015
    #3641
  17. acr1965

    acr1965 Registered Member

    Joined:
    Oct 12, 2006
    Posts:
    4,995
    Mine just shows "Licensed Copy"
     
    acr1965, Oct 4, 2015
    #3642
  18. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    At the very top where it says Blue Ridge Network, there isn't a number it Something like 4.2.8.1
     
    Peter2150, Oct 4, 2015
    #3643
  19. stackz

    stackz Registered Member

    Joined:
    Dec 27, 2007
    Posts:
    646
    Location:
    Sydney Australia
    As you only have the ESET AV, you shouldn't have to do anything. It's only with ESS you need to add ekrn.exe as a power app in order for the email client integration to function in protection modes greater than install mode.
     
    stackz, Oct 4, 2015
    #3644
  20. acr1965

    acr1965 Registered Member

    Joined:
    Oct 12, 2006
    Posts:
    4,995
    http://imgur.com/4Khip5e
     
    acr1965, Oct 4, 2015
    #3645
  21. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Hmm. Here is what I'd do. Make sure you are online, and uninstall. You might want to go to the program files first and copy out the file Appguardpolicy.xml. It has all your settings. Re download from the website and make sure the file version is 4.2.8.1 Reinstall and re apply your license, and see what you get.

    Pete
     
    Peter2150, Oct 4, 2015
    #3646
  22. marzametal

    marzametal Registered Member

    Joined:
    Mar 19, 2014
    Posts:
    766
    @hjlbx
    That's AG policy kicking in...
    Guarded Applications have only read access to System-Space. That .dat file is located in the root of C, which is System-Space. Rundll32 is in the Guarded Apps list, hence no write capabilities are provided.

    In regards to Quarri, want me to give it a shot? I am nearly ready for a backup; read this thread twice and set things up nicely. Can try and get it working before I move onto my next app. Up to you bud.
     
    marzametal, Oct 7, 2015
    #3647
  23. blacknight

    blacknight Registered Member

    Joined:
    Sep 25, 2007
    Posts:
    3,348
    Location:
    Europe, UE citizen
    The installation file is the same both for 32 Bit and 64 Bit ?
     
    blacknight, Oct 7, 2015
    #3648
  24. Mr.X

    Mr.X Registered Member

    Joined:
    Aug 10, 2013
    Posts:
    4,807
    Location:
    .
    Yes, for both architectures.
     
    Mr.X, Oct 7, 2015
    #3649
  25. XhenEd

    XhenEd Registered Member

    Joined:
    Mar 31, 2014
    Posts:
    536
    Location:
    Philippines
    In hypothetical (or even real) situation, can AppGuard (in Lockdown mode) protect the Host OS from a breached Guest OS? I'm talking about VM, specifically VirtualBox. :)
    If an advanced malware finds a way to bypass VM, can AG prevent the infection to the Host OS?
     
    XhenEd, Oct 7, 2015
    #3650
Page 146 of 316
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...