AppGuard 1.4.7.0 is out

[buckslayr]

Does anybody have any thoughts about running appguard alongside of a-squared?

[buckslayr]

I want to tip my hat to appguard support team. I was having some license issues and they were extremely helpful getting things straightened out. Appguard is running great now.

[ellison64]

Originally Posted by buckslayr

I want to tip my hat to appguard support team. I was having some license issues and they were extremely helpful getting things straightened out. Appguard is running great now.

Im trying to install appguard on my desktop for my daughter to use ,but getting unlock key is already active when i try online activation.It was installed a few months back but reinstalled vista on the desktop ,so its not on my laptop or desktop now.Should the software have been deactivated like shadowprotect before uninstalling it?.Ive contacted appguard but they are out of the office until monday.Anyone have any suggestions how to get my lice3nce to activate?.
tia
ellison

[1000db]

When you reboot the machine does AG ask for a key or to continue the trial?

[buckslayr]

I struggled for a couple of days with the same problem. Uninstall & reboot. Re-instsall. Don't restart when it asks you to. Click on appguard and then insert license. Should activate. Then reboot.

[ellison64]

Hmmm...
Ive reinstalled appgaurd as aministrator,put in licence and activated it and rebooted.The only problem now though ,is the program doesnt seem to be working correctly.When i open the gui ,theres only status and settings tab ,with everything set to off in red letters ,and theres nothing to lcik in either tab except ok.Appguard is in the system tray with a green tick but nothings working?.This is getting frustrating.Im using vista and avg Internet security.I also have shadow defender installed but everythings running in nor mal mode.
ellison

p.s i dont see any app guard process running in taskmanager either,although the tray icons there.

[buckslayr]

Make sure to delete all program folders when you uninstall. Try using revo.

[Eirik]

Originally Posted by ellison64

...Ive contacted appguard but they are out of the office until monday...

Hi All,

The AppGuard Support team is actually in today. However, one of the members is out and set up his 'auto-respond' without exclusions. Ellison received one of these when he contacted us, which suggests everyone is out until Monday.

Cheers,

Eirik

[ellison64]

Well appguard support have just emailed me and are helping figure this out (looks like someone must still be at the office).The appguard service is showing that its running and set to automatic,however when i click the service entry i get a pop up that says "configuration manager .The specified value does not exist in the registry"
ellison

[ellison64]

Originally Posted by Eirik

Hi All,

The AppGuard Support team is actually in today. However, one of the members is out and set up his 'auto-respond' without exclusions. Ellison received one of these when he contacted us, which suggests everyone is out until Monday.

Cheers,

Eirik

Thanks for the email support.Trying to get this running so i can go have a drink and get my daughter off my back..and let her use the pc
ellison

[ellison64]

Hello Eirik....
Please thank your team for helping me get appguard up and running.Ive followed instructions in support email ,( had to show hidden folders to delete) re-installed ,activated license and all is well.Now im off to have some wine,and my daughter can happily play on bebo.
thanks again
ellison

[Greg S]

Drive-by download protection does not honor an allowed addition to Drive-By Download Protection Extensions.

[pegr]

Originally Posted by Greg S

Drive-by download protection does not honor an allowed addition to Drive-By Download Protection Extensions.

After making the changes try exiting the GUI and reloading it again and see if that helps. My experience of adding folders in order to customise the way AppGuard works is that the changes don't always take immediate effect without first restarting the GUI.

[Greg S]

Originally Posted by pegr

After making the changes try exiting the GUI and reloading it again and see if that helps. My experience of adding folders in order to customise the way AppGuard works is that the changes don't always take immediate effect without first restarting the GUI.

Hmm, let me experiment with this.


OK, didn't experiment. I was going to but before doing that, I wanted to try one more time before the GUI restart thingy and now it works. What's up with that?

[Greg S]

Eirik, I'm back on this Private Folders situation again and I have a question. I have AG installed on E: partition and the default private folder for IE is e:\users\seven\documents. Here is what I get when I use the paper clip for attaching images in the forum.



Notice in the screenshot that I only get the AG info dialog for the supposed blocked action. OK, if I navigate in the left hand sidebar to "Computer\Windows 7 Professional\Users\Seven\My Documents", I get this



Notice in that screenshot, the dialog with "Access is denied." Which of the two screenshots is AG's intended behavior? Keep in mind that I've mentioned before that with the first screenshot, I have been able to access and post images on forums, contrary to what the first screenshot dialog states.

[pegr]

Originally Posted by Greg S

Hmm, let me experiment with this.


OK, didn't experiment. I was going to but before doing that, I wanted to try one more time before the GUI restart thingy and now it works. What's up with that?

I wonder whether there may sometimes be a delay in the communication between the two AppGuard processes: AppGuardGUI.exe and AppGuardAgent.exe. If true, this could explain why the behaviour is inconsistent, and also why exiting and restarting the GUI or rebooting the PC solves the problem.

[Greg S]

Originally Posted by pegr

I wonder whether there may sometimes be a delay in the communication between the two AppGuard processes: AppGuardGUI.exe and AppGuardAgent.exe. If true, this could explain why the behaviour is inconsistent, and also why exiting and restarting the GUI or rebooting the PC solves the problem.

Could be. I'm about ready to throw in the towel on AG again. My biggest complaint is the reporting of so called blocked writings to such and such file which for me is not true. Here's a another one similar to the screenies in the last reply. Every time a song is played in WMP12, AG's tray icon starts flashing and the status panel tab chokes down with these entries.



AG's been uninstalled here for quite some time and many songs have been played whilst AG's been uninstalled. Look at the file details last access time. Better yet, look at the modified time



So, it appears that AG is again stating that it's blocking the writing of some file but in fact it's not.

[pegr]

Originally Posted by Greg S

So, it appears that AG is again stating that it's blocking the writing of some file but in fact it's not.

Not sure what's going on there. Perhaps we need Eirik to comment on this. As a possible workaround, one thing you could try to quieten AppGuard down would be to create an exclusion for the folder.

[Eirik]

Hi All,

I'm working from a new laptop, not yet fully configured and all. But, at least I can do this...

So, Greg, an engineer replicated your observations. BTW, we assumed that your system drive is E:, let us know if not. This blocking event is the result of guarding Windows Media Player, and not due to privacy mode. I don't know enough to tell you what WMP is actually doing. Sometimes a programmer (i.e., WMP) uses the wrong API, or in the wrong way. We'll take a look at this in the next regression cycle. As far as I've heard from you and the engineer, WMP is working okay but those event blocks, particularly the blinking AppGuard icon, are annoying.

I can recommend two actions for now. First and preferred, disable notifications for WMP by unchecking the respective checkbox/column in the guard list. Second, not preferred, define an exception rule that allows guarded applications to write there.

I hope this helps.

Cheers,

Eirik

[Greg S]

Originally Posted by Eirik

We'll take a look at this in the next regression cycle. As far as I've heard from you and the engineer, WMP is working okay but those event blocks, particularly the blinking AppGuard icon, are annoying.

I can recommend two actions for now. First and preferred, disable notifications for WMP by unchecking the respective checkbox/column in the guard list.

I hope this helps.

Cheers,

Eirik

Thanks, E: is correct and yes WMP does work fine, it's the filling up of the status panel with the messages that is the most annoying but the flashing icon is a close second. The population of status messages occurs each time a song is played, not just for the initial launch and first song played in WMP.

[mike21]

Originally Posted by demoneye

erik

maybe this clear the fonts problem (none English ones). tested on AG 1.4.7 (also exist on 1.3.3) ,AG cant protect such dirs

Well another keygen for fd-isr. And you have in your sig fd-isr.

[Greg S]

Originally Posted by Eirik

Hi All,

I'm working from a new laptop, not yet fully configured and all. But, at least I can do this...

So, Greg, an engineer replicated your observations. BTW, we assumed that your system drive is E:, let us know if not. This blocking event is the result of guarding Windows Media Player, and not due to privacy mode. I don't know enough to tell you what WMP is actually doing. Sometimes a programmer (i.e., WMP) uses the wrong API, or in the wrong way. We'll take a look at this in the next regression cycle. As far as I've heard from you and the engineer, WMP is working okay but those event blocks, particularly the blinking AppGuard icon, are annoying.

I can recommend two actions for now. First and preferred, disable notifications for WMP by unchecking the respective checkbox/column in the guard list. Second, not preferred, define an exception rule that allows guarded applications to write there.

I hope this helps.

Cheers,

Eirik

Eirik, WMP seems to be fixed by setting "Alarm" to "No". It still taxes the Event Viewer but at least it takes care of populating AG status tab and the blinking icon. In my post above http://www.wilderssecurity.com/showp...6&postcount=90,
Which of the two screenshots is AG's intended behavior? Also, why is the global xml policy formatted so nicely but the users policy is run together all on one line? Where is the how to's on editing the policy? Can I remove all the Office, Chrome, Adobe etc. rules?

What is the purpose of this rule?

          <C_BRN_TE_FOLDER>
            <eFolder>6</eFolder>
            <eAccessType>1</eAccessType>
            <bUser>true</bUser>
            <tcPath>desktop.ini</tcPath>
          </C_BRN_TE_FOLDER> 

[Kees1958]

Playing with appguard again

Noticed that I get warnings when using privacy mode on rootdir access in following situation.

Rootdir is added to privacy mode
Subsir is added as an allowed directory


By the way is it possible to disable blinking icon?

[Brocke]

Originally Posted by Kees1958

By the way is it possible to disable blinking icon?

I agree that would be a good addon feature. good suggestion nonless on adding that because id like to see it added.

[Eirik]

Originally Posted by Greg S

Which of the two screenshots is AG's intended behavior?

In both cases, AppGuard is behaving the same. It displays the “AppGuard has blocked….” message. The other message box is displayed by the application as a result of being denied access to the folder.

Originally Posted by Greg S

Why is the global xml policy formatted so nicely but the users policy is run together all on one line?

The global XML policy file is relatively static and was created directly by programmers whereas the dynamic or user policy is ever-changing and created by AppGuard. Our developers didn't invest much effort to endow AppGuard with better XML file formatting capabilities.

Originally Posted by Greg S

Where is the how to's on editing the policy?

Admin guide. I'll send via PM.

Originally Posted by Greg S

Can I remove all the Office, Chrome, Adobe etc. rules?

Yes, but you'd have to adjust the counters in the tags, as you'll see in the admin guide. BTW, I wouldn't expect any performance benefit from deleting these.

Originally Posted by Greg S

What is the purpose of this rule? [...<tcPath>desktop.ini</tcPath>...]

When I.E. attempts to open the My Documents folder it always tries to read the desktop.ini file in the My Documents folder. This was causing many alarms in the AppGuard details tab and Windows event viewer. The rule is making an exception so that the desktop.ini file can be read by I.E.

Cheers,

Eirik