AppGuard 4.x 32/64 Bit - Releases

Discussion in 'other anti-malware software' started by Jryder54, Oct 29, 2013.

Thread Status:
Not open for further replies.
  1. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    So, did you confirm the blank list for the Add Program Button was specific to the Finnish language version of the OS, or are you still looking at other possibilities?
     
  2. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    Disregard my last post. I see where you said AG cannot enumerate programs on Finnish OS now. I told Jarmo that was a possibility, but I thought the probability was low. I'm surprised it actually was the cause.
     
  3. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    Barb_C, I think you got my mail. This is not a right place to talk now without bringing up just more confusion. As I also get from those latest posts of yours. I will give you my Skype contact in PM, You have also my phone number.

    I am not at all in a good mood. It has been over 2.5 years hacking and harassement from that dutch guy i mentioned in email that is also somehow connected to wilders. But I promise to try be calm in Skype. There I can also share my screen to you.

    What CE asked, screen captures etc. sent from me to here is not going to happen. Things has to be handled now between BRN and me 1 to 1.
    CE please no more posts from you regarding this. They are bringing just confusion at this point.
     
    Last edited: Mar 25, 2014
  4. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    I had no ideal you was having a problem with a hacker. That is a total different matter. Good luck with resolving your problem!
     
  5. FleischmannTV

    FleischmannTV Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    1,094
    Location:
    Germany
    [​IMG]


    Haha, that list isn't supposed to be empty? For me it's always been this way and I've always had to use the Browse button instead ;). German OS of course.
     
  6. tcarrbrion

    tcarrbrion Registered Member

    Joined:
    Dec 15, 2007
    Posts:
    105
    I can see it might want to check the licence and I have an outbound rule in the firewall to allow it, but why create inbound rules for both UDP and TCP? If I delete them they get added again on next reboot.

    I am using Windows Firewall control from Binisoft. It might be a problem with that.
     
  7. jnthn

    jnthn Registered Member

    Joined:
    Sep 22, 2010
    Posts:
    185
    I find that this happens on my windows desktop as well, also with WFC installed. As to why Appguard creates windows firewall inbound rules, I have no idea.
     
  8. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    I've no idea, but I assume it must be necessary or it wouldn't do it. Maybe Barb can enlighten us.
     
  9. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    Hey Barb_C, thank you for doing research on the finnish language Windows 7. Let me know how the test machine functions regarding memory and other protections, say for Google Chrome, with the default AG install settings.
     
  10. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    Firefox can launch Adobe Flash plugin that can connect to internet:
    C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_12_0_0_77.exe

    Am I right in thinking that this a a child process of Firefox and so it is not needed to put this into Guarded Apps?
     
  11. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    tcarrbrion, jnthn, I am not seeing those 2 AG process, AppGuardAgent.exe & AppGuardGUI.exe in TinyWall blocked connections. They are running but not connecting to internet. When I licenced AG, I allowed both everything, but I noticed they are not connecting to internet after that and I blocked them. Connection might be made as some say when rebooting also to check for update.

    You can verify that also with say Process Hacker, Network tab. So simply remove them from your WFC rules. If it is not possible or if rules get added without your consent, then I suspect a conflict. WFC is not a very good windows firewall controller if rules are added to Windows firewall outside its GUI.

    I was reading WFC thread and saw something like that it keeps all the ready made built in rules and was tempted to come and ask if they can be disabled. But since no experience myself I did not do it.
     
  12. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    Correct.
     
  13. KaptainBug

    KaptainBug Registered Member

    Joined:
    Dec 26, 2013
    Posts:
    484
    You can add plugin-container.exe to guarded apps. I do that. Otherwise yes, flash player is a child process to Firefox.
     
  14. FleischmannTV

    FleischmannTV Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    1,094
    Location:
    Germany
    As a child process of firefox.exe plugin-container.exe should inherit the guarded status as well.
     
  15. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,694
    Location:
    USA
    Yeah, it's hard to believe it took this long to discover the list was blank for non English OS's. I think it will be an easy fix. I always use the browse button myself, and my OS is set to English.
     
  16. KaptainBug

    KaptainBug Registered Member

    Joined:
    Dec 26, 2013
    Posts:
    484
    Yes agreed, but still I do that for the sake of it.
     
  17. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    This is a problem that we reported to our license software vendor. I think it is fixed and will be incorporated in the next release.
     
  18. Brandonn2010

    Brandonn2010 Registered Member

    Joined:
    Jan 10, 2011
    Posts:
    1,854
    Sheesh. Just checked their website to verify the pricing on my website for AppGuard was correct. I remember reading here that it would go from $20 for 3 PCs to $30 for 3 PCs. However, I noticed it is $25 for 1 PC. Quite a jump in price, but still worth it.
     
  19. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Yes, I'm a little embarrassed that our QA department didn't catch it. But to their credit they focus mainly on testing the AppGuard protections and not so much on the GUI (unless there is a change to the GUI). Once I enter the bug in our bug base they will certainly add a test case for it.

    I did some research today and I'm not sure the fix will be as easy as you would think. Question, can we rely on the file extensions for shortcut files to be ".lnk" in all languages? Also is the extension for applications always ".exe"? If so then we have a fix. If not, it will take some more research.

    AppGuard is iterating through the start menu folder and using a Windows API to find the file type of the files it finds there. In the English OS this API returns "Shortcut" for a .lnk file. In Finnish, it returns "Pikakuvake". We're using the file type that is returned in this API (vs. the extension) to determine if the program should be added to the dialog. If the extension is universal then that may be the better test (since in this portion of the code we have the full path and can easily test against the last 4 characters in the path).

    Anyway, this is probably more detail than I should be going into to, but I appreciate the feedback we get from Wilders and I thought that you all might be interested in what the issue turned out to be. Also perhaps Fleishmann TV can let me know if the files are ".lnk" and ".exe" in German as well.

    The good news is that while researching this issue, I'm convinced that AppGuard protections are working on the Finnish version of Windows. Our QA department is going to do some further testing next week, but preliminary results are good.
     
  20. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    I'm glad you think it is worth it. Please believe me, I do not set the price (so don't shoot the messenger!).
     
  21. Feandur

    Feandur Registered Member

    Joined:
    Jun 15, 2005
    Posts:
    429
    Location:
    Australia
    Hi Barb_C:
    Went to buy 3 licences as per post 714, but website says
    Any chance of an extension or other discount offer?

    -cheers,
    feandur
     
  22. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    I'll see what I can do.

    Update: Coupon is now extended through April 15!
     
    Last edited: Mar 28, 2014
  23. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    Does Locked Down setting prevent Chrome from updating? And a further question, does it prevent also extensions updating?

    Thats what I want AG able to do and I have not seen contradictory happen so far.

    And then another question, does Chrome update on Medium setting?
     
  24. FleischmannTV

    FleischmannTV Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    1,094
    Location:
    Germany
    Locked Down might prevent Chrome from updating, but I am not 100% sure. Extensions are located in user space (AppData) and should be updated at locked down. Plugins are usually in system space (chrome installation folder in program files), but can be updated to AppData folder instead. I have seen this happening at flash plugin updates that didn't come as part of a new Chrome release. Chrome updates itself at Medium on my computer.
     
  25. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    Thanks, these questions came to my mind because of this post on Sandboxie forum.
    http://forums.sandboxie.com/phpBB3/viewtopic.php?f=11&t=18591&sid=c916b53654dc287e58d871797a60af95

    nick s there seems to go to great lengths in that thing, but Win8.1 as he told might be different. I myself disabled forced programs feature in SBIE boxes after having AppGuard as my protection too. Much easier everything with updates and having made sandbox run shortcuts to Chrome and Firefox. I feel I don't need forced programs feature.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.