AppGuard 3.x 32/64 Bit

Discussion in 'other anti-malware software' started by shadek, Mar 12, 2011.

Thread Status:
Not open for further replies.
  1. Dave53

    Dave53 Registered Member

    Joined:
    Feb 23, 2009
    Posts:
    123
    This issue has been reported a few times during the beta testing also. It may be worth sending an email to AppGuard support.
     
  2. shadek

    shadek Registered Member

    Joined:
    Feb 26, 2008
    Posts:
    2,538
    Location:
    Sweden
    I have experienced the same problem on my girlfriend's laptop. It was solved once she bought a new machine two months later and AppGuard was deployed without problems.
     
  3. ellison64

    ellison64 Registered Member

    Joined:
    Oct 5, 2003
    Posts:
    2,587
    Maybe this thread may help you..different operating system but same symptoms.
    https://www.wilderssecurity.com/showthread.php?t=295016
    ellison
     
  4. Nightwalker

    Nightwalker Registered Member

    Joined:
    Nov 7, 2008
    Posts:
    1,387
    Thanks buddy :thumb: , the error is the same but it is the first time i try Appguard. I dont get the guard list applications by default too.
    “Restore all settings to default” didnt work.
     
  5. ellison64

    ellison64 Registered Member

    Joined:
    Oct 5, 2003
    Posts:
    2,587
    Sorry it didnt work for you.I found that appguard support was pretty quick ,so im sure they will sort it for you .
    ellison
     
  6. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    DarkStalker, I'm sorry that you're having problems with AppGuard. Will you please contact AppGuard support (AppGuard@BlueRidgeNetworks.com). We'd like to get a copy of your policy file (in C:\Documents and Settings\<user_name>\Application Data\Blue Ridge Networks\AppGuard\AppGuardPolicy.xml). Also, are you running the English version of Windows? Thanks!
     
  7. Nightwalker

    Nightwalker Registered Member

    Joined:
    Nov 7, 2008
    Posts:
    1,387
    I am using the Portuguese Br version (updated) , I will reinstall and send a copy of my policy file.

    Just a observation , if I click more than 10 times in the error box i can modify the configuration. In the "Privileged Mode" there is no error , but when i restart the system Appguard goes out of this Mode and get the bug again.

    Ps: There is no default guard list and the function to add programs is a little broken too.

    Thanks for the help :)
     
  8. chipo

    chipo Registered Member

    Joined:
    May 2, 2009
    Posts:
    41
    Location:
    Spain
    Hi, I have the same problem with Windows XP spanish.

    Xin, from Blue Ridge wrote me this:

    The issue is identified. Spanish folder name for “program files” is different from English; Due to self-protection, AppGuardAgent.exe cannot write to Registry. Currently, I only have a workaround for the issue. The workaround only fixes the license issue, AppGuardAgent.exe will become stoppable from Task Manager, and AppGuard folder is not read-only. The next release will fixed the issue completely.

    Here are the steps to fix the license issue:

    1. If AppGuard pops up license dialogbox, please don’t enter license key, just continue your trial.
    2. Go to Customize->Advanced tab, Check “Stop Self Protection” checkbox, and click “Ok” button. This will stop self-protection.
    3. Right click TrayIcon, and select “About” from TrayMenu.
    4. Click “License” button on “About” dialogbox to activate license.



    License issue should be fixed after the above steps. Let me know if you have any issue.



    Greetings
     
  9. Spysnake

    Spysnake Registered Member

    Joined:
    Apr 11, 2009
    Posts:
    189
    I installed the trial version, and it seems that everything is working fine, expect that in the installation process MBRGuard's drivers were unsigned and Windows prompted for me to decide whether to allow the driver. I allowed it of course, but does this setting last through reboots? (pretty beginner question, yes, but I'm worried if PatchGuard or some similar Windows 7 64-bit security measure doesn't like unsigned drivers)

    As an addition, it would be nice if the installer showed which version it is going to install and whether it is 32, or 64-bit. Now the installer just announced that it is going to install "AppGuard". Purely cosmetic issue, but something that caught my eye as an beginner programmer.

    I also... have to ask few questions about the usage :D

    I have the setting on High at the moment. AppGuard guarded my Firefox installation by default. However, Firefox is not installed in a "user-space"-directory? What is the main idea behind the user-space and the guarded applications? I just got a little confused with that.

    This computer is also for gaming. My games are located in C:\Games, not in the \Program Files. Will AppGuard interfere with my game processes? I tested and it seemed to not do anything, but I'm worried if the Memoryguard will restrict a program like Steam, which works in conjuction with the games installed alongside it? What if I change the Games directory to an separate drive, like D:\?

    Sorry, I just have to learn a bit! ;)
     
    Last edited: May 8, 2011
  10. shadek

    shadek Registered Member

    Joined:
    Feb 26, 2008
    Posts:
    2,538
    Location:
    Sweden
    You need to exclude your Steam directory from AppGuard. I couldn't install anything or play anything without conflicts. But after excluding it from protection, it all works fine. Only time I need to put AppGuard into 'install-mode' is when installing new Steam games and after that set protection at max again.
     
  11. Spysnake

    Spysnake Registered Member

    Joined:
    Apr 11, 2009
    Posts:
    189
    Thank you, I will try excluding the Steam directory.
     
  12. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    One of the main strengths of AppGuard is its ability to protect against drive-by downloads. To achieve this, AppGuard splits the file system into two regions: User Space and System Space. Similarly, applications are split into two types: Guarded and Unguarded.

    User Space is where personal data files and folders are stored. By default, it consists of the user profile plus any additional non-system partitions.

    System Space is everything that is not considered to be User Space. It is where the operating system and (most) application programs are held.

    Guarded applications are untrusted applications (e.g. browsers, etc) that are run with reduced rights. Applications can be guarded either explicitly by adding them to the Guarded Applications List or implicitly by running them from User Space. All applications run from User Space are automatically guarded. Guarded applications have full access to User Space but restricted access to System Space. Some areas of the registry are also protected against modification.

    Unguarded applications are trusted applications that run from System Space. Unguarded applications have full access to System Space but restricted access to User Space: They can't write an executable file to User Space then run it unguarded but, depending on the protection level, it may be possible to run it guarded.

    The way in which these concepts combine to provide drive-by download protection can be summarised as follows: -

    Guarded Application:
    System Space: Read YES, Write NO, Execute YES​
    User Space: Read YES, Write YES, Execute YES​

    Unguarded Application:
    System Space: Read YES, Write YES, Execute YES​
    User Space: Read YES, Write YES, Execute NO​

    The exact way this operates will also be modified by other factors such as the Protection Level (Low, Medium or High), Privacy Mode settings, and any other folder exceptions that have been defined, but the above should give you the basic idea.
     
    Last edited: May 10, 2011
  13. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    i think it will be a good idea if appguard has a whitelist for trusted vendors,less complications:)
     
  14. shadek

    shadek Registered Member

    Joined:
    Feb 26, 2008
    Posts:
    2,538
    Location:
    Sweden
    I agree, it would be a nice addition. That said, I prefer more if AppGuard stay with the same strict system policy properties. The strict policy applies to ALL 3rd party applications, and currently, you can configure AG afterall. I like it the way it is... but at the same time, there could be an option which would allow automatic whitelisting.
     
  15. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    I would disagree here. Most browsers are trusted applications, and whitelisting them would mean they could do what they want.

    Whole idea is to prevent that. Candidly, I think whitelisting is over blown as it is impossible to list everything you might trust.
     
  16. shadek

    shadek Registered Member

    Joined:
    Feb 26, 2008
    Posts:
    2,538
    Location:
    Sweden
    Good point.
     
  17. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    Whitelisting of signed executables from trusted vendors is a good idea to make the MemoryGuard application exception list easier to manage, but should be restricted solely to this single function.

    As you rightly point out, whitelisting of guarded applications would defeat the whole point of AppGuard. The AppGuard help file warns against adding guarded applications to the MemoryGuard application exception list, presumably for similar reasons.
     
  18. mike21

    mike21 Registered Member

    Joined:
    Jun 1, 2006
    Posts:
    416
    Hi, I try to install it on a Windows 7, 64 bit machine and I get the following error
    Code:
    Error 1935.An error occurred during the installation of 
    assembly component 
    {97F81AF1-0E47-DC99-A01F-C8B3B9A1E18E}. 
    HRESULT: 0x80070BC9. 
    and then
    Code:
    The wizard was interrupted before AppGuard could be 
    completely installed.
    Your system has not been modified. To complete installation at 
    another time, please run setup again.
    
    Click Finish to exit the wizard.
    What to do next?

    edit: well I managed to install it, so ignore above. I will revert with impressions later
     
    Last edited: May 12, 2011
  19. ruinebabine

    ruinebabine Registered Member

    Joined:
    Aug 6, 2007
    Posts:
    1,096
    Location:
    QC
    (I did put my message in the wrong thread, sorry, BTW AppGuard is running great on my pc)
     
    Last edited: May 12, 2011
  20. MerleOne

    MerleOne Registered Member

    Joined:
    Mar 6, 2006
    Posts:
    1,336
    Location:
    France
    Hi,
    Do you think it could be possible to add some kind of learning mode to AppGuard, because it's very tedious to add every folder that should be ignored.
    Thanks.
     
  21. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    good idea man;)
     
  22. shadek

    shadek Registered Member

    Joined:
    Feb 26, 2008
    Posts:
    2,538
    Location:
    Sweden
    I am not sure current version 3.x works that way. Look at it as a strict policy manager. The policy is global to minimize the risks of getting something installed or planted in your user area without you allowing it.
     
  23. MerleOne

    MerleOne Registered Member

    Joined:
    Mar 6, 2006
    Posts:
    1,336
    Location:
    France
    OK, but on my win7 starter edition, it seems that the normal operation gets disturbed, even on medium mode. I sometimes get a lot of error messages saying I have no authorization to launch harmless applications or some other strange things. After I disabled AppGuard, all went back to normal.
     
  24. Antarctica

    Antarctica Registered Member

    Joined:
    Feb 25, 2003
    Posts:
    2,177
    Location:
    Canada
    You are right, I do experience the exact same behaviour and I also have Win 7/64 bits.o_O
     
  25. shadek

    shadek Registered Member

    Joined:
    Feb 26, 2008
    Posts:
    2,538
    Location:
    Sweden
    I know it might be a hassle to configure AppGuard, but in those scenarios, try adding the needed files to the guarded list. :)
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.