AppGuard 3.x 32/64 Bit

Discussion in 'other anti-malware software' started by shadek, Mar 12, 2011.

Thread Status:
Not open for further replies.
  1. TheMozart

    TheMozart Former Poster

    Joined:
    Jan 6, 2010
    Posts:
    1,486
    The application simply won't run. AppGuard blocks them.

    To reproduce, do this:

    1. Install TrueCrypt as a container. Then load TrueCrypt and make it run as virtual J: drive.

    2. Install portableapps onto J:, for example, grab aMSN portable app. Get it from here:

    http://portableapps.com/apps/internet/amsn_portable

    3. Then install AppGuard.

    4. Then reboot and load TrueCrypt J: drive and try to run aMSN from TrueCrypt J: drive

    Thank you.
     
  2. shadek

    shadek Registered Member

    Joined:
    Feb 26, 2008
    Posts:
    2,538
    Location:
    Sweden
    I have Chrome installed into user-space (which is the default way to install it without installing from bundle-packs). Now, AppGuard does prevent a certain .dll file that Flash uses.

    Here's an example;

    Untitled.png

    The video does play on YouTube without any further problems, aside from that error message pop-up. The error message won't pop up until I restart Chrome again and watch new videos with Flash.

    Is there any way to bypass this error message aside from making the Chrome directory a non user-space folder? I reckon if I do that, I'm a target for drive-by downloads and such.
     
  3. abels

    abels Registered Member

    Joined:
    Apr 14, 2007
    Posts:
    103
    Location:
    Danang, VN
    Just delete gcswf32.dll and everything will be ok.
     
  4. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Thanks, we'll check it out.
     
  5. TheMozart

    TheMozart Former Poster

    Joined:
    Jan 6, 2010
    Posts:
    1,486
    Please post back here with your finding so I can know if it's been fixed or if it cannot be fixed. :thumb:
     
  6. Kid Shamrock

    Kid Shamrock Registered Member

    Joined:
    Apr 3, 2007
    Posts:
    229
    I'm having a problem with MemoryGuard. If I disable it and later try to re-enable it, it stays disabled. I click on the enable button and answer yes to the prompt but then nothing happens. Running on Win7 Ultimate 64-bit. This happens on both versions 3.1.6 and 3.2.0. Is this a known issue?
     
  7. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Try installing the latest version which is 3.2 It just was released. It's good.
     
  8. abels

    abels Registered Member

    Joined:
    Apr 14, 2007
    Posts:
    103
    Location:
    Danang, VN
    What new version 3.2?
     
  9. smith2006

    smith2006 Registered Member

    Joined:
    Mar 28, 2006
    Posts:
    808
  10. Kid Shamrock

    Kid Shamrock Registered Member

    Joined:
    Apr 3, 2007
    Posts:
    229
    Nope, it still won't work. Tried an over-the-top install and then a fresh install with no luck.
     
  11. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    How did you know there was a new version available? Are you checking the Blue Ridge Networks website regularly for updates?

    IMO there should be the ability to check for updates from within the application itself. Ideally, the program should automatically notify when updates are available.
     
  12. Greg S

    Greg S Registered Member

    Joined:
    Mar 1, 2009
    Posts:
    1,039
    Location:
    A l a b a m a
    AG warns on reboot, soon after logon.
     
  13. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    Just tried rebooting and you're right. I didn't know it would do that so thanks for letting me know. :)
     
  14. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Well actually I've been running the 3.2 agent exe file for a while. I have to say Blueridge support is phenomenal. A while back in this thread I reported a conflict with Quickbooks. After much back and forth trouble shooting the problem was identified, at least for XP, and it was a Microsoft routine to check the signatures.

    You can be sure if you have a problem and are willing and capable of working with them, they won't quit.

    Outstanding job Blueridge.

    Pete
     
  15. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    Hi Pete,

    Thanks for replying. I agree that the support that Barb and Eirik provide is phenomenal. Their commitment to their product and to the users is outstanding.

    Regards
     
  16. ruinebabine

    ruinebabine Registered Member

    Joined:
    Aug 6, 2007
    Posts:
    1,096
    Location:
    QC
    Strangely, the installer says version 3.2.0.2 while it's 3.2.0.0 on the about screen. Simply fyi.
     
  17. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    For this one the passed me off to the developer himself and I was working directly with him. It was a cool experience.

    Pete
     
  18. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    The key service exe is also 3.2.0

    Pete
     
  19. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Will do. Our test department is busy testing our EdgeGuard product so it may take a while before they can work this in.
     
  20. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    The last two digits are used for our internal release process and aren't meant to be customer facing (except if you actually look at the properties of the executables and installation files - which most non-techies do not do).
     
  21. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Yes, Blue Ridge is truly fortunate to have some talented developers working on the AppGuard product.
     
  22. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Are you referring to MemoryGuard or MBRGuard? The reason I ask is that I don't recall a MemoryGuard "button" (I have the AppGuard Enterprise version installed so I can't check the GUI right now). If you are referring to MBRGUard, you need to reboot after you enable it or disable it. This is because it is a driver that is actually getting installed (or uninstalled). Please let me know more details and I will involve one of our developers if you are still having a problem.
     
  23. Kid Shamrock

    Kid Shamrock Registered Member

    Joined:
    Apr 3, 2007
    Posts:
    229
    It was MemoryGuard, but now after a couple of times doing a fresh install of the latest version, it's working properly. The only other thing I changed was to uninstall Avast, so maybe there was a conflict there? Thanks for responding. :)
     
  24. molhopicante

    molhopicante Registered Member

    Joined:
    Aug 8, 2008
    Posts:
    135
    I'm using trial verson of AppGuard.

    All worked great until i changed to last version (3200).

    Now, allways i start up the PC, AppGuard stays in Off (Protection Level) and i can change it to another Level.

    The solution is reinstall, but when i start up th PC the next day, the problem returns.

    I'm testing and love it but if i can solve the problem, unfortunaty, i can't use it.
     
  25. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    I'm seeing an issue on Windows XP where DLLs are being prevented from launching from user space (not sure why they should need to but that's another matter). This happens if the AppGuard mode is set to High or Medium. It doesn't happen in Install mode or if the option to temporarily "Allow User-space Launches" is selected from the GUI.

    I thought I might be able to overcome this by adding the DLLs to the guard list but only .exe files are recognised by AppGuard as applications. This seems a little inconsistent. Either it should be possible to add DLLs to the guard list or they shouldn't be detected as applications and blocked from launching from user space; otherwise, there's no workaround for this.

    One example of this behaviour is when deleting browsing history from Internet Explorer, the following blocking event is generated: -

    "Prevented process <ntshrui.dll> from launching from <c:\documents and settings\administrator>."

    The only instance of ntshrui.dll that is present on the file system is located in c:windows\system32 as expected.

    Another example of strange behaviour was where the Panda Cloud URL Filtering DLL was still being detected by AppGuard as trying to launch from user space even after all traces of the application and its associated files had been purged from the system, and the system rebooted.

    The only other security software running alongside AppGuard is Comodo Firewall with Defense+ (but no AV). This behaviour only started with AppGuard 3.1.6 and has continued with AppGuard 3.2.0.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.