AppGuard 3.x 32/64 Bit

Discussion in 'other anti-malware software' started by shadek, Mar 12, 2011.

Thread Status:
Not open for further replies.
  1. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    how did you do it dave?
     
  2. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,696
    Location:
    USA
    Thanks for the info Barb, but I was already aware of this. I was just wanting to be able to double check on the website for myself. I have had problems with other applications reporting to be up to date in the past when they were not so I always like to double check by going to the site for myself. I do not see anywhere on the site that reports the latest stable build.
     
  3. Brandonn2010

    Brandonn2010 Registered Member

    Joined:
    Jan 10, 2011
    Posts:
    1,854
    Hello. I'm not sure if this is causing problems, but I've noticed lately I get events that Avast! Service was prevented from reading memory of Google Chrome. Do you know what that's about?
     
  4. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    the parental controls for appguard finally works in my win7 64 computer so no one now can change the security level;)
     
  5. puff-m-d

    puff-m-d Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    5,703
    Location:
    North Carolina, USA
    I went ahead and made WRSA a power app.

    As for MailWasherPro, the main program executable is signed, but the updater executable is not. I went and excluded the updater executable from user space (only the executable and not the folder itself). It seems to be fine now. I shall see when there really is an update whether I need to exclude the entire folder or not.

    So far I am really liking AG and it is quickly becoming one of my favorites. Of course the support here at Wilders and Barb_C make an already great product even better.
     
  6. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    I added the avast! service as a Power App to make sure there was no interference by AppGuard after seeing one or two MemoryGuard events. I'm not sure why AppGuard should be blocking memory read access though but adding the avast! service as a Power App should hopefully resolve it.
     
  7. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    LOL :D
     
  8. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    Sorry I got tired and took a nap.You got it j cool.Once I set it up and loged off and on to a none power user account,I had to uncheck the privlege mode and apply.Now right click option to lower protection is gone and on the same non power user account with out the need to log off,I can enter user name and password in AppGiuard and change it if needed.This is great for kids puter but on my system I dont want or need mutiple user accounts.
     
  9. Ashanta

    Ashanta Registered Member

    Joined:
    Aug 21, 2007
    Posts:
    702
    Location:
    Europe
    WSA is working well with AppGuard with the default settings. Don't need to add WRSA.exe to Power Apps or Guarded Apps.
     
  10. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    dave i got it work in 2 computers so 1 more to go;)
     
  11. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    Great.:thumb:
     
  12. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    NOW CAN NOT BE DISABLE OR TAMPER:D
     
  13. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    I just wish it can be done with 1 windows user account.
     
  14. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    it is 2 1 administrator and the other standard user account:)
     
  15. puff-m-d

    puff-m-d Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    5,703
    Location:
    North Carolina, USA
    Hello,

    It will appear to be OK but in reality WRSA needs to be made a power app.
    See this thread for Joe's answer to this.
    https://www.wilderssecurity.com/showthread.php?p=2092765#post2092765
     
  16. Ashanta

    Ashanta Registered Member

    Joined:
    Aug 21, 2007
    Posts:
    702
    Location:
    Europe
    Thanks !

    I've just add WRSA.exe on 'guarded apps' for testing.
    If I noticed something wrong, I will add on power app

     
  17. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    AppGuard's MemoryGuard feature prevents all applications from reading or writing to the memory of other applications. In most cases an application has no business reading (or writing to) the memory of another application. Security applications are the exception.
     
  18. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Based on the info at https://www.wilderssecurity.com/show...65#post2092765
    I would NOT make WRSA a guarded application. It should be made a power app.
     
  19. puff-m-d

    puff-m-d Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    5,703
    Location:
    North Carolina, USA
    Barb_C,

    Maybe I get lucky and catch you before you leave *smiles* ... Do you know if AG covers/prevents the exploits that EMET 3.5 does? I am wondering of the overlap and whether I need or can remove EMET 3.5.
     
    Last edited: Jul 27, 2012
  20. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    I'm sorry, but I'm not familiar with EMET. I'll see if I can get input from our Product Manager.
     
  21. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    I am confused now. Under the Guarded Apps Tab, the default protection for each Guarded App is MemWrite set to Yes and MemRead set to No. I thought this meant that MemoryGuard doesn't block attempts to read from memory unless the MemRead setting for a Guarded App has been explicitly set to Yes.

    In all the time that I have been using AppGuard with protection set to the default High level, I have seen numerous alerts where MemoryGuard has blocked an attempt to write to memory but I have never seen a MemoryGuard alert where an attempt to read from memory has been blocked.
     
  22. Brandonn2010

    Brandonn2010 Registered Member

    Joined:
    Jan 10, 2011
    Posts:
    1,854
    Today AppGuard had a major freakout with Avast! I noticed a long list of entries of Avast!'s service not being able to read random Avast! temp files or something. Stupidly I deleted all the logs. I added Avast! Svc to Power Apps and all seems fine now.

    Maybe automatic exclusions should be made for security programs in a future version?

    Also, could someone check my AppGuard entry on the Policy-Restriction Programs page on my website to check if my updated description is accurate?

    Thanks!
     
  23. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    Automatic Exclushions I dont think would be possiable considering all the security apps that would have to be excluded from a gigantic whitelist no.The last thing I would want to see is AppGuard become a suite of bloat.
     
  24. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    exactly:)
     
  25. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    I agree and just to add to that: Exclusions shouldn't be made automatically - only when AppGuard is blocking something. I doubt that BRN have the resources to test large numbers of security applications to see what exclusions need to be made for each one. IMO it's not unreasonable to expect users to make their own exclusions based on the blocking messages they are seeing.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.