AppGuard 3.x 32/64 Bit

Discussion in 'other anti-malware software' started by shadek, Mar 12, 2011.

Thread Status:
Not open for further replies.
  1. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    We have been able to replicate the Windows 8 MBRGuard issue here at Blue Ridge. There is definitely an issue with MBRGuard not getting installed properly on Windows 8. We plan on having a release to address this before the official release of Windows 8. This defect only affects MBRGuard protecion. It does not affect AppGuard protection. Thanks for bringing this to our attention.
     
    Last edited: Oct 3, 2012
  2. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    An open Guarded application *should* not have caused a problem. Do you have any dump files related to the Serious Error? If so, if you send them to AppGuard@BlueRidgeNetworks.com we can take a look at them to see if AppGuard was involved in causing the problem.
     
  3. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    To determine if your AV needs to have Power App priviledges, periodically examine your AppGuard events (shown in the AppGuard GUI) to determine if there are any blocking events related to your AV. If there are MemoryGuard or other blocking events then either add your AV as a Power App or as a MemoryGuard exception. If you don't see any blocking events related to your AV then you probably don't need to change your AppGuard policy at all.
     
  4. 22ndcitysaint

    22ndcitysaint Registered Member

    Joined:
    Sep 22, 2011
    Posts:
    62
    Location:
    PH
    I checked it again and it msiexec.exe is there during startup but after half-an-hour, msiexec.exe is no longer running. I disabled the Appguard service to check, msiexec did not run on startup. Enabled the Appguard service again, msiexec.exe was running again, but after 30 minutes or so, msiexec.exe is not running anymore. I guess everything's alright, eh? I'm using Windows 7 Ultimate 32-bit :D
     
  5. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    I think everything is okay, but I'll try the same experiment and if I get the same results, I'll check with the developers for an explanation.
     
  6. puff-m-d

    puff-m-d Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    5,703
    Location:
    North Carolina, USA
    I get the same results here... I had been wondering about msiexec.exe myself but figured it was just windows doing something but it is definitely tied to AG somehow.
     
  7. TheKid7

    TheKid7 Registered Member

    Joined:
    Jul 22, 2006
    Posts:
    3,571
    Yesterday evening, I EMailed the MiniDump file to both the Provided EMail address and the Support EMail address. The Provided EMail address returned an "Out of Office" message.
     
  8. DBone

    DBone Registered Member

    Joined:
    Nov 24, 2010
    Posts:
    1,041
    Location:
    SoCal USA

    OK, same behavior here. It's described as "Windows Installer" and runs after boot, then goes away after 20ish minutes.
     
  9. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Thanks for sending the dump file as requested. I did send you an email response, but want to address the Wilders forum as well. The dump indicated that your crash was due to a conflict with Super AntiSpyware. This is a known conflict on XP (but not on Win7 or Vista), and I beleive it has been discussed on this forum previously. I apologize for not noticing that you had SAS installed on your PC earlier - I see it in your tagline now and perhaps you mentioned it in one of your posts. Anyway, these two products cannot live together on XP, so one should be removed (I hope that you chose to remove SAS ;), but of course that is entirely up to you).
     
  10. TheKid7

    TheKid7 Registered Member

    Joined:
    Jul 22, 2006
    Posts:
    3,571
    Thank you.
     
  11. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    I did get your email. The AppGuard@BlueRidgeNetworks.com email goes to several people on our support team so that if one of us is "out of office" someone else can answer. Anyway, I guess one of our support people is out of the office today - sorry about the confusion. Anyway, you should have received my response a few minutes ago.
     
  12. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Mystery solved. I just needed to ask one of the very smart developers here to get to the bottom of it. The AppGuard service is using a Windows Installer API to check its own version. The current version is compared to the one on our Web Site. If the current version is older then the one on the Web then AppGuard will notify the end-user that an update is available.
     
  13. DBone

    DBone Registered Member

    Joined:
    Nov 24, 2010
    Posts:
    1,041
    Location:
    SoCal USA
    Thanks for the info Barb! :thumb:
     
  14. arsenaloyal

    arsenaloyal Registered Member

    Joined:
    Nov 1, 2009
    Posts:
    513
    Okies thanks for that,so appguard does rely on msiexec.exe for update check then. Good to know because it was blocked by my firewall,i shall allow it now.
     
    Last edited: Oct 6, 2012
  15. 22ndcitysaint

    22ndcitysaint Registered Member

    Joined:
    Sep 22, 2011
    Posts:
    62
    Location:
    PH
    OK thanks for the heads-up! :)
     
  16. 22ndcitysaint

    22ndcitysaint Registered Member

    Joined:
    Sep 22, 2011
    Posts:
    62
    Location:
    PH
    Just a question guys..

    Do I still need Windows Updates (security updates for Windows, IE and .NET Framework) when I have AppGuard in Locked Down mode?

    I know AG protects against exploits and vulnerabilities, just want to know your opinions. Thanks.
     
  17. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Hi 22ndcitysaint

    Not counting backups etc, I run Sandboxie, Appguard, and Online Armor. I have been running Appguard in High, and am transitioning to Lockdown with no ill effects. No AV's and no AS's

    Now about Windows Updates. About a year ago a light bulb went off. I saw a Windows update notice, that said I was at extreme risk if I didn't apply it immediately. Hmm, not at risk until they posted that, but today I am. Nonsense. Since then I've not done an update to any of my four higher risk XP machines. Relying on the above mentioned software, and a bit of common sense, I've not had a single issue. Haven't had to restores to eliminate a nasty either.

    Caveat: This works for me, but may or may not work in your situation.

    Pete
     
  18. TheKid7

    TheKid7 Registered Member

    Joined:
    Jul 22, 2006
    Posts:
    3,571
    I just starting Trialing AppGuard recently.

    As a precaution, I turn off AppGuard when I install or update "Trusted" software. I noticed that AppGuard turns itself back on upon PC restart.

    Does AppGuard allow newly installed/updated software to complete the software installation/update during the PC restart before AppGuard turns itself back on?

    Thanks in Advance.
     
  19. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    Yes it does allow the updates to finish.AppGuard also turns it self back on at the preset time selected in the UI. Welcome to the AppGuard fan club.
     
    Last edited: Oct 8, 2012
  20. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    To configure AppGuard to completely turn off protection during software installation/update, open the GUI, move the Protection Level slider to Install, and uncheck the checkbox that says: "Re-enable <xxxx> level after <nn> minutes". Whenever you install new software, set the protection level to Install then after rebooting AppGuard will automatically start with the protection level still set to Install. You will then need to re-enable the previous Medium/High/Locked Down protection level manually.

    Increasing the suspension timeout value won't work because that only applies during the current Windows session. As soon as you reboot, AppGuard protection will be automatically re-enabled during the restart unless the checkbox to re-enable protection is unchecked.
     
    Last edited: Oct 8, 2012
  21. Seven64

    Seven64 Guest

    I had to uninstall AppGuard to uninstall Emsisoft Anti Malware 7.xx.
    Tried with protection off still couldn't figure out why EAM would hang during uninstall. After removing AG, EAM uninstaller worked.

    To your question, AG turns back itself back on. Had no problems installing software, just the problem above.
     
  22. Greg S

    Greg S Registered Member

    Joined:
    Mar 1, 2009
    Posts:
    1,039
    Location:
    A l a b a m a
    Same here. I quit the updates for XP and Seven about a year ago. I use Imaging, SRP, Malware Defender and AppGuard Locked Down. No AV. Works very well for me
     
  23. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    I've seen AppGuard interfere with some software installations that required a reboot when AppGuard is set to re-enable protection during the restart. I have never seen this happen though when AppGuard is configured to remain in Install mode throughout the restart. It's no great hassle to manually re-enable protection after installing software, and from my own experience I would say that it's a safer and more reliable procedure.
     
  24. Seven64

    Seven64 Guest

    Yes I know, installing is not my issue its UN-installing.

    "I had to uninstall AppGuard to uninstall Emsisoft Anti Malware 7.xx.
    Tried with protection off still couldn't figure out why EAM would hang during uninstall. After removing AG, EAM uninstaller worked."

    Thanks for your reply.
     
  25. arsenaloyal

    arsenaloyal Registered Member

    Joined:
    Nov 1, 2009
    Posts:
    513
    i just want to know if anybody notice any issues with appguard and VMware workstation 9 and bridge protocol?
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.