Do I need Wormguard?

Discussion in 'WormGuard' started by Antarctica, Mar 12, 2005.

Thread Status:
Not open for further replies.
  1. Tassie_Devils

    Tassie_Devils Global Moderator

    Joined:
    May 8, 2002
    Posts:
    2,514
    Location:
    State Queensland, Australia
    There are a number of possibilities that WG alerted, especially in a Word doc.

    1] In the doc the words "infect/infection" "virus" or a heap of other 'triggers' etc. whereby WG thinks those are possible 'attacks' and thereby alerts you to it. [This is where you need to have ALL of the options ticked as to what the user can do. You have to read the warning thoroughly first and 99 times out of 100 you can understand the implications and give the appropriate action. If you select the 'I still want to run the file' you will still get a second chance to block it again]

    2] The doc itself may have had double extensions/excess spaces eg: mydoc.version2.doc

    3] The doc "really does" contain bad strings [but in my experience the first 2 are probably 99% right]

    See pic of alerting I have on this file I changed to test it.

    double extensions, plus excess spaces as Pilli explained further up in thread.

    Try again on the doc, read it thoroughly and if it says it contains 'string' etc... read what exactly. If it's a doc that could contain those words, the chances are 99.9% it's safe.

    I have that all the time on here, as my daughter is a pharmacy student and has lots of word docs, containing strings with 'infection' 'virus' , etc. and it also alerts for her, but she understands that.

    Cheers, TAS
     

    Attached Files:

    Last edited: Aug 14, 2005
  2. Tassie_Devils

    Tassie_Devils Global Moderator

    Joined:
    May 8, 2002
    Posts:
    2,514
    Location:
    State Queensland, Australia
    To show you what I mean.

    I created a doc with "This is to infect with a virus and code inject the html of it…" words, saved and tried to open... :D :D

    The first line says it found "infect" in a suspicious string and second "virus" in a string.

    The 'string' being a line of words/commands, but of course it's completely harmless.

    Cheers, TAS
     

    Attached Files:

  3. Antarctica

    Antarctica Registered Member

    Joined:
    Feb 25, 2003
    Posts:
    2,177
    Location:
    Canada
    Hi Tassie_Devils,

    Thanks for the very details infos regarding WormGuard behaviour.NowI understand better how it works... :cool:
     
  4. Vikorr

    Vikorr Registered Member

    Joined:
    May 1, 2005
    Posts:
    662
    I havent had a popup for AGES, but if I remember right, the WG popup tells you why the popup occurred ?

    Doh...see Tassie's post above yours (not sure how I missed it)
     
  5. snowbound

    snowbound Retired Moderator

    Joined:
    Feb 18, 2003
    Posts:
    8,723
    Location:
    The Big Smoke
    Here's the one i get everytime i try to launch System Restore in XP. :D
     

    Attached Files:

  6. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Hi Snowbound, A simple one to cure and may help with other parts of windows restore that can be upset by WG

    Add the following into WG's allow list:

    c:\windows\system32\restore\rstrui.exe

    * Note: You may need to change the C:\windows if you have your OS in a non default location

    HTH Pilli
     
    Last edited: Sep 8, 2005
  7. snowbound

    snowbound Retired Moderator

    Joined:
    Feb 18, 2003
    Posts:
    8,723
    Location:
    The Big Smoke
    It worked Pilli. ;) :D

    Thanks a bunch. :cool:

    Take care,


    Steve
     
  8. Fernie

    Fernie Guest

    What is "SSM"? Thanks in advance
     
  9. WSFuser

    WSFuser Registered Member

    Joined:
    Oct 7, 2004
    Posts:
    10,639
    System Safety Monitor just use google if the link doesnt work or is too slow.
     
  10. Brandon

    Brandon Registered Member

    Joined:
    Sep 9, 2005
    Posts:
    222
    No need to go there, because it seems SSM has a new site.

    http://syssafety.com/

    Regards,

    Brandon
     
  11. sweater

    sweater Registered Member

    Joined:
    Jun 24, 2005
    Posts:
    1,678
    Location:
    Philippines, the Political Dynasty Capital of the
    :cool:

    I think WormGuard is great, it came from same company who make ProcessGuard and TDS 3. But if you have no money or don't want to spend more on protective software then the best alternative is to try and install the free ones. ;)

    Avast! Home edition antivirus has Network Shield that prevents network worms from entering the pc, and Windows Worms Doors Cleaner (WWDC) and SafeXP closes some ports and Harden-IT improves network safety, and Filseclab Personal Firewall 3 also offers built-in rules for blocking some worms, viruses and Trojans. All of them are free. :)
     
  12. roflmania

    roflmania Registered Member

    Joined:
    Nov 9, 2005
    Posts:
    17
    i know lots of ppl who dont use wormguard nor any program that are similar to it. I think the risk of not having one is somewhat subjective and depends on various factors
     
  13. hollywoodpc

    hollywoodpc Registered Member

    Joined:
    Feb 14, 2005
    Posts:
    1,325
    Like others apps you use . I like DiamondCS . They have always been good to me . However , look closely at what you use . WG is NOT a necessity at all .
     
  14. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    I'm still using it on all my computers, still warning me for possible disasters so i would feel bas without it.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.