Discussion in 'other anti-malware software' started by shadek, Mar 12, 2011.
Redundant. AppGuard offers the same protection.
I would say you don't need it. There's no harm in added security though as long as your machine does not take a performance hit, or run into compatibility issues with the other security application you already have installed. You could also try VoodooShield instead EMET if you have not already. I believe you need a good Proactive Virus Scanner more than EMET since you already have AG, and NVT installed. A good Proactive Antivirus is still very beneficial even with rock solid application such as Appguard, NVT, Faronics AE, or VoodooShield.
I'm just testing out AppGuard at the moment and have a few qs..
1. I can run executables via cd/dvd (in lockdown) - is there any way in AppGuard to block these as default? Can drives be added to user-space? I think this should be a blocked/userspace area as removable/network media.
2. Is it possible to delete the default exceptions (google) in: AppGuard > customise > advanced > memoryguard application exceptions list? This seems hard-coded in but I don't use Chrome and would rather close as many exceptions as possible in the settings.
Thanks, exporting settings was one of my other questions..
Overall, seems a very good layer and definitely worth the cost over the hassle of customising applocker/srp and emet (i.e. good, simple replacement over these products).
Just a quick question... How does AppGuard handle the autoupdate function of Google Chrome? Mine is installed in the ProgramFiles directory.
Edit: To extend the question, how does AppGuard handle applications that auto update? For example, Steam automatically updates the games installed. How will it be affected by AppGuard?
I keep Chrome 'guarded' in Locked-down mode and it can auto-update itself (I've allowed it in Publishers list).
I don't keep Steam 'guarded' though as it's so insanely tested by millions of users. I see it as safe enough to not 'guard'. Locked-down mode still prevents new games from being installed though, so I have to set AppGuard to 'install' when I want to install a new game. Updating games works fine without any need to temporarily set AppGuard to 'install'.
Just what I needed to know. Thanks!
Just updated to Sandboxie 4.02, w7x32, AppGuard in lockdown
As well as the above, I had to add SbieSvc.exe (readwrite) to MemoryGuard exception list
Does AppGuard blocks malicious Java Scripts ?
It does not block them, but it prevents the Java Script from causing harm to your computer by not allowing it to alter any critical areas of system space.
When is Version 3.5 going to be released ?
I don't know, but I like AppGuard policy: no free version, because all people then use only it, but low cost that tempts to purchase: So we can hope that it won't have the destiny of many security softwares that we loved.
I'm curious about this too. I'm running Windows 8 and have a few minor issues with Appguard. In the release notes it mentions that it's not fully tested under Windows 8 (not those exact words, but you get the point) so I'm looking forward to the next update. Any news on its progress would be great!
End of june is what I've heard from Barb_C. But as often as devs run into last minute problems, I wouldn't be surprised if it's a week or two late.
Hi Barb and all
This link posted in another thread on this forum is quite scary.
It appears what is going on is a malicious exe flashes the bios and the result is really bad.
So the question is how would Appguard handle this?
I'm thinking about trying AG on my laptop with NOD32 V6 installed, are there any current conflicts with it and the beta v7?
No. And should any conflicts occur with v 7 beta, just add NOD32 to PowerApps.
Are there any settings I have to change to either program or install and forget?
Install and forget. Just watch AppGaurd events if NOD32 is blocked in any way. If it is, add that .exe to PowerApps. Shouldn't be needed though as in most cases a blocked even won't stop the application from running smoothly.
I'm not sure what the answers are but I think removable and network drives should be made userspace by default in future versions and I also would like to delete default exceptions that I don't need.
Interesting, I hope guarded programs are not able to touch the BIOS. I also think it might be worth to block BIOS flashing alltogether just like with MBRguard. Some BIOS'es have jumpers for write protection and some a setting in the BIOS itself, but a lot don't have either of them.
Does MBRguard also protect GUID Partition Table on non-MBR systems?
BRN plans to refresh MBRGuard module and add GPT protection in the next versions.
I have a problem regarding AppGuard und my Microsoft Office 365 Home Premium. When I run AppGuard in "High", i cannot use the "save" option properly. When I try to explore my skydrive folder or "my computer" in the "file / save as" menu with the "browse" function, no window opens. Saving files does not work at all. Strangely everything works perfectly well if i try explore in the "file / open" menu.
If i set the protection level to "off", restart Word and try again, it works. It still works, if I change the protection level back to "high" while Word is still open. There are no events in the event log.
Good to know
Separate names with a comma.