AppGuard 3.x 32/64 Bit

Discussion in 'other anti-malware software' started by shadek, Mar 12, 2011.

Thread Status:
Not open for further replies.
  1. Space Ghost

    Space Ghost Registered Member

    Joined:
    Apr 21, 2011
    Posts:
    249
    Location:
    Poland
    Why not just combine the MemoryGuard and PowerApps settings, the default action would be PowerApp. In my opinion this is more secure.
    agpa.png
     
  2. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Yes, I found that one recently too. Thanks!
     
  3. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Good idea about setting the folder c:\sandboxie as a user folder. That should be easy.

    Can you provide me with the exact message you're seeing prior to Adobe crash? Are you adding Acrobat to the Guard List? Are you setting the MemoryGuard Read On for that? If you turn it off, does it work?
     
  4. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Unless there was a memory exception that was added to allow this, I believe that has always been the case with Locked Down. If you were able to do this previously, will you tell us what configuration settings allowed this? If so, we can add them to the default policy.
     
  5. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Great idea!
     
  6. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    I'm not happy with the tray icons either. I think we need to increase the size of the overlay status image or something. I'll pass your suggestion along to Product Management.
     
    Last edited: Oct 7, 2013
  7. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    This is a possibility for 4.x, but probably can't get it in by 4.0 (if we want to meet the 10/15 deadline).
     
  8. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Hi Barb

    Yes indeed I am adding Adobe Acrobat to the Guard list. Same reason as adding the reader. The error is one that without typing the whole thing indicates there is an installation problem and suggest reinstalling, if that doesn't work call support. Appguard log says it has blocked access to the folder in program files. Acrobat can't access that folder so it thinks the install is bad.

    Solution could be like the sandboxie one, for

    For XP make c:\program files\common files\adobe a user directory
    for win 7 make c:\program files(X86)\common files\adobe a user directory

    If one only has adobe acrobat reader installed these directories don't exist

    I realize this only impacts a relatively few home users, so if you don't want to do this I understand.

    Pete
     
  9. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    You are correct. What I did in the older version was add a memory exception (read/write) for Rundll32.exe. I realize this may weaken the protection a bit, but I have other protection on this app so that wasn't a concern.

    The actual block message is:prevented <Windows host process (Rundll32)> from writing to <\registry\user\s-1-5-21-734328257-3264176946-1070220803-1001\control panel\desktop>.

    There probably are other settings, also.

    Pete
     
  10. Arcanez

    Arcanez Registered Member

    Joined:
    Oct 5, 2011
    Posts:
    417
    Location:
    Event Horizon
    I like the current Icons better. I mean who doesn't like to have a green checkmark in the System tray? I want my green checkmark ;)

    Also the current Icons give you some good info of the protection Level. For locked down there is a lock obviously, for the recommended Setting there is the green checkmark and the orange arrow pointing down for the install mode.

    Also I do love the fact that the Icons change in the GUI as well.

    I really prefer the current Icons of 4.0:thumb:
     
  11. justenough

    justenough Registered Member

    Joined:
    May 13, 2010
    Posts:
    1,549
    Green AppGuard checkmark in the system tray makes me happy.

    Had an unusual computer glitch that just happened to interfere with being able to run the AppGuard Beta trial even after re-installs. Blue Ridge Networks was very helpful getting the problem solved over the weekend. Impressive software and customer service.
     
    Last edited: Oct 9, 2013
  12. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590

    I use lockdown so no green arrow. And the lock is so small it's a dot. I think the new icons proposed will be visibly more informative.
     
  13. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    All Beta licenses have been processed and you should have received your license via email. Please email AppGuard@BlueRidge.com if you have not received it. Also I apologize if you got two notifications. We discovered if we used the back key in the browser after sending out the email from the license server, it sent out a duplicate.
     
  14. SIR****TMG

    SIR****TMG Registered Member

    Joined:
    May 31, 2004
    Posts:
    833
    Glad I was asked to try the new BETA 4.0


    AppGuard 4.0 has the following new features:



    1. Windows 8.1 support

    2. Improved User Interface

    3. Improved MemoryGuard policy

    4. Eliminates the need to configure MemoryGuard exceptions.

    5. Reduces the need to configure Power Applications.

    6. Unicode Support (should work with user-names that have non-English characters).

    Like what I'm seeing so far . I did a complete new install for 4.0 that way nothing old left over.........:D
     
  15. Arcanez

    Arcanez Registered Member

    Joined:
    Oct 5, 2011
    Posts:
    417
    Location:
    Event Horizon
    such a shame my email Provider automatically puts mails from blueridge into the junk Folder. :ouch:
     
  16. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    I'm having trouble figuring out how the new MemoryGuard policy would affect this or how 3.x would have behaved differently. I think that you're suggesting that to support adobe acrobat we would need to add these directories as exception folders on the Guarded Apps tab so that the Guarded applications can write to those files. We would also add those directories to user-space protection so that executables can't launch from there. Is that what you're suggesting?
     
  17. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Thanks, I do too, but I don't think they are as "crisp" enough. Perhaps we can increase the size of the status overlays on the tray icons.
     
  18. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Ouch!
     
  19. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    my previous licence which was lifetime didn't work,i sent an email barb and I got 30 days only:D
     
  20. SIR****TMG

    SIR****TMG Registered Member

    Joined:
    May 31, 2004
    Posts:
    833
    So glad that sandboxie has no problems now and it kept my folder in the protected folders on 4.0 nice. I agree the icon does need to be bigger , but in all I think the guys and gals did a good job so far. That includes you too Barb C. ......:D
     
  21. Seven64

    Seven64 Guest

  22. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    We're addressing most of the other bug fixes that you mentioned, but you are given the option to enable/disable it when you either lower the protection to Install or turn off AppGuard. The checkbox appears on the main GUI:

    RE-enable.PNG
     
  23. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Not true. The license that we sent you for 4.0 is perpetual for 4.x. We changed to a new license mechanism, and unfortunately there is no way to automatically allow your old 3.x license to be good for 4.x and beyond.

    Perhaps the wording in the email is unclear. Until you activate with your license, you have a 30 day trial. Once you activate, your license will be good for 4.0 (and probably 4.x - still waiting policy decision). Most likely those that have "lifetime" licenses will have to be handled as special cases when we go to 5.0, for instance. Most likely your 4.0 license will most likely not work when we come out with a major revision. So when we require a new license for a major revision, you will most likely be issued another free license for that upgrade (although we're still learning how to use the license server so perhaps there is a way to handle "lifetime" licenses that we haven't discovered yet).

    I hope this explanation clears things up.
     
    Last edited: Oct 7, 2013
  24. Brandonn2010

    Brandonn2010 Registered Member

    Joined:
    Jan 10, 2011
    Posts:
    1,854
    I'd like to point out I haven't had the RunDLL events again, so not sure what that was all about. Also, AppGuard is blocking an AppGuard event thing:

    10/07/13 15:53:35 Prevented <AppGuard GUI Application> from writing to <\registry\machine\software\wow6432node\blue ridge networks\appguard>.

    I have it in Locked Down
     
  25. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    ok if I install it it will be lifetime again?thanks for explanation
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.