AppGuard 3.x 32/64 Bit

Discussion in 'other anti-malware software' started by shadek, Mar 12, 2011.

Thread Status:
Not open for further replies.
  1. puff-m-d

    puff-m-d Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    5,703
    Location:
    North Carolina, USA
    The help file says that there are tutorials on Blue Ridge's website and gives a link. Even with the link I cannot for the life of me find those tutorials. If anyone knows the direct link/links to them, could you please post them for me?
     
  2. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    Programs that should be guarded include Internet-facing applications: browsers, mail clients, etc. Also, applications that load data files that could contain malicious code: office applications, media players, document readers, etc.

    In terms of what exclusions to make, be guided by the blocking events that you see. The following release notes will help you to become familiar with the way AppGuard works: -

    http://www.blueridge.com/support/products/appguard/files/AG_3_3ReleaseNotes.pdf
     
  3. puff-m-d

    puff-m-d Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    5,703
    Location:
    North Carolina, USA
    OK... I use EMET and it seems that your guarded list then in AG would be very similar to what you add to EMET. For those that have used or use EMET, do you agree? Also opinions on whether the two overlap in protection as to running both would not be beneficial?
     
  4. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    V 3.4.2 is the latest stable build. I'll ask the Web site engineer to post this somewhere obvious.
     
  5. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Sorry. We just re-organized/moved our web site and it appears those tutorials did not made the transition to the new site - perhaps because they were outdated. I'll talk to the product manager about this and see if we plan to update them.
     
  6. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    The help File, the Release notes (thanks PEGR for posting the link) and this forum are the best source of information on AppGuard. Also email us at AppGuard@BlueRidgeNetworks.com. We try to respond to all emails within 24-48 hours.

    Most widely-used applications (Firefox, IE, Opera, Chrome, Office, AIM, WMP) are included by default in the Guard List. We also Guard a few OS programs (cmd.exe, regsvr32.exe and rundll32.exe) which will provide indirect protection for any program that invokes them. As PEGR mentioned, you should also add any other Internet-interfacing applications (browsers, mail clients) as well as programs that open untrusted files that you receive from untrusted sources.

    If you are using other security products such as AVs or Sandboxie, you may want to add them as Power Applications as AppGuard may impact their effectiveness.

    Also, as mentioned by PEGR, examine the AppGuard events to determine if you should add any exclusions to user space or exception folders to the Guard List policy. You really should only do this if they are associated with a security program or you are seeing a problem with one of your applications not working properly.

    PEGR, are you trying to get my job? J/K thanks for helping out!
     
  7. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Once you add a Super User, you will be prompted for your Windows Password whenever you try to change the Parental Controls. I have to run right now, but will try to give you a more detailed answer tomorrow. In the mean time, read the help topic on Parental Controls.
     
  8. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    It would be better to add to the Guarded Application List than to exclude from user-space (that way Appguard will still provide some protection). If AppGuard interferes with the application once it is running, then you will need to exclude from User Space.
     
  9. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    I dont use a password for windows only for security apps to lock from being changed.If I set up a log on windows password and then in AG parental controls will that prevent a right click on the tray Icon to change the slider settings with out a password.Even though I am a single user on my system, I would like to prevent it from being changed so easily from the tray in task.
     
    Last edited: Jul 25, 2012
  10. puff-m-d

    puff-m-d Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    5,703
    Location:
    North Carolina, USA
    Thanks Barb_C and pegr for your help!

    I went ahead and installed the trial but was told the trial period had expired. I guess a few weeks ago when I installed, decided at the moment I did not have the time to try to learn the program, and thus ended up removing it within the hour, that this bit used my trial period. So based on the excellent support I have seen here by Barb_C and the overwhelming number of of members here that love the program, I went ahead and purchased and now have it up and running.

    Now below I have several newbie questions (please forgive me) but I think the learning curve for AG is going to be quick, especially with all of your alls help.

    I do have a question on my security apps now. So far I do not really see AG interfering with any of them so to me I am assuming I do not have a need to make any of them a power app. My main concern, of course, is that all appears working fine but some function of my security programs may still be interfered with (with no apparent side effects) thus reducing some of my security or even disabling it in some transparent way. Here are my security apps now at present: WRSA-E (Webroot Secure Anywhere Essentials), WFC (Windows Firewall Control), SpyShelter Premium, KeyScrambler Premium, and EMET 3.5. I also have a few programs that I have seen in the logs but have not noticed as of yet any interference from AG. These programs are WRSA (writing to memory), IE (writing to memory of explorer), MailWasherPro (preventing update process). The only one of these is MailWasherPro where update process is in user space, so I think I should add an exclusion for that update process? Any advice or wisdom on any of the other? I see WRSA is being blocked from writing to IE, maybe because WRSA injects a dll into IE for security?

    Thanks for everyone's help, understanding and patience with my learning of this software. I am thinking (and hoping) that my learning curve will be fast. I have that good feeling that I am really going to like AG.
     
  11. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Kent, thanks for purchasing AppGuard and the positive attitude. I wouldn't recommend adding an exception for IE writing to memory of explorer (unless you're noticing an operational anomaly), but perhaps you should add WRSA as a power application. Regarding MailWasherPro, if the update files are digitally signed (they certainly should be IMO), then I would try adding the publisher to the list of trusted publishers and select to allow installs. I think this will work if you are running in High Mode, but in Locked Down mode I expect that you would have to exclude the directory from User-space (otherwise AppGuard won't even allow it to launch). At any rate, if you continue seeing blocks for the updates, then you will need to exclude the update directory from user-space protection.
     
  12. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    I think I have a solution. Setup another Windows account on your PC (with a password). This can be a user (vs. administrator) account. Be sure to remember the userid and password (although if you are an administrator, you can always reset it when you need to).

    Now, in AppGuard (you can do this when logged into your current account - no need to log in using the new user), bring up the Parental Controls interface and designate the new user as a Super User. Also uncheck the "Change Protection Level" box (and whatever else you want to prohibit):
    ParentalControl.PNG

    Be sure to click on "OK" until you reach the main GUI. Bring up the "Advanced" tab again. It should now look like this:
    AdvancedTab.PNG

    Note that the UserID and Password edit boxes are now enabled (if they aren't, give it a minute). Now, you should not be able to change the protection level (unless you are logged into Windows as the Super-User). When you want to change the level while logged into a non-super-user account, go to the Advanced Page and click on the "Enable Privileged Mode" box. You will also need to enter the Super-User's credentials and click on the Apply button:
    PrivilegedMode.PNG

    The GUI should now look like this (wait for the "Reset All settings to default" button to appear at the bottom of the dialog):
    PrivilegedMode2.PNG

    You should now be able to change the protection level and policy. To disable Privileged Mode, just uncheck the box and click on Apply.
    I hope this helps!
     
  13. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    Thank you barbara for the very detailed solution that looks like it will work.;)
     
  14. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    did you try it dave?
     
  15. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Hi Cutting, I already responded to this (and I do think it should be on the web site as well), but I wanted to let you know of a new feature that we added in 3.4.2. If you're not blocking AppGuard from checking for periodic updates, click on the "About" menu item. You will see the status that you're looking for:
    About.PNG
     
  16. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    Not yet.(Edit) it dont work, I can still disable it from the task.
     
    Last edited: Jul 26, 2012
  17. jmonge

    jmonge Registered Member

    Joined:
    Mar 20, 2008
    Posts:
    13,744
    Location:
    Canada
    same here:'(
     
  18. Brocke

    Brocke Registered Member

    Joined:
    Mar 16, 2008
    Posts:
    2,311
    Location:
    USA,IA
    why doesn't AG offer a yes or no popup to download and start the installer when new version are ready?
     
  19. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    It worked for me (I tried it before I suggested it). I was seeing a long delay between enabling and re-enabling, but you wouldn't believe the number of applications I had running (I hardly ever reboot my PC). Once I rebooted my PC the delays disappeared. Anyway, that's why I said to wait until you could see the GUI state change.

    The only other differences that I can think of between our two operating enviroments is possibly the OS (I'm running Win7 64) and that all of the accounts on my PC have passwords. I don't think either of those should be issues.

    Here are some of the finer points about Privileged Mode:

    1. If you are logged into Windows with the super-user account, AppGuard will automatically run in Privileged mode so while logged in with that account you will be able to change the protection level. When logged in with a non-super user you should not be able to change the protection level (unless a super-user previously changed to Privileged Mode and didn't disable it - see next item).
    2. I believe if you enable Privileged Mode while logged in with one user account and then switch accounts (even to a non-super user), you will still have Privileged Mode enabled.
    3. A quick way to determine if you are in Privileged Mode is that on the Customize Interface, the "Reset All Settings to Default" button is disaplayed.

    I hope this helps. If you're still having issues with trying to get this working, please email AppGuard@BlueRidgeNetworks.com.
     
  20. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    AG does display a popup when a new version is available. I don't believe that there is a link to download the setup file on the popup, but that is available on the About dialog.
     
  21. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    I will give it a try again, maybe I did something wrong. thank you barbara.
     
  22. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Help!

    Someone submitted an issue via our Sales Contact form and did not supply a valid email address. I crafted a response (which took some time) only to have the email bounce. Anyway, here is the problem:
    However, since I updated the previous Appguard version into the very recent one I have found a problem to register. It showed that the state of the registering is unknown: moreover, I even could not register the key.

    Hence, I would mention it onto the Wilders Security Forum, but I rather write it here because it's my only problem.

    Thank you for your help in advance as always.​
    If you're the person having this problem, please send an email to AppGuard@BlueRidgeNetworks.com and I will send you my response.
     
  23. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    Sure does pop up,thats how I found out when 3.4 was available.:thumb:
     
  24. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Good luck. Let me know. It should definitely work.
     
  25. Dark Shadow

    Dark Shadow Registered Member

    Joined:
    Oct 11, 2007
    Posts:
    4,553
    Location:
    USA
    Ha Ha it does work.The option to lower or turn off protection is no longer there.
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.