AppGuard 4.x 32/64 Bit - Releases

Is there a special way to uninstall appguard?.Ive just tried to uninstall through programs and features (windows 7 32 bit) and through appguard installer itself an am unable to uninstall.Ive set protection mode to off but it makes no difference.Funnily enough after the uninstaller fails the mode returns to medium.Also tried ticking stop self protection and applied ,but after the uninstall fails its ticked again.I havent tried safe mode yet ,but wondered if anyone else has encountered this?.I have no problems uninstalling any other program ,so its not a windows installer problem.

EDIT : CANT UNINSTALL IN SAFE MODE EITHER.
Guess id better contact support

 

Your screenshots indicate that AppGuard is running at medium protection level. That might cause the problem. Please try lowering the protection level to "install" or "off" and repeat the attempt to uninstall the program.

 

Ive set it to off and the installer stops the service etc, gets to about 99% then rolls back and the protection level returns to medium.This happens with both windows installer and the appguard installer.

 

I am an administrator.Ive just sent email to support with event viewer logs.I hope there's a tool or guide in what to remove manually,as somethings not right,al though it has been working fine.Just tried uninstalling tonight to try some new software.

 

Uninstalled ok manually.Will reinstall tomorrow and see if same happens.

 

Hi Michael, I just responded to your trouble ticket. I should have checked here first, because I was sure that setting the protection level to "Install" should have done the trick (setting to "Off" should have accomplished the same thing). When you say that you uninstalled manually, what exactly did you try? If you run into the same issues when you try tomorrow, will you send me the install log (as described in my email to you).

 

Hi ..
Just got the email.Ive saved it in case i need to generate the log.I removed appguard with advanced uninstaller first,,,basically deleted all files folders,reg entries and then run a reg cleaner and removed the software entries then performed sc delete on the service.Everything's fine ,but i will install again tomorrow,and try it again.I do have outpost security suite installed but that seemed to get along fine with it,Not sure whether that may have caused any underlying probs though.

 

So any other comments regarding Appguard being a suitable replacement for MBAM? I'm thinking probably not.

Thanks.

 

Ok, thanks for advice for this-I'll save this text in my microsoft word.

 

Guys has anyone tried to re-test AppGuard that Black Hole exploit:
http://www.youtube.com/watch?v=EK8Fx3_Q8dA

So what was the conclusion of AppGuard test against this Black Hole exploit here?
Barb said:
https://www.wilderssecurity.com/showpost.php?p=2143430&postcount=1856

Was that it-but despite all AppGuard was not bypassed at all according to youtube video-but why did that Live Security Platinum than showed up-if AppGuard blocked its actions?

 

Barb C-

Any progress on the MBR protection module for 4.0?

 

Than what is your advice?
I should ignore them all of these tests on youtube of Comodo, AppGuard, any antivirus, any antimalware, firewall, etc., right?

 

I agree but you don't have to be a scientist either to test software against malicious links or files.

 

How would I get appguard to stop blocking these files?

12/10/13 13:52:20 Prevented process <qgif4.dll | C:\Windows\System32\rundll32.exe> from launching from <c:\users\kjdemuth\appdata\local\programs\google\musicmanager\imageformats>.
12/10/13 13:52:20 Prevented process <qtwebkit4.dll | C:\Windows\System32\rundll32.exe> from launching from <c:\users\kjdemuth\appdata\local\programs\google\musicmanager>.
12/10/13 13:52:19 Prevented process <qtcore4.dll | C:\Windows\System32\rundll32.exe> from launching from <c:\users\kjdemuth\appdata\local\programs\google\musicmanager>.
12/10/13 13:52:19 Prevented process <msvcm90.dll | C:\Windows\System32\rundll32.exe> from launching from <c:\users\kjdemuth\appdata\local\programs\google\musicmanager>.
12/10/13 13:52:19 Prevented process <log4cxx.dll | C:\Windows\System32\rundll32.exe> from launching from <c:\users\kjdemuth\appdata\local\programs\google\musicmanager>.
12/10/13 13:52:19 Prevented process <libmpgdec.dll | C:\Windows\System32\rundll32.exe> from launching from <c:\users\kjdemuth\appdata\local\programs\google\musicmanager>.
12/10/13 13:52:19 Prevented process <libid3tag.dll | C:\Windows\System32\rundll32.exe> from launching from <c:\users\kjdemuth\appdata\local\programs\google\musicmanager>.
12/10/13 13:52:19 Prevented process <libaacdec.dll | C:\Windows\System32\rundll32.exe> from launching from <c:\users\kjdemuth\appdata\local\programs\google\musicmanager>.
12/10/13 13:52:19 Prevented process <libaudioenc.dll | C:\Windows\System32\rundll32.exe> from launching from <c:\users\kjdemuth\appdata\local\programs\google\musicmanager>.

Should I add musicmanager to powerapps?

 

Peter,

isn't anything in AppData user-space by default and shouldn't everything located there be guarded, memory-guarded and running with privacy on by default? Further, the events in the activity report indicate that a .dll is trying to launch from user-space, which is prohibited by default. I don't see why 1) adding the mentioned folder to user-space is necessary and 2) why it should fix anything? The .dlls can't launch from the folder, because it is in user-space. Read/write permissions are only necessary, if a guarded app needs to write to a system-space folder. Every app should be able to write to AppData.

If you want to make the .dlls to be launchable from the appdata\local\programs\google\musicmanager, you have to exlude the folder from user-space, so the setting has to be: include "no". Then you should add the executables in that folder to the guarded list because the exclusion would make the folder system-space and the executables there could serve as threat-gate applications. Then, you might want to give the folder read/write permissions under the guarded apps / folders settings, so that the guarded executables can write to that folder, if they need to.

But, as mentioned above, that is only necessary,if the blocking events stop the app from working properly. If that's the case, the above mentioned steps could be necessary.

At least that's how I understand it and please correct me, if I am wrong!

 

Adding folders, which are already part of user-space by default, manually to user-space, does not achieve anything. AppData ist user-space by default because it is a subfolder of c:\users\username and does not have to be added manually.

Read/Write permissions to user-space folders are not necessary, because anything can already write to them. It is only necessary if a guarded app absolutely has to write to a certain system-space folder in order to function properly, but appdata\local\programs\google\musicmanager is not a system-space folder.

Adding executables within user-space to the guarded list makes sense, because they might not be able to launch otherwise. But in this case rundll32.exe is already a guarded app and isn't even located in the mentioned folder. None of what you said shoud help to let rundll32.exe launch the specific .dlls from appdata\local\programs\google\musicmanager.

Adding the Sandboxie folder to user-space can make sense in terms of security, depending on what you are trying to achieve, but then read/write permissions are not necessary.

 

I'm trying to get Locate32 to launch from path C-->user-->downloads-->locate32 folder but keep getting a denied warning. How can I allow this program to launch? It has no digital signature.

My OS is Windows 7, 32 bit

 

Didn't follow this completely, Pete -- so what did you just do?