AppGuard 4.x 32/64 Bit - Releases

Except the licensing (perpetual vs. annual subscription license), 4.x and 5.x should be the same.

 

Version 5 has Locked Down mode.

Version 4 and 5 are virtually identical at this time.

 

Thanks, I will give version 5 a try when I can upgrade my image backup software for Windows 10. Thanks to Microsoft destroying Windows 7, I was forced to upgrade most of my machines to Windows 10 so I have to pay to upgrade some of my other software so it is compatible with Windows 10. That is why I have not been testing some of my usual Security Softs lately, and have been MIA. It's going to cost me about $200 to upgrade my image backup software alone.

 

Windows 7 had several bugs that affected my machines that would not allow them to download, or install Security Updates. I could not even connect to Microsoft update server. I contacted Microsoft support several times, and I was informed they could not do anything about it because it was due to known bugs on the server end that was not allowing me to connect to their update servers.

I also tried the rollout packages, and those would not install without errors. Some would not install at all. The OS reported that all the one's that I had installed had still not been installed so it was a huge mess. They also informed me it was due to known bugs that they have been unable to fix. I think they just wanted everyone to upgrade to Windows 10. I don't buy that they could not fix the bugs. It's in the past now though, and i'm concerned with the future. I do miss Windows 7 a lot though!

I have not updated my Image Backup Software since before Windows 8 was released so I would not trust it's reliability on Windows 10; that is if the older version is even compatible with Windows 10. I use Shadow Protect, and it's quite expensive to even upgrade. The best action to take would be to update SP to the recommended version for the OS for reliability.

Edited 11-6-16 @ 4:30

 

It was expected, after all MS is a business company made to generate lot of cash by whatever means possible...Why did you spend 200$ ; you didn't upgraded for free at time ? (at least once to convert the win7 licenses to win10)

 

I didn't spend anything to upgrade to Windows 10. I was talking about upgrading my Image Backup Software. I use Shadow Protect. It is costly to upgrade.

 

oh ok my bad

 

MS has broken Win7 computers of those who have not installed the optional updates but only the critical ones. Recently MS has announced a manual fix:
https://www.wilderssecurity.com/thr...check-for-updates.379435/page-19#post-2625626

I'm feeling sorry you had to "upgrade", for sure it is part of MS plan too.

EDIT: This post has nothing to do with AppGuard, except when our computer starts act wanting to take constant 24% cpu for windows update and we know having done nothing wrong. We will then start question about our security products too!

In my case I allowed TinyWall windows update rule that allows svchost.exe for any services for TCP ports 80 and 443. Even allowed all outgoing. But that was many many months ago, and was easy to find out that something was instead really broken in Windows update instead. And things got worse month by month.

AppGuard even allows Windows updates in lock down mode.

CET helped me in his posts in this thread when I first started/decided to get AppGuard. And I am also a sort of person to not believe much in adhoc advices regarding windows update when they don't come from MS. So I was really aghast noticing what MS had done, and this post is for giving advice to anyone else with W7 still struggling in getting windows updates and high cpu for nothing.

 

Q: is there something unique about some portable programs with regard to AppGuard.

O&O Shutup10 portable launch from desktop for example invokes AppGuard block.
Tweaking.com WindowsRepair portable launch (normal mode) from desktop and AppGuard is quiet.

 

No problem.

 

O&O Shutp10 (OOSU10.exe - signed: 'O&O Software GmbH') is a signed file and should be allowed to run in Protected Mode

 

I can run O&O okay. I was wondering why AG is silent with Tweaking.com WindowsRepair launch.

 

AppGuard doesn't except all characters in signatures. For example, non-English characters.

When running any utilities they should be run with AppGuard in Allow Installs, OFF or as PowerApps or installed to System Space.

It makes no sense to run utilities in Protected Mode even if allowed by signature - because the utility will be Guarded and might be prevented from functioning correctly.

 

I would make into system space a folder like c:\portables and put those executables in there and treat them as normal system space apps, if trusting them that is. Then no need to change AG mode.

Or to allow user space launches guarded or unguarded from AppGuard systray icon.

 

Such tools must change the registry or have to do system changes, it's better to let them run unguarded.

Btw.: Both tools are signed files and i was able to run both tools in Protected Mode without a block from AG.

 

This is good advice.

 

Okay, yes I understand to run utilities in Off or Power App. I have O&O Shutup10 as Power App.
No worries.
Again, I was just curious why AG Locked Down (my everyday mode) is silent with Tweaking.com WindowsRepair launch.
No worries.
I do not run Protected and do not have Publishers.
No worries.

 

Yes, #6150 interesting idea. I had not thought of, I only run a few portables as Power App. Thanks

 

I don't see the point of doing this, i rather just install them normally in this case. Portable apps' advantage is that you are supposed to put them anywhere else than system space.

 

I don't think that is their advantage. Some apps are just executables, no need to install. Say you have such stuff in an USB stick, for me it is not a right media to start executing any, so somewhere the exe has to be put.

From my understanding the Desktop is also a bad place to start any exe. Then there remains the choice of putting that file in either under C:\Users\User = user space, or under C:\"portables" = system space.
Running an app from user space is not as straightforward as from system space and can weaken AppGuard protection. I would definately run my apps from system space.

 

@bjm - you have added Window Repair to Guarded Apps ?

Please tell me what you did and I will attempt to replicate on my system.

 

correction with apology, have not added WindowsRepair.
WindowsRepair will launch in Protected (no publishers). WindowsRepair launch blocked in LockedDown.

Spoiler: WindowsRepair

11/10/16 09:39:25 Prevented process <repair_windows.exe | c:\users\bjms\desktop\pics\tweaking.com_windows_repair_aio\tweaking.com - windows repair\wr_tray_icon.exe> from launching from <c:\users\bjms\desktop\pics\tweaking.com_windows_repair_aio\tweaking.com - windows repair>.
11/10/16 09:39:13 Prevented process <Tweaking.com - Windows Repair> from writing to <c:\tweaking_ras.exe>.
11/10/16 09:39:13 Prevented <Tweaking.com - Windows Repair> from writing to <\registry\user\.default\console\%systemroot%_system32_cmd.exe>.
11/10/16 09:39:08 Protection level is set to <locked down>.
11/10/16 09:38:50 Prevented <Tweaking.com - Windows Repair> from writing to <\registry\user\.default\console\%systemroot%_system32_cmd.exe>.
11/10/16 09:38:39 Prevented process <Tweaking.com - Windows Repair> from writing to <c:\tweaking_ras.exe>.
11/10/16 09:38:39 Prevented <Tweaking.com - Windows Repair> from writing to <\registry\user\.default\console\%systemroot%_system32_cmd.exe>.
11/10/16 09:38:35 Prevented <Tweaking.com - Windows Repair> from writing to <\registry\user\.default\console\%systemroot%_system32_cmd.exe>.
11/10/16 09:38:25 Protection level is set to <protected>.
11/10/16 09:38:22 Prevented <Tweaking.com - Windows Repair> from writing to <\registry\user\.default\console\%systemroot%_system32_cmd.exe>.
11/10/16 09:38:22 Prevented process <Tweaking.com - Windows Repair> from writing to <c:\tweaking_ras.exe>.
11/10/16 09:38:19 Prevented process <repair_windows.exe | c:\users\bjms\desktop\pics\tweaking.com_windows_repair_aio\tweaking.com - windows repair\wr_tray_icon.exe> from launching from <c:\users\bjms\desktop\pics\tweaking.com_windows_repair_aio\tweaking.com - windows repair>.

 

So all is OK then ?

 

Yes, if WindowsRepair is supposed to launch in Protected sans publisher. Then all is okay.
I guess launch is okay in Protected vs update in Protected sans publisher.
Must have been in Protected thinking LockedDown.
Everyday mode (when my eyes are working) is LockedDown/Off.
My apology.
Thanks