AppGuard 4.x 32/64 Bit - Releases

Discussion in 'other anti-malware software' started by Jryder54, Oct 29, 2013.

Thread Status:
Not open for further replies.
  1. pegr

    pegr Registered Member

    Joined:
    Apr 8, 2008
    Posts:
    2,280
    Location:
    UK
    See my reply to justenough in post #969 above.
     
  2. DoctorPC

    DoctorPC Banned

    Joined:
    Jan 9, 2014
    Posts:
    810
    Whatever, same company. Just add it to trusted.
     
  3. FleischmannTV

    FleischmannTV Registered Member

    Joined:
    Apr 7, 2013
    Posts:
    1,093
    Location:
    Germany
    Excellent point.
     
  4. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    Guarded Apps:

    1.
    The paths to Guarded Applications are not shown correctly. For instance my Firefox and Chrome browsers are under C:\Program Files (x86), but they are shown as under c:\program files. Should I believe the paths are still technically all correct?

    2.
    Clicking 'Add Program...' does not bring to view any available program list like the Help shows, but an empty list box. Is this a known bug or do I have something wrong in my install/program working?

    I tested these also in my admin account, not working either.
     
  5. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,696
    Location:
    USA
    Good observation. Firefox is listed at the wrong path in AG on my machines as well. I reported a similar issue about Opera in the past. Firefox is still being protected, but this could prevent AG from protecting Firefox to it's optimal ability. I think this should be reported. I'm going to manually add Firefox to the guarded apps list like I do with Opera until this is addressed.
     
    Last edited: Mar 24, 2014
  6. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,696
    Location:
    USA
    Btw.. I think AG should conduct a scan for applications to add to the guarded apps list instead of just assuming where these applications are.
     
  7. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,696
    Location:
    USA
    Disregard manually adding Firefox to the guarded apps list. The apps on the guarded apps list by default are hard coded, and cannot be removed. If I add Firefox to the guarded apps list then I will have it on the list twice. I will wait until Barb addresses this discovery. Jarmo, are you going to report this, or would you like me to?
     
  8. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    Sure, report if you want. I think Blueridge people read this thread though themselves too. I also think the Help manual is not uptodate regarding some program features, but that path thing is sure confusing and it is crucial to be sure those apps are guarded.

    Do you have also an empty list instead scanned program list behind that 'Add Program...' -button?
     
  9. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,696
    Location:
    USA
    I think Barb has been swamped lately with preparing for the roll out of Fortress for AOL users so she may not see our post for a few days. It's probably best to report this directly to them. I will try to report this within the hour.

    No, I have a whole list of applications listed behind the add program button. It also gives me the option to manually browse to any application I want to add if it's not on the list.
     
  10. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    Darn, I already payed for the program and now it appears my install is faulty. I can sure browse for the program file exe location, but no automatically by AG scanned list exist.
     
  11. Peter2150

    Peter2150 Global Moderator

    Joined:
    Sep 20, 2003
    Posts:
    20,590
    Why not uninstall and try a clean reinstallation?
     
  12. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,696
    Location:
    USA
    Appguard was recently upgraded to full Unicode support. I'm not sure this could have anything to do with your problem. What language is your machine set to? I just reported the issue of Firefox being listed at the wrong path. I think the most likely problem this would cause is AG would not enforce Privacy, and Memory Protection. I will let you know what BRN says when they get back with me.
     
  13. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    Peter2150, the install went all well, the only possible difference might have been if it needed internet access. I of course allowed none. So that is a no option.

    When I licensed AG I allowed those 2 processes internet access, but after that denied them any connections. I will check later by allowing them TCP and UDP to outbound connections and reboot the machine. I have not read AG needing internet connections except of course program updates. Update I can sure do when a new one is available instead having some processes connecting to internet for that all the time.

    Cutting_Edgetech, my Windows 7 is in Finnish language. This is bad if AG will not give me those protections. That is sure a refund of purchase reason if that is true.
     
  14. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    I just recently addressed this in a response to a trouble ticket sent to AppGuard@BlueRidge.com:

    I assure you that AppGuard is Guarding the applications in the Guarded Apps list even if they are in the "Program Files (x86)" folder on 64-bit systems. On the Guard List display, AppGuard is using a "folder map" to indicate the path and AppGuard will guard the program whether it is in Program Files or in the Program Files (x86) directory. I agree that this is confusing and we'll try to improve this in the future, but the fact is that AppGuard is Guarding those applications whether they are in Program Files or "Program Files (x86). Also in the event viewer, AppGuard is indicating that it cannot find the program in the Program Files directory if the program is located in the x86 folder. I agree this is confusing and we will improve this in a future release as well.

    One way to demonstrate that AppGuard is actually guarding Google Chrome in the (x86) directory is to try to save a page to a either a Windows "System" folder (C:\Windows or C:\Program Files). You will see that AppGuard blocks those attempts to write to system folders.

    The developer has told me that these problems are fixed in version 4.1 (to be released in April).
     
    Last edited: Mar 24, 2014
  15. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    There are a few of us at Blue Ridge that monitor this thread. I'm the only one that is active though and I don't get on here often enough. For technical issues, it is best to send an email to AppGuard@BlueRidge.com. Those emails go to several people and it is likely that it will get answered within a couple of hours (our policy is to try to answer within one business day, but it is usually sooner).
     
  16. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Very odd. I have not heard this problem before. Will you please send a trouble ticket to AppGuard@BlueRidge.com and someone will work with you to get to the bottom of the issue. Thanks!
     
  17. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    Greetings Barb_C.
    I think things are not as bad as I started to believe. Mainly I was getting suspicious from CE's post that no memory guard protection. I am just checking on Windows Event Viewer or what it is called in english and I can find events regarding memory protection:

    8 (2) for writing into another process memory and
    9 (2) for reading another process memory

    I also saw events
    312 (3) relating to not able to locate a guarded application, but you already wrote to CE that it is doing that if the programs are under Program Files (x86) folder.

    I think my protection is ok and only thing missing is that AG scanned list. At least I hope so. And I will check later if the firewall was blocking something related to that. What comes to mind is maybe getting an updated scan list for the search location.
     
    Last edited: Mar 24, 2014
  18. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,696
    Location:
    USA
    Thanks you! I was not aware that this had already been reported, and addressed. It's good to know that AG 4.1 will address this in the GUI so others will not be confused by this.
     
  19. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,696
    Location:
    USA
    I think AG would have a low probability of having a unicode bug with the Scandinavian languages. Most of the letters in Scandinavian languages are also in English. There would be a higher probability with Asian, Middle Eastern, and Slovak languages. There is always a chance one could exist though.
     
  20. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    It is not a firewall problem. Tested in both standard user and admin accounts allowing AppGuard 2 processes out. Still no enumeration list found on my PC.

    CE:
    Finnish language has same alphabets as swedish. Both being quite small languages in spoken population numbers. And except Å, all the alphabets can be found also in german, a language spoken by a larger population

    However, I think you are right in your first quess. If you go to Help page in AG 4.0.17.0: Adding/Removing Applications to be Guarded. You can see that the program descriptions are including words. And those words would be different in every language. The thing missing to have been implemented to current version of AppGuard is the finnish language on that feature.

    I will post as Barb_C wanted an email to Blue Ridge, also asking if this will lessen in anyways my protection. But I rather doubt that. The only thing missing is propably just that list.
     
  21. Jarmo P

    Jarmo P Registered Member

    Joined:
    Aug 27, 2005
    Posts:
    1,207
    I checked again Windows Event Viewer.

    There are no memory protection preventions, 8 (2) and 9 (2), mentioned other than concerning Process Explorer executable launched from the desktop. So I guess CE was right also in that prediction :(

    I think I have now made a big mistake trusting AG. I was yesterday running Skype and also being visible in it, despite knowing that my hacking cracker kids are doing everything they can to hack me.

    This is really really bad if AG is not working as promised in some other language Win 7 localizations.
     
  22. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Jarmo, I'm not exactly clear about what issues you are seeing. We are installing a Finnish OS to see what might be happening.
     
  23. Cutting_Edgetech

    Cutting_Edgetech Registered Member

    Joined:
    Mar 30, 2006
    Posts:
    5,696
    Location:
    USA
    My apologies if I have caused any confusion. I was simply just stating that AG recently upgraded to full unicode support. I was not really predicting a problem due to this. I was just simply stating it's possible that a bug could be discovered as we gain more users who's native languages are much different than English. That's always a possibility with any application recently obtaining full unicode support. I think Finnish only has 3 letters that are not present in English so I would expect a low probability of encountering a unicode problem with Finish. Jarmo's problem may not have anything to do with unicode support. I was just looking at all the different possibilities since it was a problem I have never seen before here at the forum. Jarmo could you post a screen shot of your problem? I think I understood you correctly, but a screen shot may be of some help.
     
    Last edited: Mar 25, 2014
  24. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Hi Jarmo, our QA department won't be able to do a full test until next week (we are getting ready to release another product), but I did some preliminary testing with Finnish OS and as far as I can tell, AppGuard is working. I installed Finnish OS 64-bit Windows 7 Home Edition and AppGuard seems to be working with the exception of the Add Programs dialog.

    In my case, I don't have much installed, but I have confirmed that if you're seeing a program listed in the Guarded Apps list, AppGuard has found it and is indeed Guarding it (even though it is listed as being in the "Program Files" directory but is actually in "Program Files (x86)". You can see that I.E, Firefox, Rundll32, cmd.exe, regsvr32 are in the list:
    FinnishGuardList.png
    Note, I installed Firefox after AppGuard was installed and I had to restart AppGuard in order for it to be recognized. Something that we should make a note of and warn people about no doubt.

    You can see that Firefox is being protected by some of the events in the Activity Log. Also, you can see that MemoryGuard is on:
    FinnishActivityReport.png
    You can also see that the Add Program dialog is not working properly in the Finnish OS, but no worries, you can use the browse button to add programs:
    FinnishAddAProgramIsNotWorking.png
    I browsed to Skype and added it to the Guard List:
    FinnishAddSkype.png
    FinnishSkypeInList.png
    Thanks to Google Translate for helping me find my way around the Finnish OS!
     
  25. Barb_C

    Barb_C Developer

    Joined:
    Jan 7, 2011
    Posts:
    1,234
    Location:
    Virginia
    Jarmo, I'm unsure of what protection you're expecting AppGuard to provide to Skype. AppGuard won't protect Skype communication over the Internet. It will prevent someone using Skype from infiltrating your system though (if you add it to the Guard list and turn MG protection on).
     
Thread Status:
Not open for further replies.
  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.