blocking system restore

Discussion in 'WormGuard' started by the mul, Oct 24, 2003.

Thread Status:
Not open for further replies.
  1. the mul

    the mul Registered Member

    Joined:
    Jul 31, 2003
    Posts:
    1,703
    Location:
    scotland
    Can u please help me, when i try to use system restore,wormguard blocks it,the message reads: this file has triggered an alert in wg engine.
    file c/windows/system32/restore/rstrui.exe.
    risk assessment: medium
    script analysis: security risks detected
    contains suspicious string: start up
    executes a file
    accesses the file system

    file script:

    mz

    This is the exact message that wg shows u.
    I have scanned this file with nav, nod32v2,and also with tds 3, all seems to be clear.can u please advise me on a course of action.


    Thank

    The Mul
     
  2. LowWaterMark

    LowWaterMark Administrator

    Joined:
    Aug 10, 2002
    Posts:
    17,876
    Location:
    New England
    Wormguard just alerts based upon specific capabilities that exist with a file allowing you to decide whether to trust the file or not. The system restore file has been alerted on before... All you need to do is tell WG to always allow it.

    Remember this thread?

    https://www.wilderssecurity.com/showthread.php?t=14189
     
  3. the mul

    the mul Registered Member

    Joined:
    Jul 31, 2003
    Posts:
    1,703
    Location:
    scotland
    Thanks for your help i will follow your advise thanks.

    the mul
     
Thread Status:
Not open for further replies.