I'm Impressed

Discussion in 'WormGuard' started by Vikorr, May 27, 2005.

Thread Status:
Not open for further replies.
  1. Vikorr

    Vikorr Registered Member

    Joined:
    May 1, 2005
    Posts:
    662
    The protection offered by WormGuard is indeed very good. There is an email test offered in the TDS forum above this forum. There's about 20 tests, and my machine passed 100% (although this is thanks to a combination of factors, a major part of which was wormguard).

    Thanks DiamondCS guys :)
     
  2. richrf

    richrf Registered Member

    Joined:
    Dec 11, 2003
    Posts:
    1,907
    Yes, I agree. WormGuard is another very good "pro-active" program. Now and then, I find that a program is trying to execute a script behind the scenes. 9 times out of 10, I will let it run, but there have been times I blocked it, thanks to WormGuard.

    Rich
     
  3. G1111

    G1111 Registered Member

    Joined:
    May 11, 2005
    Posts:
    2,127
    Location:
    USA
    Rich - I downloaded the trial version yesterday after reading KAV was only 49% effective at stopping viruses up front (although it is 99%+ at detecting viruses on your system). Anyhow, I don't see it running on my system or there is no icon in the system tray. Is this normal behavior? It seems to be working is at stopped the test on the TDS-3 forum and also when I open it and run "test protection" it indicates it is operational. I am now running KAV, TH, ProcessGuard, RegDefend, WormGuard and WinPatrol upfront.
     
  4. muf

    muf Registered Member

    Joined:
    Dec 30, 2003
    Posts:
    926
    Location:
    Manchester, England
    Wormguard does not run in the system tray. It runs 'hooked' into the operating system. I think that's the right term. It's in the background 'doing it's thing', and it doesn't take up system resources. Oh, and did i say it's very good at what it does. Because if i didn't i'd like to say "IT IS".

    muf
     
  5. richrf

    richrf Registered Member

    Joined:
    Dec 11, 2003
    Posts:
    1,907
    Hi G1111,

    As muf explained, WormGuard is running in the background. If you run the WormGuard program, an interface will pop up with a variety of options, the most important of which is adding additional file types. There hasn't been much discussed on this forum regarding additional file types. When I have a chance, I will post what I is currently on my exclusion list.

    You setup is very similar to mine. Let me know how it works for you.

    Rich
     
  6. richrf

    richrf Registered Member

    Joined:
    Dec 11, 2003
    Posts:
    1,907
    This is my current exclusion list. It is old, so if anyone is using any additional let me know. Thanks.

    .HTA .JS .JSE .MDE .SHA .SHB .SHS .VBE .VBS .WMD .WSF .WSH

    Rich
     
  7. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    3,943
    Location:
    California
    Hi,

    Script worms have been back in the news, and am wondering if Wormguard offers more protection than the old tricks of disabling in Windows these above file types from executing.

    Thanks,

    -rich
     
  8. G1111

    G1111 Registered Member

    Joined:
    May 11, 2005
    Posts:
    2,127
    Location:
    USA
    Thanks for the responses and Rich thanks for the added exclusions. I have had it running for several days with no conflicts with my other programs. It has passed the few tests I have thrown it at. Looks like a keeper.
     
  9. snowbound

    snowbound Retired Moderator

    Joined:
    Feb 18, 2003
    Posts:
    8,723
    Location:
    The Big Smoke
    The way i like to test it to make sure it's working is by opening XP System Restore. Wormguard pops up everytime. At least on my system ;) :D

    Been using it for just over 2 years now. :cool:


    snowbound
     
  10. Gavin - DiamondCS

    Gavin - DiamondCS Former DCS Moderator

    Joined:
    Feb 10, 2002
    Posts:
    2,080
    Location:
    Perth, Western Australia
    Rich,

    Virtually any script worm will be blocked by Wormguard, I've never seen a VBS for example, which gets by it. VBS worms are pretty easy to detect, Wormguard scans them for key functions a script would need to be a worm or trojan. The same goes for BAT, both are quite common with new virus writers.
     
  11. richrf

    richrf Registered Member

    Joined:
    Dec 11, 2003
    Posts:
    1,907
    Thanks for the response Gavin. WormGuard is another great product from DiamondCS. Very quiet, but extremely powerful. A key component in my defense along with Kaspersky, ProcessGuard and RegDefend. Thanks!

    Rich
     
  12. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    3,943
    Location:
    California
    Can you give a web site that describes some of the new bat script virusses?

    Thanks,

    -rich
     
  13. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
  14. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    3,943
    Location:
    California
  15. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    :) that was clear, one can expect new ones on an old theme :ninja:
     
  16. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    3,943
    Location:
    California
    OK, I understand now.

    Can you answer my question in my post #7?

    Thanks!

    -rich
    ________________
    ~~Be ALERT!!! ~~
     
  17. Jooske

    Jooske Registered Member

    Joined:
    Feb 12, 2002
    Posts:
    9,713
    Location:
    Netherlands, EU near the sea
    Ah, you can block the files with WormGuard (filetypes i mean) so no need to cripple your whole windows with disabling the WSH and VBS, WormGuard is scanning them anyway for you.
     
  18. Rmus

    Rmus Exploit Analyst

    Joined:
    Mar 16, 2005
    Posts:
    3,943
    Location:
    California
    OK, thanks!

    -rich
    ________________
    ~~Be ALERT!!! ~~
     
  19. jinky

    jinky Registered Member

    Joined:
    Jul 7, 2005
    Posts:
    2
    I'm impressed and would probably try wormguard on my computer. I'll keep you guys posted on the result.


    ~snipped Spam Link~ dog
     
    Last edited by a moderator: Jul 7, 2005
Thread Status:
Not open for further replies.