Process Guard & BoClean & NOD-32

Discussion in 'ProcessGuard' started by darksky, May 6, 2004.

Thread Status:
Not open for further replies.
  1. darksky

    darksky Registered Member

    Joined:
    Jan 13, 2003
    Posts:
    33
    A few questions:

    1) When protecting BoClean Anti-Trojan and NOD-32 with ProcessGuard, what "Allow Flags" should be checked? Does a program like BoClean need to have Write, SetInfo, Terminate, Suspend, GetInfo & Read ? Or just some of these? How about NOD-32?

    2) On Blocked Flags, should just the first four be checked?

    3) What Options should be checked for both of these programs?

    4) BoClean has 5 executables... do the settings from questions 1-3 above need to be applied to each of them, or just to the main executable?

    5) NOD-32 has 3 executables.. do the settings from questions 1-3 above need to be applied to each of them, or just to the main executable?


    Thanks!
     
  2. nick s

    nick s Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    1,430
    I can only help with BOClean. Here are my settings:

    ---016-----------------------------------------------
    Long Path :- c:\program files\nsclean\boclean\boclean.exe
    Short Path :- c:\progra~1\nsclean\boclean\boclean.exe
    Blocked Flags :- Write,Terminate,Suspend,SetInfo
    Allow Flags :- Read,Write,Terminate,Suspend,GetInfo,SetInfo
    Option Flags :- Allow Global Hooks,Allow Drivers/Service Install


    ---017-----------------------------------------------
    Long Path :- c:\program files\nsclean\boclean\bocsec.exe
    Short Path :- c:\progra~1\nsclean\boclean\bocsec.exe
    Blocked Flags :- Write,Terminate,Suspend,SetInfo
    Allow Flags :- Read,Write,Terminate,Suspend,GetInfo,SetInfo
    Option Flags :- Allow Global Hooks,Allow Drivers/Service Install

    You will have to disable Block Global Hooks under General Protection Options if you want BOClean to autostart consistently.

    Nick
     
Thread Status:
Not open for further replies.