ProcessGuard SMH crashes RefDefend

Discussion in 'Ghost Security Suite (GSS)' started by richrf, Mar 31, 2005.

Thread Status:
Not open for further replies.
  1. richrf

    richrf Registered Member

    Joined:
    Dec 11, 2003
    Posts:
    1,907
    Hi Pilli,

    What I did was this:

    1) Protected RegDefend

    2) Checked SMH box for for RegDefend

    3) Pressed the Insert Key while clicking mouse on the X (exit) box of RD

    4) Tried exiting RD with the X box

    5) A message box with no message appears

    6) RegDefend terminates abnormally

    7) The system tries to take a dump (DRWATSON) but I deny permission

    :cool: RegDefend crashes

    I gave RD driver/services privilege and tried to use Ins on the message box that comes up as I am exiting. The results are a crash. Has anyone been able to sucessfully use SMH with RD.

    Thanks.

    Rich
     
  2. richrf

    richrf Registered Member

    Joined:
    Dec 11, 2003
    Posts:
    1,907
    Can't get PG to protect against Exit either. RegDefend just shuts down.

    Rich
     
  3. nick s

    nick s Registered Member

    Joined:
    Nov 20, 2002
    Posts:
    1,430
    Hi Rich,

    Seeing the same behavior just enabling Secure Message Handling for RD, without applying the Custom Message Verification (INSERT key) method.

    Nick
     
  4. Chris12923

    Chris12923 Registered Member

    Joined:
    May 31, 2004
    Posts:
    1,097
    Same crash.

    I just chose SMH for RD in PG 3 and then clicked the 'x' to close the GUI in RD and crashed. I didn't hit insert key.

    Thanks,

    Chris
     
  5. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    Exit or X does not close RegDefend just calls the terminate pop up. I think you should be applying SMH to the pop up box as this is the termination point ;)

    Jason?

    Pilli
     
  6. Jason_R0

    Jason_R0 Developer

    Joined:
    Feb 16, 2005
    Posts:
    1,038
    Location:
    Australia
    I'm not quite sure why ProcessGuard's SMH would make RegDefend crash, but PG does that with other applications too. I might take a look at it later to see if I can make them coexist.
     
  7. gottadoit

    gottadoit Security Expert

    Joined:
    Jul 12, 2004
    Posts:
    601
    Location:
    Australia
    Jason,
    Does RD protect itself against stray Windows Close messages already ?
    It would seem like an obvious thing for you to have done but it needs to be asked
     
  8. Bowserman

    Bowserman Infrequent Poster

    Joined:
    Apr 15, 2003
    Posts:
    510
    Location:
    South Australia
    Hi gottadoit :).

    Closing the GUI of RegDefend does not stop the protection, so anything malicious etc would still be blocked.

    Regards,
    Jade.
     
  9. Pilli

    Pilli Registered Member

    Joined:
    Feb 13, 2002
    Posts:
    6,217
    Location:
    Hampshire UK
    I might also add to Bowsermans post that this is the reason I have not bothered to try SMH on RD - Seems pointless to me as PG protects the main RD files anyway. :)

    Pilli
     
  10. richrf

    richrf Registered Member

    Joined:
    Dec 11, 2003
    Posts:
    1,907
    Hi all,

    Thanks for all of the responses. If SMH is not required to protect RegDefend, thenI will not be concerned by it. This type of information is probably useful in RegDefend's documentation or as a sticky since I am sure there will be other users of both products that will try this. Thanks again for all of the help.

    Rich
     
Thread Status:
Not open for further replies.