Forums
New posts
Search forums
News
Security News
Technology News
Giveaways
Giveaways, Promotions and Contests
Discounts & Deals
Reviews
Users Reviews
Video Reviews
Support
Windows Malware Removal Help & Support
Mac Malware Removal Help & Support
Mobile Malware Removal Help & Support
Blog
Log in
Register
What's new
Search
Search titles only
By:
Search titles only
By:
Reply to thread
Menu
Install the app
Install
JavaScript is disabled. For a better experience, please enable JavaScript in your browser before proceeding.
You are using an out of date browser. It may not display this or other websites correctly.
You should upgrade or use an
alternative browser
.
Forums
Software
Security Apps
Other security for Windows, Mac, Linux
AppGuard v6 lock down anomaly?
Message
<blockquote data-quote="simmerskool" data-source="post: 1019477" data-attributes="member: 61091"><p>I ran a portable app today that is located in its own folder directly on c:\appfolder\app.exe </p><p>Also this app is not microsoft and does <u><strong>not</strong></u> have a digital signature. Am I correct that this location is considered "user space?" This app is <u>not</u> on Publisher List. AG manual says user space "scripts and unsigned applications are not allowed to execute at all." p.13. AG was "locked down." This app.exe was never added to "Guarded Apps." I've made no edits to default Registry Exceptions tab. I never added this app.exe as a Power App in the Advanced tab. QUESTION: how did this app.exe execute when AG was set to Locked Down? I did find one thing I do not understand. I searched the system for "app.exe" and found the app in the above mentioned location, but also found c:\windows\prefetch\app.exe-5294A381.pf </p><p>I'm not familiar with prefetch for an exe, any chance this is some sort of bypass to AG? Or perhaps my understanding of user space needs more research. </p><p>The simple and direct question is, should this user space unsigned app.exe execute with AG in Locked Down? Did AG fail by allowing this app.exe to run? Or if it did not fail, what am I misunderstanding??</p></blockquote><p></p>
[QUOTE="simmerskool, post: 1019477, member: 61091"] I ran a portable app today that is located in its own folder directly on c:\appfolder\app.exe Also this app is not microsoft and does [U][B]not[/B][/U] have a digital signature. Am I correct that this location is considered "user space?" This app is [U]not[/U] on Publisher List. AG manual says user space "scripts and unsigned applications are not allowed to execute at all." p.13. AG was "locked down." This app.exe was never added to "Guarded Apps." I've made no edits to default Registry Exceptions tab. I never added this app.exe as a Power App in the Advanced tab. QUESTION: how did this app.exe execute when AG was set to Locked Down? I did find one thing I do not understand. I searched the system for "app.exe" and found the app in the above mentioned location, but also found c:\windows\prefetch\app.exe-5294A381.pf I'm not familiar with prefetch for an exe, any chance this is some sort of bypass to AG? Or perhaps my understanding of user space needs more research. The simple and direct question is, should this user space unsigned app.exe execute with AG in Locked Down? Did AG fail by allowing this app.exe to run? Or if it did not fail, what am I misunderstanding?? [/QUOTE]
Insert quotes…
Verification
Post reply
Top