D
Deleted member 178
Thread author
Barb C (Appguard developer) said:I also wanted to post a link to this video showing how AppGuard stops Critroni virus even in Medium Protection Level. The engineer that made the video wanted to show how AppGuard would stop it even if the malware was digitally signed so he took some liberties to simulate this (since the virus sample he had was not digitally signed). He wanted to show how AppGuard would succeed where a white listing product might fail. So to be clear, as Critroni is today, it is not digitally signed and AppGuard would not even allow it to launch from user-space (and neither would most white-listing programs). But he wanted to emphasize the difference between AppGuard and a white-listing product. Anyway to simulate this, he placed Critroni in C:\Temp (a system space folder) and then added the Critroni program to the Guard List with Privacy On. This simulates what would happen if Critroni was digitally signed and was launched from user-space because AppGuard would allow it to launch, but would Guard it in Privacy Mode. As you can see AppGuard does not let anything in the Private Folder from being encrypted.
source