App Review Appguard vs Voodooshield

[Lucent Warrior]

Now that the title has your attention, this is not about which product is better then the other. I made this video to demonstrate how the two products handle the files differently, and how either product will make an excellent addition to any security configuration.

The desktop and downloads folder locations are the two most common places users download to, "download folder being by default". I execute the samples first from the desktop, then from the downloads folder with both products.

Both products are at default settings.

Conclusion:
Appguard: more suited for advanced users.
Reason: Rules need to be entered manually, product does not quarantine /remove files, user will need to use other means to do so.

Voodooshield: Better suited for novices to intermediate.
Reason:The product will quarantine and remove files, provides more detailed information of the file for better choices.



appguard: http://www.appguardus.com/support/products/AG44/AppGuard Professional User Guide v4.4.pdf

Voodooshield:
http://www.voodooshield.com/Download/VoodooShieldUserGuide.pdf

Samples courtesy of @silversurfer, for an unbiased test.

 

[hjlbx]

Good video. Thanks @Lucent Warrior .

 

[FrFc1908]

thanks for sharing this , very interresting / illuminating to watch!!!!

 

[tonibalas]

@Lucent Warrior a great review.
You are right both products did very good.
I am thinking of adding an anti-exe program to my config and these 2 look great.

 

[silversurfer]

Great video as always. Good idea both compared to each other. Thanks @Lucent Warrior

 

[King Alpha]

Great review indeed. Currently using those two programs (AppGuard - Main PC, VoodooShield - Laptop). They're both outstanding. Thanks for sharing @Lucent Warrior.

 

[safe1st]

Very good video!
thank you @Lucent Warrior

 

[Cohen]

As always, great review. @Lucent Warrior.
I'm currently using VoodooShield, and I love it. I might have to try Appguard later down the line on either my host PC or laptop.

 

[CMLew]

It's really nice to see both VS and AG are equally good. .

 

[Deleted member 2913]

With VT, VAi & AutoPilot, VS is lot easier compared to AppGuard for average users.

 

[CMLew]

After watching twice, something struck on me.

I notice for VS, it is relying on Ai or VT as detection or some sort of scanning. Am I right to say that? Hence possibly you need connectivity for that, right? How about running VS on no-connection state? Would that effectiveness the same too? How about AG? Does AG also rely some sort of detection for malicious program and then block execution? Would that mean AG would also need connectivity?

 

[Cats-4_Owners-2]

Watching (& then listening again while reading the newer posts) is good for my VoodooShield self esteem! I'm also feeling like a fan whose favorite team is playing at home, and I've been given the privilege of seeing up close what I've been excited about all along (just like a fan boy) as both teams put on a memorable exhibition!

Thank you @Lucent Warrior for shining a spotlight on both VoodooShield and Appguard. Positive findings of excellence, especially when found in common for two separate software, is meaningful news we all enjoy!

 

[hjlbx]

After watching twice, something struck on me.

I notice for VS, it is relying on Ai or VT as detection or some sort of scanning. Am I right to say that? Hence possibly you need connectivity for that, right? How about running VS on no-connection state? Would that effectiveness the same too? How about AG? Does AG also rely some sort of detection for malicious program and then block execution? Would that mean AG would also need connectivity?

AppGuard is software restriction policy; what is not allowed is denied (blocked) and what is allowed is mostly run with heavily restricted access rights.

AppGuard does not detect anything by signature; once protections are enabled, AppGuard applies its anti-execution and restricted privileges policies without any attempt to rate a file as "good, bad or suspicious." In other words, AppGuard's policies are agnostic. Finally, once protections are enabled, AppGuard's policies essentially treat everything newly introduced to the system as "denied." I say essentially as the user can create exceptions for trusted\known good programs a couple of different ways.

Therefore, AppGuard does not need network connectivity to apply its policies; AppGuard only needs network access to initially validate the license key.

NOTE:

AppGuard's behavior is dependent upon what protection mode is enabled - Protected or Locked Down. Locked Down is recommended for greatest security.

The basic strategy any user should employ with AppGuard is as follows:

1. Clean install OS
2. Install desired softs using all offline installers - if possible
3. Install AppGuard
4. Lock Down system

Also, it is recommended by Blue Ridge Networks to create a layered configuration that includes both an anti-virus and firewall.

 

[Av Gurus]

...I would like to see NVT Exe Radar Pro in this comparative test...

 

[shmu26]

once you whitelist a file in VS -- correct me if I am wrong -- it has no more restrictions and becomes a trusted installer. So the payload will have permission to execute.
That is not the case with AppGuard -- again, correct me if I am wrong.

 

[frogboy]

And best of all decent music i can watch the video without muting it.

 

[King Alpha]

...I would like to see NVT Exe Radar Pro in this comparative test...

I second that. We're interested to see those three on your next video. @Lucent Warrior

NoVirusThanks EXE Radar Pro vs. Blue Ridge Networks AppGuard vs. VoodooShield

 

[jamescv7]

I will choose Voodoshield since you don't need to manually delete malicious files but rather quarantine for proper disinfection.

Still anything that contains malware analysis detection have an edge as long connected in the internet.

 

[shmu26]

hard to compare NVT ERP, because it needs to be configured, at least to a certain extent, by the user:
1 trust signatures, and if so, which ones?
2 trust system files?
3 trust program files?
and so on.
IMO the "out of box" settings of NTV ERP are not really meant to be used as default settings, they just mean that you didn't configure the product yet.

 

[Ana_Filiz]

I second that. We're interested to see those three on your next video. @Lucent Warrior

NoVirusThanks EXE Radar Pro vs. Blue Ridge Networks AppGuard vs. VoodooShield

I second that too as i have NVT installed.