Processguard

ProcessGuard LibraryThe ProcessGuard library provides a set of functions to manage, monitor, and guard processes on your system.Table of ContentsInstallationUsageFunctionsContributingLicenseInstallationTo install the ProcessGuard library, you can use pip:UsageImport the functions you need from ProcessGuard in your Python script:from ProcessGuard import *# Use the functions from the library# ...Check if Notepad is running:if is_running("notepad.exe"): print("Notepad is running.")else: print("Notepad is not running.")Start a process with arguments (Notepad with a text file):start_with_arguments("notepad.exe", ["path/to/textfile.txt"])Monitor a process:monitored_process = "chrome.exe"monitor_process(monitored_process, interval=10)"Run Always" for a process:process_name = "notepad.exe"process_path = r"C:\Windows\System32\notepad.exe"guard(process_name, process_path, True, 0.1)Functionsis_running(process_name): Check if a process is currently running.start(process_path): Start a process.terminate(process_name): Terminate a process.guard(process_name, process_path, closetaskmanager, interval): Guard and monitor a process.list_running(): List all currently running processes.get_memory_usage(process_name): Get memory usage of a process.get_cpu_usage(process_name): Get CPU usage of a process.kill_all(process_name): Terminate all instances of a process.restart(process_name, process_path): Restart a process.count_running(): Count the number of running processes.get_process(process_name): Get details of a specific process.monitor_process(process_name, interval): Monitor the status of a process.start_with_arguments(process_path, arguments): Start a process with arguments.For more examples, check the examples directory in this repository.ContributingContributions to the ProcessGuard library are welcome! Feel free to fork the repository and submit pull requests.LicenseThis project is licensed under the MIT License.

You are using an out of date browser. It may not display this or other websites correctly.You should upgrade or use an alternative browser. Thread Status: Not open for further replies. LFC Registered Member Joined: Feb 23, 2005 Posts: 54 ProcessGuard Helphi ive just my money off to buy this baby to run alongside my TDS-3 and antivirus do i need to download the trial and wait for my key to be sent like TDS-3 to make it full or do i get a link to download the full versionthnxDave Re: ProcessGuard HelpHi LFCYes you can do that, your key should then enable the disabled features LFC Registered Member Joined: Feb 23, 2005 Posts: 54 Re: ProcessGuard Helpthnx pilli how long does it take to recieve my key i sent the money through paypal about 2 hrs ago uk time Re: ProcessGuard HelpHi I think it is automated for ProcessGuard now so should arrive soon hopefully Have fun. Pilli LFC Registered Member Joined: Feb 23, 2005 Posts: 54 Re: ProcessGuard Helpnice i cant wait cos ive just heard a m8 of mine got rooted by an auto rootkit which was sent to him by a bad person does it actually stop these kind of rootkits aswell hope sothnxDave Re: ProcessGuard HelpTher are at least two ways it can stop rootkits.!. the rootkit probably uses a dropper .exe and PG's security list will ask if you want to allow it to run.2. Most rootkits need to install a driver/service again ProcessGuard will alert asking if you really want to install.HTH Pilli. LFC Registered Member Joined: Feb 23, 2005 Posts: 54 Re: ProcessGuard Helpbrilliant brilliant now i cant wait to set it up just wish diamondcs would hurry with my key Re: ProcessGuard HelpShould be with you soon: See this thread: LFC Registered Member Joined: Feb 23, 2005 Posts: 54 Re: ProcessGuard Helpcool that means we in uk and other countries dont have to wait for the time diff in australia then do we LFC Registered Member Joined: Feb 23, 2005 Posts: 54 LFC Registered Member Joined: Feb 23, 2005 Posts: 54 and now ive just seen this in this forum im wondering wots going onIf you purchase online you'll receive your license usually within 10 minutes after the purchase, as it's now an automated process for your convenience. We hope you enjoy the program!The DiamondCS Team I am sorry to hear that Did you get a confirmation of payment back from PayPal? As this is usually very quick within minutes, then the rest of the process is automatic.To be sure that you have your key info' by the morning please drop a quick email with your purchase information to [email protected] also note that ntl (my isp) is having severe problems with their email servers ATM and this could also be a problem if they are your ISP.Again sorry for any inconvenience. Pilli LFC Registered Member Joined: Feb 23, 2005 Posts: 54 no i am on blueyonder and yes ive just sent

#1 ShaleenU Members 22 posts OFFLINE Gender:Male Location:NY Local time:06:36 PM Posted 06 June 2009 - 10:08 PM The program DiamondCS processguard is on my computer and I can't get rid of it. I don't remember ever installing it but that doesn't matter now since I want it gone. I've deleted most of the remnants of it that I could find like procguard.sys and procguard.dll, I also uninstalled it in my device manager. The reason I want it gone is because it interferes with a Hack security program called hackshield made by AhnLab. This program runs for a lot of MMORPGS and Processguard gets picked up as a hacking device. For this reason I want processguard gone. If this is in the wrong section I apologize, I'm not sure where to put this. Any help would be appreciated. Back to top"> Back to top BC AdBot (Login to Remove) BleepingComputer.com Register to remove ads #2 ShaleenU ShaleenU Topic Starter Members 22 posts OFFLINE Gender:Male Location:NY Local time:06:36 PM Posted 07 June 2009 - 12:39 AM I resolved the problem, sorry for wasting space. Back to top"> Back to top #3 garmanma garmanma Computer Masochist Helper Emeritus 27,809 posts OFFLINE Gender:Male Location:Cleveland, Ohio Local time:07:36 PM Posted 07 June 2009 - 09:07 AM Glad you fixed itPerhaps you can tell us how so others may benefit Edited by garmanma, 07 June 2009 - 09:08 AM. Markwhy won't my laptop work?Having grandkids is God's way of giving you a 2nd chance because you were too busy working your butt off the 1st time aroundDo not send me PMs with problems that should be posted in the forums. Keep it in the forums, so everyone benefitsBecome a BleepingComputer fan: Facebook and Twitter Back to top"> Back to top #4 ShaleenU ShaleenU Topic Starter Members 22 posts OFFLINE Gender:Male Location:NY Local time:06:36 PM Posted 09 June 2009 - 01:08 PM Well what I did was downloaded the installer, went into safemode since I couldn't install in Normal mode since it said that Processguard was still running. Installed it, removed all protection and then uninstalled it in safemode. Back to top"> Back to top

And threats. Most of the traditional antivirus... Category: Security & Privacy / Anti-Virus ToolsPublisher: Xyvos Technologies, License: Freeware, Price: USD $0.00, File Size: 2.2 MBPlatform: Windows Host Based Intrusion Prevention System. Real-time proactive protection against known and unknown malware and rootkits. System Safety Monitor (SSM) is a Host Based Intrusion Prevention System which will protect your system from all known and unknown malware, rootkits and "zero-day" attacks. SSM proactively keeps track of all running programs' behavior and blocks malicious or suspicious actions. Learning mode will help you to easily configure the required security rules. New user friendly GUI design.... Category: InternetPublisher: System Safety Limited, License: Shareware, Price: USD $34.95, File Size: 3.9 MBPlatform: Windows ProcessGuard is a powerful kernel-level security system for Windows that protects your system from a large variety of attacks including spyware, rootkits, leaktests, process termination and modification, and much more. DiamondCS ProcessGuard is a groundbreaking security system first released late in 2003 that protects Windows processes from attacks by other spyware processes, services, drivers, and other forms of executing code on your system. ProcessGuard also stops applications from executing without the users consent, stops malicious worms and trojans from being executed silently in the background, as well... Category: UtilitiesPublisher: DiamondCS, License: Shareware, Price: USD $29.95, File Size: 1.9 MBPlatform: Windows Download TechGenie Free Antivirus loaded with tools like anti-rootkit, anti-malware and complete browser protection. Download TechGenie Free Antivirus and combat zero day threats as well. It safeguards you from malware and rootkits that hide inside your PC unnoticed. Click to start the download now. TechGenie Free Antivirus is compatible with your Windows 8 computer. You can also avail tech support round the clock from iYogi technicians. All you need to do is start a chat with our technicians. You need to pay... Category: Utilities / AntivirusPublisher: iYogi Technical Services Pvt. Ltd., License: Freeware, Price: USD $0.00, File Size: 3.8 MBPlatform: Windows DriveSentry provides FREE PC security, dedicated to protecting your system and data from the very latest zeroday threats. It will also protect any number of removable devices connected to the host computer, preventing damage to your data. Combining Antivirus, Antirootkit, Antispyware and drive firewall technologies, DriveSentry provides FREE security for home users. DriveSentry offers proactive up to the second security for your system and personal data, enabling you to work, play and interact with your computer on the Internet with confidence. DriveSentry's new approach to protection combines a blacklist of over 1... Category: Security & Privacy / Anti-Virus ToolsPublisher: DriveSentry Inc, License: Freeware, Price: USD $0.00, File Size: 1.5 MBPlatform: Windows iTopsoft Anti-Spyware is the best choice for more than 390,000 kinds of spyware, viruses, worms. With a low resources occupation,you can run it more

Place.IF more vulnerabilities are found with MD5 we will have to look at each of them and determine if they do compromise ProcessGuard's security. But at this stage the current ones don't. PG3 does seem a notably improvement over PG2 both in interface and in resource (CPU) utilisation.On the user interface side, there are 2 improvements I would suggest. On the Protection screen, there should be Confirm and Cancel buttons for any changes to application privileges - as it stands, it is too easy to inadvertently alter them for an application just by clicking within the window. This is exacerbated by having too large a click region (e.g. if you click just within the right-hand border at the same height as one of the options, you change that option's settings) - this should be restricted to the checkboxes only.Another interface improvement would be to have the option to use flags (T, M, R, etc) in place of words (Termination, Modify, Read) in the Protection list. Currently, you need to stretch the window quite a bit to see all the permissions if the full set is enabled for an application.One problem I have encountered with ProcGuard is that if it is not run with an Administrator user (I tried with a power user), it shows Status: Initializing for a minute then Status: Error. Failed to initialize. Check dscuserprot.exe. If it does need Admin access, could a more descriptive error message be given?A better option would be to be able to run ProcGuard without Admin access to remove the chance of an escalation of privilege exploit. It is easy to get a command prompt window with Admin user privileges via ProcGuard and possibly attempt a buffer overflow using the techniques documented in Next-Generation Win32 exploits: fundamental API flaws (these seem to work even if ProcGuard is protected from Reading), so requiring Administrator access does pose a risk on shared machines. No one jumps in yet, so let give some input.anyway, this is windows design problem and to make it exploited, users must let shatter.exe run successfully. Well since any other limited user account is run in another session, it isn't possible for them to attack the ProcessGuard GUI with a shatter attack. It is possible if a SERVICE creates windows (like ProcessGuard v2.0 does), however v3.000 doesn't so shatter attacks and things like that aren't of concern. I was able to use shatter to modify the File Open dialog (via Protection/Add Application) to paste the shell code in (lacking a debugger I didn't take things any further). I can also get a command-line prompt with Admin access (this can be fixed by disabling the right click menu in the File Open dialog).

Either option could be used for an escalation of privilege - though XP SP2's Data Execution Protection should prevent exploit code from being run in the first case. Could you give the exact details of what you are doing here?As far as I am aware, if you are running as a Guest or Limited User you won't be able to enumerate the Windows on an admin desktop. So I'm not sure how you are using Shatter to exploit the ProcessGuard GUI unless you are also running Shatter on the administrators desktop?The only program which runs in every account started on the system is pgaccount.exe which runs with the user supplied privileges, the same as any program already running or about to be run in that session. So there is no point for a program to try and attack pgaccount.exe since it has as many privileges as the attacking program already does. Originally, PG has been designed to protect users' boxes from harmful of malicious codes even they accidently/unknownly let it run on theirs. PG should protect important system process already in place assumed all are good ones (not bad ones replaced the legitimate ones). Is it wrong?Now with "Shatter", if let it run and with security flaws of windows, as "Paranoid" said shatter can attack successfully even with PG2/3 in place? Thanks for helping. I'll have to take a look at preventing this, but it might be possible. I was logged in as a Power User using the Run As option to run Procguard with administrator access. Hope that helps.Another thing I have noticed is that PG3 does not appear to block all programs from installing drivers (I have all 4 Global Protection options checked). It did block PageDefrag (from SysInternals) from loading its PAGEDFRG driver but did not stop Drive Snapshot (trial download available) from loading its SNAPSHOD driver (this was blocked by PG2 Free and prompted for by SSM 1.9.5 - snapshot.exe had no entry in PG3's Protection list). Blocked fine by me. However services.exe is the one which installs the driver for snapshot, you most likely have services.exe with allow drivers.This is an issue with services.exe that I hope to fix in later versions of ProcessGuard, there isn't an easy solution to this problem. Thanks for that Jason, Looking at my protection list I do not have Allow services / driver install for services.exe and have not had any alerts that indicate that it is required by anything. The same applies to my laptop and to Windows 2003 server machines.So I assume it is normally best not give services.exe the Allow services /driver flag? Or maybe only allow it for a particlar trusted program?Pilli Services.exe did have