a-squared background guard - Codes of practice

Malware-IDS

The Malware-IDS constantly controls the behavior of all active programs. A soon as program shows a suspect behavior you receive a warning message and so you can decide whether the program shall be in process further on or not.

The IDS goes off in case of:

• Backdoor behavior
• Spyware behavior
• HiJacker behavior
• Worm behavior
• Dialer behavior
• Keylogger behavior
• Trojan downloader behavior
• Code injection in other processes
• Adding of autostarts
• Installation of services and drivers

Codes of practice

Due to the fact that the announced and possibly dangeraous behaviors are sometimes part of regular programs false alarms are possible. Thus a-squared offers a set of rules for configuration like a desktop firewall does. With this set you can allow certain activities of regular programs without receiving a warning message from the background guard every time.

You can whether allow several activities or exempt whole applications from inspection by the background guard. That is necessary for some programs not to have a negative effect on system stability.

Creating rules

To exempt a program completely from detection:

The a-squared background guard basically controls all active programs in system. But you can exempt several programs from permanent detection by a-squared to save system resources. That makes sense in case of a high performance application which is not unsafe for sure. Proceed in the following way:

1. Click on "Add new rule" in the "Application Rules" menu of the configuration menu.
2. Then choose the desired application by clicking on the "..." button.
3. Choose the option "Always allow this application" under Security mode.
4. Click on "OK" to create the rule. The application will not be controlled any longer.

To protect a program from foreign modification:

a-squared Anti-Malware offers a protection operation to protect foreign applications from modification trials. For example an installed viruses scanner that normally is shot down by Malware can be protected. Therefor the a-squared background guard denies unauthorized trials of quitting or manipulating a program.

To activate that option create a rule like it is described before. But now you have to hook the check box "Protect this application from modification".

-> Read more about the functionality of Malware-IDS