Hello again, not here very often but I have some questions that I could not find answers to.
1.- If a program is monitored, it will not go back to "Allow" after some time, even when it is a known safe program?
What got me worried a bit is that after a fresh install, WSA set explorer.exe (and lsm.exe) to monitor. Both 100% clean on virustotal. Is this a new default behavior or should I REALLY start worrying?
2.- When I allow a trusted program, it still gets blocked?
In this case GSC.exe, I get a "The application was unable to start correctly (0xc0000018)" message. When I disable the realtime shield, it runs.
I like very much how WSA protects you, even if you don't want it to haha!
Seriously, I trust you guys know what is best, but where is the limit of user control. I know GSC has FP issues but is considered safe. So if a user allows a program, why not keep monitoring it instead of blocking it completely?
Already have an account? Login
Login to the community
No account yet? Create an account
Enter your username or e-mail address. We'll send you an e-mail with instructions to reset your password.
posting a support ticket right now. if anything useable comes out i will share with the community ;)
Win7 32 bit
report back in a jiffy
uninstalled WSA (from start menu-uninstall)
turned of PC (instead of restart)
exec your downloaded wsainstaller
and got a BLUE wsa screen immediately, without asking for a key.
let it scan and a few items are monitored.
I got screenshots
Thank you for your help :)
Sometimes it will just wipe virtually every trace of it away, othertimes it will leave stuff like the keycode ready for a reinstall.
May be a difference between Enterprise and Consumer versions, though...