BullGuard
 HomeLog InRegisterCommunity CalendarSearch the ForumView The Member ListHelp
How come BG-IS 12 can cross over the system to block a malware link ?
   
BullGuard Antivirus Forum > BullGuard zone > BullGuard Customers > How come BG-IS 12 can cross over the system to block a malware link ?  
Forum Quick Jump
 
New Topic Post reply to : How come BG-IS 12 can cross over the system to block a malware link ? Printable version of : How come BG-IS 12 can cross over the system to block a malware link ?
[ << Previous Thread | Next Thread >> ]

stanleywan
New Member


Date Joined Jan 2012
Total Posts : 35
 
   Posted 7/26/2012 3:40 PM (GMT +3)    Quote: How come BG-IS 12 can cross over the system to block a malware link ?Alert an admin about: How come BG-IS 12 can cross over the system to block a malware link ?
Hi, this is a problem first time I met.  Do you know how this happens?
 
I have a Win7 Pro with xp mode installed which is the Window Virtual PC’s OS.  In my case, I have 1 normal window and 1 virtual OS xp mode installed in the same hard disk.  Basically, they are working separately in ideal case.
 
I used the xp mode as a sandbox area for my testing purpose, such as installing new software which I never heard of it.  Because I don’t want my Win7 Pro being messed up by those new things, so I will do all the testing works in the xp mode first.
 
I installed BG-IS 12 in my regular Win7 Pro and a free version brand A security program in the xp mode.  (Yeah, I know I don’t have to protect the xp mode well because in any time if the xp mode is being corrupted, I can easily un-installed it and than re-installed a new, clean one to the Window Virtual PC.)  Not a big deal to do that, it just takes 10 mins for the work.  But I still installed the brand A AV on xp mode because I would like to treat it as an extra OS to be used.  A lot of programs have been installed on my xp mode as well.  It takes me time to install all programs back if I remove the xp mode and put a new one back.  That is why I want to keep my xp mode working properly.
 
One day a funny thing happened.  I was browsing the internet with ie 9 and all a sudden BG-IS 12 helped me blocking a malware link with a suggested warning page.  This was normal and I saw that many times already.  I was glad that BG-IS 12 just saved me again from that malware link.  Then, I was curious about the free brand A AV on the Virtual xp mode, would it be smart enough to do the same thing as BG-IS 12 did.  So, I copied and pasted the malware link onto xp mode’s ie and saw how the brand A AV reacted.  The most possible outcome was, either brand A AV blocked the malware link or no response from brand A AV and then the malware web page was going to be open and my xp mode was going to be infected by that.  However, an impossible result was just being happened.  BG-IS 12 was jumping over to catch the bad guy.  I meant it was crossing over 2 OS, from the Win7 Pro to the virtual xp mode to block that malware link.  Brand A AV could not do any response yet, since that link already been blocked by BG-IS 12.  This is amazing.  My question is:  how come this can be happened ?  I don’t even installed any BG-IS in the xp mode, how come BG can jump over 2 OS to do the blocking job in xp mode where I never installed BG-IS ?  It will cost me another license, right ?  Yeah, I am glad to see BG catching the bad guy, but not in this circumstance which I did not expect.
 
I don’t know much about the xp mode and windows relationship.  This shows that they may not be completely separated.  Otherwise, BG-IS cannot perform such job.  I guess they may be connected in some ways which I have no idea at all.
 
Please tell me, if you know what this is all about.  I would be grateful if this phenomenon could be explained.
 
Thanks a lot.
 
 
Back to Top
 

Andreea-Luciana Ostache
Forum Moderator




Date Joined Aug 2010
Total Posts : 550
 
   Posted 7/27/2012 10:29 AM (GMT +3)    Quote: How come BG-IS 12 can cross over the system to block a malware link ?Alert an admin about: How come BG-IS 12 can cross over the system to block a malware link ?
You must realize that your virtual OS runs on the same hard disk of your main OS. This is my first thought.
We could know more if you post the BullGuard Antivirus log from when it caught the infection on your virtual OS.


Andreea-Luciana Ostache
Senior Support Technician EN
support@bullguard.com
www.bullguard.com

Download the Free Trial version of BullGuard Internet Security 12

You have a BullGuard related problem? Post your question on these forums, contact Support or contact me on Twitter!

Back to Top
 

stanleywan
New Member


Date Joined Jan 2012
Total Posts : 35
 
   Posted 7/27/2012 3:20 PM (GMT +3)    Quote: How come BG-IS 12 can cross over the system to block a malware link ?Alert an admin about: How come BG-IS 12 can cross over the system to block a malware link ?
Thanks for reply. I agreed with your thought.

That web page with blocked warning by BG-IS was long gone. I deleted weeks ago. There was no BG AV log, just an ie (from the virtual OS) web page blocked warning message.

However, I can tell you where I find that malware link. I checked my yahoo e-mail account's spam folder, where I could find a lot of spams and the content of the spams, most likely inserted with malware links. There is the place I met that malware link. Thanks for BG-IS, it saved me many times already.

Seems to me that virtual OS is totally different when compared with a real partitioned hard disk individual OS. (multi boots)

Thanks anyway.
Back to Top
 

bertjan
New Member


Date Joined Sep 2010
Total Posts : 27
 
   Posted 9/4/2012 8:38 PM (GMT +3)    Quote: How come BG-IS 12 can cross over the system to block a malware link ?Alert an admin about: How come BG-IS 12 can cross over the system to block a malware link ?
i have seen the same thing using virtual box(it even works with linux)
its because the bullguard firewall monitors the network connecting on your pc
because virtual machines use your existing network connection it has to go through the firewall

warning: this does not work with actual infected files (just the links to the websites)

this is just a simple explanation

Post Edited (bertjan) : 9/4/2012 5:48:31 PM GMT

Back to Top
 

Robert Mateescu
Forum Moderator




Date Joined Sep 2011
Total Posts : 279
 
   Posted 9/6/2012 6:48 PM (GMT +3)    Quote: How come BG-IS 12 can cross over the system to block a malware link ?Alert an admin about: How come BG-IS 12 can cross over the system to block a malware link ?
Hi there,

I am afraid you have partially right, the plugin which blocks the links is the Safe Browsing, not the Firewall.
BullGuard Safe Browsing works like a proxy that scans all ingoing browsing traffic.
The virtual machine connects to the internet trough the resident OS (which also manages the existing hardware (i.e. the Network Card).
It's like having a box in a box, and BullGuard is a layer on the outer container. It scans all ingoing content, regardless if it is destined for the box on which is applied or the inner one.
Regarding the extra license key, there is no need to worry, you do not need one as long as you do not install the application on your virtual machine.
Moreover, if you wish to use BullGuard on it for testing purposes, please contact us via live chat and we will extend your account to include the virtual PC.

All the best!


Robert Mateescu
Senior Support Technician EN
support@bullguard.com
www.bullguard.com

Download the Free Trial version of BullGuard Internet Security 12

You have a BullGuard related problem? Contact our Support team directly: www.bullguard.com/support.aspx!

Back to Top
 

stanleywan
New Member


Date Joined Jan 2012
Total Posts : 35
 
   Posted 9/7/2012 3:48 AM (GMT +3)    Quote: How come BG-IS 12 can cross over the system to block a malware link ?Alert an admin about: How come BG-IS 12 can cross over the system to block a malware link ?
Oh! I love it for having extend my account including the virtual PC. It is very nice to have that.

But in the present time, I'd like to see other things, so I will be keeping my current setting.

I will follow your advice to contact the technical support in the future if I change my mind later on.

Thanks Robert.
Back to Top
 
New Topic Post reply to : How come BG-IS 12 can cross over the system to block a malware link ? Printable version of : How come BG-IS 12 can cross over the system to block a malware link ?
 
Forum Information
Currently it is Saturday, August 30, 2014 7:16 AM (GMT +3)
There are a total of 60,579 posts in 13,312 threads.
In the last 3 days there were 0 new threads and 4 reply posts. View Active Threads
Who's Online
This forum has 36291 registered members. Please welcome our newest member, SidneyBlum.
3 Guest(s), 0 Registered Member(s) are currently online.  Details
5 Latest Threads
Blocking of sites (4)8/29/2014 8:49:52 PM (Leto)