WinGuardian Help File

© 1999 Webroot Software, Inc.

webroot@webroot.com

http://www.webroot.com

IMPORTANT USAGE INFORMATION: This software is NOT intended for illegal use. WinGuardian should only be used by companies, schools, organizations, and parents who have a LEGITIMATE RIGHT to monitor what the computer user is doing. Before using this software, be sure you have a legal right to monitor the user’s activities of the system(s) that WinGuardian is installed on.

1 – Overview

1a – What is WinGuardian?

1b – Who will benefit from using WinGuardian?

1c – What does it cost?

1d – Where can the latest version be found?

2 – Getting Started

2a – Installation of WinGuardian

2b – Operating WinGuardian

3 – Overview

3a – Track Window Activity

3b – Track User Visited Web Sites

3c – Enable Screenshot Capturing

3d – Secure Windows

3e – Auto Start WinGuardian when Windows Boots

3f – Email Out Log Files

3g – Max number of Activity Entries

3h – Max Number of Keystroke Logs

3i – Acceptable Use Policy and Warning Settings

3j – Mirror Log File

3k – Change Show Key

3l – Change Password

3m – Done

3n – Uninstall

3o – Help

4 – Sessions

4a – Starting

4b – Stopping

4c – Completed Sessions

5 – View Activity Log File

5a – Open Selected URL

5b – Export Activity Log

5c – Clear Activity Log

5d – Close Log and Exit

6 – View Screenshot Logs

6a – Export Selected Log

6b – Delete Selected Log

6c – Delete All Logs

6d – Close Log and Exit

7 – View Screenshot Logs

7a – Save To File

7b – Delete Selected Screenshot

7c – Delete All Screenshots

7d – Close Log and Exit

8 – Register

9 – Disclaimer and License Agreement

 

1 – Overview:

1a – What is WinGuardian?

WinGuardian is a useful Windows monitoring utility and filtering alternative for parents, schools, and other organizations. This helpful tool runs completely hidden and monitors almost everything a user does on your computer. WinGuardian can keep track of what programs a user runs, log any text that is typed into a program, log all web sites that are visited, and even capture screenshots at various specified intervals. You can review the logs and detect if a user is running inappropriate programs such as games or visiting web sites that your organization considers offensive. There is also an option to have WinGuardian display an acceptable use policy (AUP) on the computer screen. A user must read the AUP and then click on the "AGREE" button before he or she is allowed to access the Internet. If users know that their actions are being monitored, they will be deterred from using inappropriate programs or viewing inappropriate web pages. WinGuardian also gives you the option to "lock down" the Windows 95/98 environment so that users can only run programs that you authorize. Users will not be able to modify system settings (like the Windows background wallpaper) or run unauthorized software. This is useful in helping to prevent viruses and intentional or unintentional operating system changes. An additional feature of WinGuardian allows the system administrator to email out the log files to a specific email address.

 

1b – Who will benefit from using WinGuardian?

1. Anyone who is concerned with the activities of their computer users. This includes where the users are going on the web and what programs they are running.

2. Anyone who needs to limit a user's access to Windows 95/98. Administrators can create a list of programs a user is allowed to run. With this feature enabled, nothing else can be accessed or run and no operating system changes can be made.

3. Organizations who have an acceptable use policy for the users of their systems. WinGuardian can display the acceptable use policy when the system is booted, when a browser is opened, and/or when a screensaver stops. A user must read and click on the AGREE button before they are allowed access to the system.

1c – What does it cost?

WinGuardian is a shareware program. You have 15 days to try WinGuardian. If you wish to continue using WinGuardian after 15 days, you must purchase a registered copy for $39.95 (inquire about site license discounts). See the REGISTER section of this document for more information.

1d – Where can the latest version be found?

You can download the latest version of WinGuardian from the Webroot Software web site at http://www.webroot.com/

 

 

2 – Getting Started

2a – Installing

To install WinGuardian, run the Setup.exe program. During setup, you will be asked to enter a password to access WinGuardian. DO NOT forget your password, otherwise you will have to re-install WinGuardian. After installation is complete, WinGuardian will log the computer user's activity every time Windows is started.

 

2b – Running

WinGuardian does not create an icon on the start menu or desktop. This is done intentionally so as not to give any indication that Winguardian is installed on the system.

WinGuardian starts automatically every time Windows is loaded. To verify if WinGuardian is running on your system, simply press the WinGuardian "show-key" (control-alt-shift-y). If the WinGuardian password screen appears, then the program is running on your system.

If WinGuardian is not running on your system, you can manually start it by first clicking on the Windows 95/98/NT Start Button, then selecting the 'RUN' option from the menu. In the 'OPEN' field of the Run window, type 'SYSCTRL'. Finally, enter your password when prompted.

 

 

 

3 – Settings

To open the setup screen, press the hot-key combination (CTRL-ALT-SHIFT-Y) and enter your password. Then press the ‘SETTINGS’ button located on the main WinGuardian window.

 

3a – Track Window Activity

If this box is checked, WinGuardian will monitor the program, keystrokes, and window activity of the current user.

Window Activity Options Button (This button is located to the right of the LOG WINDOW ACTIVITY checkbox):

Click on this button to bring up these additional options:

Opening/Closing of Windows – Creates an entry in the log every time a user opens or closes a program or window.

Window Becomes Active – Creates an entry in the log every time a user activates a window (brings a window to the front of the screen).

Keystrokes – Logs all keystrokes that a user types into any program or window.

3b – Track User Visited Web Sites

If this box is checked, WinGuardian will monitor all web sites visited by Netscape, Internet Explorer, and AOL activity. Visited web sites will be stored in the activity log file.

3c – Enable Screenshot Capturing

This option will enable the WinGuardian screenshot capture feature. WinGuardian can take a screenshot of what the user is viewing on the computer screen at various times.

Screenshot Options (This button is located to the right of the CAPTURE SCREENSHOTS checkbox):

Pressing the option button next to the screenshot checkbox will give you two screenshot options:

Max number of screenshots before rollover – If you press the option button next to the screenshot checkbox, you can set the number of screenshots to be taken on the computer system. When WinGuardian reaches the maximum number of screenshots that have been set, it will roll over and overwrite the first screenshot on file.

Interval Between Screen Captures – This option allows the user to set the time interval between captured screenshots. WinGuardian can take screenshots from every 1 minute to every 5000 minutes.

3d – Secure Windows

If this box is checked, WinGuardian will not allow a user to run unauthorized programs or to modify Windows 95/98 settings (This option is not available on NT systems).

Secure Windows Options (This button is located to the right of the SECURE WINDOWS checkbox):

Click on this button to bring up these additional options:

Applications Allowed to Run when Windows is Locked – This window lists all the programs that a user may run when WinGuardian has put Windows 95/98 into the secure mode.

Add – Adds a program to the authorized list. When you click on ADD you will be prompted to browse your hard drive for the application you wish to add. Locate it and click the OPEN button.

Remove – Removes a program from the authorized list. Highlight the program by clicking on the name, then click the REMOVE button.

Done – Returns you the WinGuardian SETUP menu.

Allow User To Shut Down/Restart Windows – If this box is checked, the user can select a Shut Down or Restart Windows button when WinGuardian is in secure mode.

3e – Auto Start WinGuardian when Windows Boots

If this box is checked, WinGuardian will automatically run and hide itself when Windows 95/98/NT starts. No indication will be given to the user that WinGuardian has started. However, if the Secure Windows option is enabled, WinGuardian will alert the user that Windows is locked.

3f – Email Out Logs

Checking this box will instruct WinGuardian to automatically email out the log files to a designated email address.

Email Out Log Files Options (This button is located to the right of the EMAIL OUT LOG FILES checkbox):

Interval for Sending Out Logs – This allows the user to set time intervals for when the log files will be sent out. WinGuardian can send out the log files from every 10 minutes to every 5000 minutes.

DNS Sever IP Address – This is a required field if you wish to email out logs. Enter your DNS Server IP Address address here. If you do not know your DNS Server IP address, contact your Internet Service Provider to find out what it is.

Email Address – This is a required field if you wish to email out logs. Enter the email address that you wish WinGuardian to email the log files to.

Send Most Recent Activity Log – Checking this box will have WinGuardian email you the Recent Activity Log File.

Send Most Recent Keystroke Log – Checking this box will have WinGuardian email you the Recent Keystroke Log File.

Send Most Recent Captured Screenshot – Checking this box will have WinGuardian email you the Recently Captured Screenshots.

3g – Max Number of Activity Entries

This sets the maximum number of entries that the entire activity log file can contain. This includes the current and past activity entries. If the maximum number of entries has exceeded all entries in the activity log, the entries are moved to an "archive activity log" and a new activity log is created. If an "archive activity log" already exists, it will be overwritten. Viewing archived activity logs requires the WGVIEW.EXE utility, which is downloadable at http://www.webroot.com/wgview.exe Run the WGVIEW.EXE utility and browse to the c:\windows\system\wglogs directory and select SYSOLD.LG to view the archive activity log.

3h – Max Number of Keystroke Files

This sets the maximum number of keystroke log files that will be stored by WinGuardian. If at anytime the maximum number of keystroke log files exceeds the number specified here, the oldest log file will be erased.

3i – Acceptable Use Policy and Warning Settings

Click this button to configure WinGuardian to display an Acceptable Use Policy and/or Warning Message at various times.

Warn Users They Are Being Monitored - Checking this box will instruct WinGuardian to bring up a warning message when Windows first starts, when the screen saver stops, and/or when a user opens a web browser.

Note: clicking the Edit Warning Message button and entering a new message when prompted can change the warning message.

Users Must First Agree With AUP - Checking this box will instruct WinGuardian to bring up an Acceptable Use Policy window when Windows first starts, when the screen saver stops, and/or when a user opens a web browser. When this message is displayed, the user must agree to the policy, otherwise WinGuardian will not allow them to continue.

Note: selecting the Edit AUP Message button and entering a new AUP when prompted can modify the AUP message.

3j – Mirror Log File

Mirroring log files can be useful if you intend to run WinGuardian on several systems that are connected to a LAN. This checkbox allows you to assign a name and location for the log files to be saved. You can then view all the logs with the "wgview.exe" utility. This utility is free to download on our web site at: http://www.webroot.com/wgview.exe

Walkthrough of implementing mirror logs on a LAN:

1. Create a shared drive on 1 system on your LAN (usually the server).

2. Follow the directions below for each system you intend to run WinGuardian on:

a. Install WinGuardian.

b. Under WinGuardian settings, check the Mirror Log File option.

c. Assign a unique name for the mirror log and select the shared drive from step 1 as the mirror log path.

All mirror logs are saved to the shared drive. Run wgview.exe (downloadable at http://www.webroot.com/wgview.exe) and browse to the shared drive to view the logs.

Note: As an alternative to mirroring the log files to one shared system, you can share (and password protect) the "Windows\System\wglogs" directory on each PC that is running WinGuardian and turn off the Mirror Log option. To view the mirrored logs, use the wgview.exe utility from a remote system, access the shared Windows\System\wglogs directory and select the system.lg or the keylogs.wg files.

3k – Change Show Key

This button allows you to change the Show Key. When a WinGuardian session is running, the only way to access the WinGuardian control panel is by pressing the Show Key and entering a valid password. The default show key is CONTROL-ALT-SHIFT-Y.

3l – Change Password

This button allows you to change your WinGuardian password. The password must be at least 5 characters long.

3m – Done

This button will save any changes and return you to the WinGuardian main window.

3n – Uninstall

This button will remove WinGuardian from your computer.

3o – Help

This will allow you to view this documentation.

 

4 – Sessions

4a – Starting a Session

After you have completed the setup of WinGuardian, simply press the button marked START LOGGING to begin monitoring your system. A new session will automatically start every time the system is rebooted.

4b – Stopping a Session

Press the Show Key (the default is CONTROL-ALT-SHIFT-Y) and enter your password when prompted. The session will stop and you will be returned to the WinGuardian main window.

4c – Completed Sessions

After a session is has been stopped, you may view the captured activities by clicking on the corresponding VIEW LOG button in the main window of WinGuardian.

 

5 – VIEW ACTIVITY LOG

Pressing this button on WinGuardian’s main window will allow the user to view the activity log.

5a – Open Selected URL

You may double-click or highlight any web address and press the OPEN SELECTED URL button to have WinGuardian automatically launch your web browser and load the site.

5b – Export Activity Log

This saves the log file to a standard text file document. Choose the directory path to save the file to, and then choose a name for the exported log file. After the file is exported you can use any standard word processing program, such as Notepad, to view the exported log file.

5c – Clear Activity Log

This will erase the entire activity log file.

5d – Close Log and Exit

Returns you to WinGuardian’s main window.

6 – View Keystroke Log

Pressing this button on the main WinGuardian screen will display the keystroke logs. A new keystroke log is started each time WinGuardian is started. The titles of log files display the date and time the file was created. Left click once on the log you wish to view to display it.

6a – Export Selected Log

This button saves the log file to a standard text file document. Choose the directory path to save the file to, then choose a name for the exported log file. After the file is exported you can use any standard word processing program, such as Notepad, to view the exported log file.

6b – Delete Selected Log

This will completely remove the keystroke log that the user is currently viewing.

6c – Delete All Logs

This will completely remove all keystroke logs.

6d – Close Log and Exit

This will return the user to the main WinGuardian screen.

 

7 – View Screenshot Log

Pressing this button on the main WinGuardian screen will allow you to display the previous screenshots taken by WinGuardian. The captured screenshots appear in the upper left list box and are sorted by date and time. To display a screenshot, simply left click on the screenshot you wish to view.

7a – Save To File

Pressing this button allows the user to save the selected screenshot as a .jpg image onto the hard drive or a diskette.

7b – Delete Screenshot

This button will delete the currently selected screenshot.

7c – Delete all Screenshots

This button will delete all screenshots.

7d – Close Log and Exit

This button will return the user to the main WinGuardian screen.

 

8 – Registering

Register WinGuardian for only $39.95.

FOR PHONE ORDERS, THE WINGUARDIAN PRODUCT NUMBER IS: 3761

You may order by calling Toll-Free: 1 (800) 772-9383

Outside of the USA, use our international number: +1 (303) 554-6528

To register by mail, send $39.95 check or money order along with your name and email address to:

Webroot Software Inc.

P.O. Box 3531

Boulder, CO 80307-3531

USA

To purchase a registered version online: Visit our secure web site at http://www.webroot.com/weborder.htm

______________________________________________________________________________________

9 – Disclaimer and License Agreement

Webroot Software, Inc. licenses the accompanying software to you only upon the condition that you accept all of the terms contained in this license agreement. Please read the terms carefully before the installation of WinGuardian, as installing WinGuardian will indicate your assent to them. If you do not agree to these terms, please do not install WinGuardian as Webroot Software is unwilling to license the software to you, in which event you should delete the product from your computer.

LICENSE AND WARRANTY:

The software that accompanies this license (‘WinGuardian’) is the property of Webroot Software, Inc. or its licensers and is protected by copyright law. While Webroot Software, Inc. continues to own the WinGuardian software, you will have certain rights to use WinGuardian after your acceptance of this license. Your rights and obligations with respect to the use WinGuardian are as follows:

IF YOU AGREE TO THE WINGUARDIAN DISCLAIMER AND LICENSE YOU MAY:

(i) Use WinGuardian on as many computers as you wish at no charge for up to but no more than 15 days. After 15 days of use you must either discontinue the use of WinGuardian or purchase a registered version for each computer that you are going to use WinGuardian on.

YOU MAY NOT:

(i) Sublicense, rent, sell, or lease any portion of WinGuardian;

(ii) Reverse engineer, decompile, disassemble, modify, translate, make any attempt to discover the source code of WinGuardian, or create derivative works from WinGuardian;

(ii) Continue use of WinGuardian after your 15-day trial without purchasing the registered version.

DISCLAIMER OF DAMAGES:

This software is NOT intended for illegal use. WinGuardian is intended only for companies, schools, organizations, and parents who have a LEGITIMATE RIGHT to monitor what the users of their computers are doing. Before using this software, make sure you have the right to monitor the activities of the computer users.

Webroot Software has made every effort possible to ensure that WinGuardian is free of any bugs or errors. However, in no way is this software to be considered error or bug free. By using WinGuardian, you assume all responsibility for any damages or lost data that may result from any errors or bugs in WinGuardian. Regardless of whether any remedy set forth herein fails of its essential purpose, in no event will Webroot Software be liable to you for any special, consequential, indirect or similar damages, including any lost profits or lost data arising out of the use or inability to use WinGuardian, even if Webroot Software has been advised of the possibility of such damages. Some states do not allow the limitation or exclusion of liability for incidental or consequential damages, so the above limitation or exclusion may not apply to you. In no case shall Webroot Software’s liability exceed the purchase price for the software. The disclaimers and limitations set forth above will apply regardless of whether you accept to use WinGuardian.

GENERAL:

This Agreement will be governed by the laws of the State of Colorado. This Agreement may only be modified by a license addendum that accompanies this license or by a written document that has been signed by both you and Webroot Software. Should you have any questions concerning this Agreement, or if you desire to contact Webroot Software for any reason, please write:

Webroot Software, Inc.

P.O. Box 3531

Boulder, CO 80307-3531