user manual

Working with the Application Protection Baseline
43
3. Repeat for every warning message that appears. The number of messages you see
depends on how many files the application runs. BlackICE will not display the
warning messages again unless the application changes.
Building your
baseline over time
Desktop Protector can learn your application protection preferences as you work. You can
have Desktop Protector ask you for a decision on each program as it launches.
To update your baseline as you work:
1. On the Tools menu, select Edit BlackICE Settings, then select the Application Control
tab.
2. Select an option under When an unknown application launches.
■ To have Desktop Protector check with you when it detects an application you have
not explicitly allowed to run, select Ask me what to do. This is the default.
■ To have Desktop Protector automatically shut down any application you have not
allowed to run, select Always terminate the application.
Application
Protection alerts
If you have enabled the Application Protection component and selected Ask me what to
do, Desktop Protector alerts you when an unknown application starts. For information
about how to respond to these alerts, see “Responding to Application Protection Alerts”
on page 56.
Note: To avoid false positives, update your application protection baseline every time
you install new software. Installing a new application can change some helper files, such
as DLLs, that are already in your baseline. Desktop Protector may flag these as “modified
files” until you update your baseline.
Application file
types
Desktop Protector determines which files are included in the baseline from the file name
extensions. Desktop Protector currently checks for these application file types:
Extension File Type
dll Dynamic link library, a collection of resources that enable a
program file to do its job
drv Driver, a small program that enables a device or service to work
exe Executable file, containing program instructions
ocx Special-purpose program for functions such as scroll bar
movement and window resizing in Windows applications
scr Screensaver program
sys Files that control basic operating system functions
vxd “Virtual device” that enables other software to work