Installing and Configuring NoVirusThanks YaGuard — Step-by-step
1. Download
- Visit NoVirusThanks product page: https://www.novirusthanks.com/ and locate YaGuard (or YaraGuard/YaraGuard-related product).
- Download the latest Windows installer or ZIP package.
2. Install
- If MSI/EXE: Right-click → Run as administrator. Follow prompts: Accept EULA, choose install folder, finish.
- If ZIP: Extract to a folder (preferably under C:\Program Files\NoVirusThanks\YaGuard).
3. Initial configuration
- Run YaGuard as administrator once to allow driver/service installation.
- Open the YaGuard GUI or config file (typically in installation folder or %APPDATA%\NoVirusThanks\YaGuard).
- Set scan mode: Real-time monitoring (watch filesystem) or on-demand scanning.
- Point YARA rules path to the rules directory (default: rules\ or rules\yara).
- Configure log path and retention.
4. Integrate YARA rules
- Place .yara/.yar files into the rules folder.
- Validate rules with any bundled tester or run:
Code
yaguard.exe –test-rules path\to\rules - Enable automatic rule reload (if available) to pick up rule changes without restart.
5. Real-time protection settings
- Enable file-system hooks / driver if offered.
- Exclude trusted folders/processes to avoid false positives (e.g., development folders, virtual machines).
- Set scan actions: quarantine, delete, or alert-only.
6. Scheduling & performance
- Configure background scan intervals and CPU usage limits.
- For heavy rule sets, schedule full scans during off-hours.
7. Logging & notifications
- Enable verbose logging initially to tune rules.
- Configure email or system event logging if supported.
8. Testing
- Test detection
Leave a Reply