Blog

GlassWire visualizes malware

Iseemalware

What does malware look like?  Unfortunately there are so many types of malicious software that there is no clear way to find and detect it all, but in many situations GlassWire can help.

The screenshot above comes from a fan in Europe who emailed to tell us how GlassWire found an infection on his computer that was not detected by his antivirus software.  In this case GlassWire alerted the user that something was trying to send all his traffic over a proxy many times per day.  After locating the file that was responsible via GlassWire’s “new” network activity feature the user could then upload it to VirusTotal.  This new malware was only recognized by a few of the VirusTotal scanners but luckily GlassWire’s network visualization allowed the user to see a strange pattern that alerted him to the problem.

Did GlassWire help you detect malware or find another problem with your network or computer?  Please let us know via Twitter, Facebook, Blog Comments, or email.  We love to see your malware patterns on the GlassWire graph!

Update:  Some GlassWire users have asked more details about what the visualization above is showing.  In this case GlassWire was detecting that malware was trying to change proxy settings on the computer every few minutes.  You can see examples of the alerts under GlassWire’s “alerts” tab below.  Normally the alerts would have an icon like the one shown below but since they were happening so often the proxy change alert icon was changed to a number.

proxychange2

The rest of the graph shows incoming and outgoing bandwidth.  You can see the malware was trying to download and upload data.  The light color is downloaded data and the darker color is uploaded data.  If I had shown the full GlassWire graph you would see an up and down arrow in the user interface that explains what colors represent incoming and outgoing bandwidth.

The bottom of the graph shows the time line.  You can drag the sliders back and forth to focus in on a certain time and date on the graph using the GlassWire software.  The clock icon and shading on the graph means the user was idle when all this activity occurred.

If you have any more questions feel free to reply in the comments.

If you don’t have GlassWire already download it free here.

Blog

GlassWire update 1.0.24b now available

GlassWire 1.0.24b is now available for download.

Thanks to the GlassWire users who gave us feedback via our contact page and forum we were able to release a quick update with some bug fixes.

What’s new with GlassWire 1.0.24b?

* Fixed a problem where the GlassWire driver did not install properly and showed a constant “visualizing network” message.

* Fixed a problem that caused some security applications to claim that GlassWire was watching the clipboard.

* Fixed a problem where the GlassWire “Usage” tab looked ugly on some monitors and resolutions.

Download GlassWire 1.0.24b – Please report GlassWire problems to the GlassWire forum or contact page.

Blog

GlassWire 1.0.23b now available

blog_image

We are excited to announce that GlassWire 1.0.23 is now available for download!

We carefully reviewed user feedback and tried to address the major usability concerns and stability problems users were experiencing.  Thank you all for your feedback and help.

What’s new with GlassWire 1.0.23b? 

  • Service description added to the Windows Service Manager.
  • Fixed a bug that sometimes caused GlassWire to crash if the Windows Firewall was disabled.
  • Alert numbers added to the GlassWire taskbar icon.
  • Ugly font problems some users experienced on Surface tablets and other hardware fixed.
  • Pin to taskbar is now unchecked by default in the installer.
  • Fixed a problem where GlassWire looked ugly in remote desktop sessions.
  • Fixed a driver issue where some users reported a BSOD.
  • Fixed a problem where some users saw only “visualizing network” with no graph data.
  • Many other small bug fixes and improvements. Thank you for your feedback and bug reports.

Download GlassWire 1.0.23b – Please report any problems to the GlassWire forum or contact page.

Blog

GlassWire on HackerOne security response platform

hackerone

To report security issues in GlassWire please consider using our HackerOne profile.  HackerOne is a new security response platform that is used by lots of companies like Twitter, Yahoo!, and Cloudflare.  Our HackerOne profile has details about what types of issues we are looking for and it allows you to get credit for your report so other people can see.

If you don’t want to use HackerOne you’re always welcome to contact us via email.  Thank you for your feedback.

Join GlassWire on HackerOne

Blog

Sharing your GlassWire graph

Did you know you can take a snapshot of your GlassWire graph and save it to your hard drive, or share it on Twitter?  To take a snapshot mouse over your graph and you’ll see a camera icon at the top right corner of the graph.  Click the icon to take a snapshot and you’ll then have an option to save your graph to the desktop or share it on Twitter with the hashtag #glasswire or any hashtag you prefer.

There are already a few GlassWire users sharing our hashtag #glasswire but we’d like to see more.