Author Topic: Process guard for Avast resident shield.  (Read 7068 times)

0 Members and 1 Guest are viewing this topic.

Waldo

  • Guest
Process guard for Avast resident shield.
« on: November 29, 2003, 04:53:23 PM »
Hi !

This freeware will prevent malware from disabling your resident guard.

Many new virusses and trojans (beast, optic pro, Donald dick) etc these days include process termination functions for most security software. If they can disable your software your helpless and doomed !

Avast home doesn't (offer) protect his own processes ,but with "Process guard from Diamonds" you can do it yourself !

The freeware version can only protect 1 process though, but is more than enough to add the resident shield.

I believe Pro users don't need it, as they can setup a password needed to disable Avast. (just like in Zonealarm Pro)

It works good for me...(win XP sp1) :

http://www.diamondcs.com.au/processguard/

Kind regards,

Waldo


Offline .: Mac :.

  • Avast √úberevangelist
  • Ultra Poster
  • *****
  • Posts: 5093
Re:Process guard for Avast resident shield.
« Reply #1 on: November 29, 2003, 05:38:17 PM »
hmmm great i will download it
"People who are really serious about software should make their own hardware." - Alan Kay

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67241
Re:Process guard for Avast resident shield.
« Reply #2 on: November 30, 2003, 01:57:39 AM »
Thanks for the link Waldo... I'm downloading it.
In the developer site it is written: "The FREE version allows you to protect 1 process (usually your favourite security program such as a firewall)."

What is better (or more secure): protect the firewall (ZA free) or avast! residents?
What exactly avast! process must be protected? I suppose is ashServ.exe... Am I right or not?
The best things in life are free.

Waldo

  • Guest
Re:Process guard for Avast resident shield.
« Reply #3 on: November 30, 2003, 03:25:33 AM »
I would defend "ashServ.exe" (shield) from Avast.

If ZA is disabled, your ports will still be closed (most of them)...but without guard your defenceless againt a trojan or virri stike.

You can test your "setup" with this freeware (this program can simulate those nasty .Dll (libary) injecting trojans :

http://www.diamondcs.com.au/index.php?page=apt  (only 26 kb)
 
If you try to disable "ashServ.exe" (after using process guard) and your unable to kill the process using the 7 different attacks, your safe from those AV killing malwares also.

Waldo
« Last Edit: November 30, 2003, 03:36:14 AM by Waldo »

Offline Lisandro

  • Avast team
  • Certainly Bot
  • *
  • Posts: 67241
Re:Process guard for Avast resident shield.
« Reply #4 on: November 30, 2003, 03:10:48 PM »
Thanks Valdo, very clarifing and the 'test' utility is quite a good one.
Very thanks for your time  ;)
The best things in life are free.

Waldo

  • Guest
Re:Process guard for Avast resident shield.
« Reply #5 on: November 30, 2003, 04:34:36 PM »
Thanks Valdo, very clarifing and the 'test' utility is quite a good one.


Valdo ? lol....

I'm glad the tool (process guard) works good for you also. It does add that extra layer of defence. It's a kernel driven util, so it's complex to make (code). But because it has a very easy gui (skin) it's childsplay to use.

And it's freeware and doesn't use any system resources.

The test tool is indeed nice also, hard to simulate process ending attacks without it.

Kind regards,

Waldo