Process guard for Avast resident shield.

[Waldo]

Hi !

This freeware will prevent malware from disabling your resident guard.

Many new virusses and trojans (beast, optic pro, Donald dick) etc these days include process termination functions for most security software. If they can disable your software your helpless and doomed !

Avast home doesn't (offer) protect his own processes ,but with "Process guard from Diamonds" you can do it yourself !

The freeware version can only protect 1 process though, but is more than enough to add the resident shield.

I believe Pro users don't need it, as they can setup a password needed to disable Avast. (just like in Zonealarm Pro)

It works good for me...(win XP sp1) :

http://www.diamondcs.com.au/processguard/

Kind regards,

Waldo

[.: Mac :.]

hmmm great i will download it

[Lisandro]

Thanks for the link Waldo... I'm downloading it.
In the developer site it is written: "The FREE version allows you to protect 1 process (usually your favourite security program such as a firewall)."

What is better (or more secure): protect the firewall (ZA free) or avast! residents?
What exactly avast! process must be protected? I suppose is ashServ.exe... Am I right or not?

[Waldo]

I would defend "ashServ.exe" (shield) from Avast.

If ZA is disabled, your ports will still be closed (most of them)...but without guard your defenceless againt a trojan or virri stike.

You can test your "setup" with this freeware (this program can simulate those nasty .Dll (libary) injecting trojans :

http://www.diamondcs.com.au/index.php?page=apt  (only 26 kb)
 
If you try to disable "ashServ.exe" (after using process guard) and your unable to kill the process using the 7 different attacks, your safe from those AV killing malwares also.

Waldo

[Lisandro]

Thanks Valdo, very clarifing and the 'test' utility is quite a good one.
Very thanks for your time  

[Waldo]

Thanks Valdo, very clarifing and the 'test' utility is quite a good one.

Valdo ? lol....

I'm glad the tool (process guard) works good for you also. It does add that extra layer of defence. It's a kernel driven util, so it's complex to make (code). But because it has a very easy gui (skin) it's childsplay to use.

And it's freeware and doesn't use any system resources.

The test tool is indeed nice also, hard to simulate process ending attacks without it.

Kind regards,

Waldo