PDA

View Full Version : Self Protection Needed?


duke1959
December 10th, 2006, 07:22 PM
Since programs like Comodo Firewall, KAV, AOL Active Virus Shield, and Spyware Terminator have Self Protection, and Avast and Antivir are working on having it. I was just wondering how important it really is to have? AVG ISS doesn't have it, which has a Firewall, AV, and AS Component. I posted here in the Antivirus section, thinking the AV would be the most important one to have Self Protection if needed.

C.S.J
December 10th, 2006, 07:31 PM
AVG ISS has real time protection

MalwareDie
December 10th, 2006, 08:17 PM
C.S.J. i think he means if the programs can protect themselves from termination not if they have real time protection. I am unsure. Im a newb

duke1959
December 10th, 2006, 08:59 PM
Yes, sorry I did mean for software's to protect themselves from termination like the ones I mentioned.

MalwareDie
December 10th, 2006, 09:10 PM
I am not sure how important is for a prgram to be able to protect themselves from termination. I would guess important to some degree because i believe some malware will attempt to terminate your antivirus.

Randy_Bell
December 10th, 2006, 09:16 PM
{QUOTE-> programs like Comodo Firewall, KAV, AOL Active Virus Shield, and Spyware Terminator have Self Protection, and Avast and Antivir are working on having it. ... <-QUOTE}
Also Norton products have had it for few years now. That used to be a point of criticism of Norton, that it was easy to terminate, but not anymore {I think, 2005 version and higher, have self-protection}. Self-protection, or termination resistance, is most important for AV and firewall, as that is the target of most malware, to terminate the AV/firewall as soon as the malware becomes active. If the AV/firewall can stop the malware before the malware becomes active, self-protection is moot, but if not, then self-protection is a last line of defense. HTH .. :) ;)

dah145
December 10th, 2006, 10:58 PM
Also protects against modification of the registry keys owned by the software, and from dll injection.

duke1959
December 10th, 2006, 11:35 PM
So an AV like Antivir with it's highly rated Detection and Heuristics may not need Self Protection?

dah145
December 11th, 2006, 01:31 AM
{QUOTE-> So an AV like Antivir with it's highly rated Detection and Heuristics may not need Self Protection? <-QUOTE}

Of course it needs!!! or it can be easily disabled with a simple command. :ouch:

Every major AV like KAV, NOD32, Norton and a few others... have it.

the Tester
December 11th, 2006, 01:49 AM
I agree with Randy Bell.
Self-protection is most important for a FW and AV.

As far as whether it is really needed or not,I'd much rather have it.;)

Meriadoc
December 11th, 2006, 04:01 AM
Very important. A malware could inject its code into all running processes to gain control. A self protection in avs such as Norton, Kaspersky etc will stop the attempt to do this into the av.

lodore
December 11th, 2006, 04:25 AM
{QUOTE-> Also Norton products have had it for few years now. That used to be a point of criticism of Norton, that it was easy to terminate, but not anymore {I think, 2005 version and higher, have self-protection}. Self-protection, or termination resistance, is most important for AV and firewall, as that is the target of most malware, to terminate the AV/firewall as soon as the malware becomes active. If the AV/firewall can stop the malware before the malware becomes active, self-protection is moot, but if not, then self-protection is a last line of defense. HTH .. :) ;) <-QUOTE}

if i remember correctly norton had it since the 2003 version which was the last verson i used.
it was a new feature for that version
lodore

ashishtx
December 12th, 2006, 01:16 AM
I would definately say Yes. A must feature for every pc security product. Are there any reasons why many security software doesn't have it? Any ideas? ???

C.S.J
December 12th, 2006, 09:41 AM
{QUOTE-> I would definately say Yes. A must feature for every pc security product. Are there any reasons why many security software doesn't have it? Any ideas? ??? <-QUOTE}
i think its because the 'many' that dont have it, have other ways of just blocking the malware trying to do it, i think.

proactivelover
December 12th, 2006, 10:39 AM
nod32 does not have this ability
i checked it

lodore
December 12th, 2006, 01:09 PM
{QUOTE-> nod32 does not have this ability
i checked it <-QUOTE}

i thought that it didnt have self protection but it came back if its stopped?
lodore