PDA

View Full Version : ekrn.exe terminated by APT


viruscraft
November 24th, 2008, 10:11 AM
By using ATP(Advanced Process Termination),ekrn.exe was terminated successfully without too much efforts(even in user-mode).

:doubt:

screenshot is followed.

This suggests the self-defense must be further improved.

Bensec
November 24th, 2008, 10:12 AM
AVZ can do that too. =)

nodyforever
November 24th, 2008, 10:57 AM
{QUOTE-> Hello,

Self protection is a new feature in the beta test release of ESET Smart Security v4, and development of it is ongoing.

Please continue to report any new issues or questions that you might have. Thank you.

Regards,

Aryeh Goretsky <-QUOTE}


{QUOTE->
Bagle kills ekrn.exe in nod32 v4 in less than 8 seconds <-QUOTE}


Necessary emergency improved next version beta :)



Most Regards,
NF

Kosak
November 24th, 2008, 03:03 PM
Hello, with specialized tool you can kill almost everything. You don't know, what was the main point of developer's target. :)

lodore
November 24th, 2008, 03:07 PM
anything that installs a kernal driver can kill it.
the trick is to not let anything untrusted install a kernal driver.

Bensec
November 24th, 2008, 10:15 PM
{QUOTE-> Hello, with specialized tool you can kill almost everything. You don't know, what was the main point of developer's target. :) <-QUOTE}

quite agreed.
and when ekrn/egui panicked like this

204308

and u cant terminate it with anything, but to reboot.
that's not going to make the users happy for this extra protection.