about permanent protection

Discussion in 'Trojan Defence Suite' started by rebo25, Feb 5, 2005.

Thread Status:
Not open for further replies.
  1. rebo25

    rebo25 Guest

    Hello,
    TDS must be running for protection or the protection remain when it is closed?
     
  2. dog

    dog Guest

    Yes, TDS needs to be running to have ExecProt Protection active. ;)

    Steve
     
  3. FanJ

    FanJ Guest

    Hi,

    Both the following two conditions must have been followed:

    1- TDS-3 MUST have been started;
    2- Execution Protection MUST have been enabled.

    The protection works as follows:
    (Execution Protection is a so-called hook.)

    If an .exe file wants to start AND Execution Protection is enabled AND TDS-3 is running,
    then Execution Protection gives that .exe file to TDS-3 to examine it;
    if TDS-3 finds that .exe file OK, then TDS-3 gives that .exe file back to Windows to let it do its thing;
    if TDS-3 finds that .exe file NOT OK, then TDS-3 will give that .exe file no permission to execute.

    If an .exe file wants to start AND Execution Protection is NOT enabled,
    then TDS-3 will NOT examine that .exe file and that .exe file will do its thing.

    If an .exe file wants to start AND Execution Protection is enabled AND TDS-3 is NOT running,
    then TDS-3 will NOT examine that .exe file and that .exe file will do its thing.


    I hope that helps.
     
    Last edited by a moderator: Feb 5, 2005
Thread Status:
Not open for further replies.