are Services Protected?

Discussion in 'ProcessGuard' started by frogfoot, Aug 15, 2004.

Thread Status:
Not open for further replies.
  1. frogfoot

    frogfoot Registered Member

    Joined:
    Aug 8, 2004
    Posts:
    116
    Location:
    Yeovil UK
    Does Process Guard protect running services? ie Outpost firewall has a service running called 'Outpost Firewall Service', if this is dissabled, the firewall becomes inefective. Will putting the Outpost.exe into the 'Protected list' stop a malicious script from shutting down the service? or will the 'Stop sevices from installing' also block services from shutting down? (It seems that Outpost.exe is just the GUI part, the firewall can be run simply as a service.)
    Thanks
    Tom
     
  2. frogfoot

    frogfoot Registered Member

    Joined:
    Aug 8, 2004
    Posts:
    116
    Location:
    Yeovil UK
    I have just applied CMH to Outpost and tried to stop the service, PG did pop up the verification window(VW), however even when I hit cancel on the VW the service stopped and outpost closed! It seems that CMH does not stop an app from closing, but it just informs you that it is about to. Shouldn't the app keep running if you press cancel, if so what is the point of the verification text? (you can just hit cancel to get the same effect).

    Anyone?

    tom
     
  3. hojtsy

    hojtsy Registered Member

    Joined:
    Dec 28, 2003
    Posts:
    351
    CMH is intended to keep the process running if you press Cancel, by intercepting the window close message. There are two things to consider:
    1) CMH is not yet mature technology. The author (DiamondCS) refers to it as "experimental". In short this mean not 100% efficiency even in the area it is intended to protect.
    2) There are many ways to terminate a process apart from the window close message. Process Guard has safeguards for them too, but you need to activate and configure them.
    -hojtsy-
     
Thread Status:
Not open for further replies.