Security Application Termination Protection

In real world conditions, how critical or important is it to restart or prevent resident security applications from being terminated by malicious media(viruses, trojans, rootkits, etc..)? How likely is this situation to occur on a regular day-to-day basis? To date, I have been fortunate that I have not experienced this situation. To that end, I have employed the use of Task Catcher which does a good job in restarting critical system programs and security applications if they are terminated by malicious invaders. Any comments or opinions on the above matter would be greatly appreciated.


Peace & Love,

CogitoErgoSum

 

I find it important but I haven't had that issue once unintentionaly (termination of process by malware) ... but still when surfing the other site of the web you better get yourself protected by termination, modification and even starting of new and unknown processes.

just my two cents

 

Thanks Infinity for your input.


Peace & Love,

CogitoErgoSum

 

Just by surfing the web there is no way to catch any malware if you disable ActiveX/Javascript/Java/Flash/Plugins by default and enable them only for trustworthy sites.

IMHO the most user-friendly way to control these types of Active Content is to use Firefox with the extension Noscript. (ActiveX, which is notorious for security leaks, is not used by Firefox, anyway.)

 

Thanks tlu for your input.


CogitoErgoSum

 

You're running OA - it has task termination protection for itself (although not 100% complete, it's hardly a target at the moment). This will be improved in the 2.0 release making it a harder kill.

As yet, I am not aware of any malware targetting OA specifically, although my onsite guys have cleaned up instances of malware which has played with norton pretty roughly, including playing with the HOSTS file to nullify liveupdate and prevent new sigs from being downloaded.

I think it's a pretty common opinion that the battle between the creators of "bad things" and "Anti-bad-things" will continue to escalate.

 

Mike,

As always, it is great to hear from you. Thanks for sharing OA's termination protection capabilities with us. As a happy and satisfied user of OA, it is a comfort to know that it is not easy to disable and will continue to provide reliable intrusion prevention services in an unforgiving computing and internet environment.


Peace & Love,

CogitoErgoSum

 

AntiHook has this type of protection for free.