I was thinking : why prevent avast services from being killed ?
If avast on-access scanner is running when the virus is executed there are 2 possibilities :
- avast knows the virus and prevent it from executing = no problem.
- avast is unable to recognize the virus and the virus is executed.
In the second possibility, the fact that avast is killed or alive doesn’t change anything because avast can’t do anything with the virus.
So is it usefull to prevent an AV program from being shut down by a virus ?
I think it is better to prevent a firewall from being shut down as it can block virus access to the net.