Self Protection

Since some time now malwares have began to shutdown Antivirus and Security applications, so on a scale from 1 to 10 and 10 been super urgent. How urgent do you think that avast a self protection feature ?

Please Vote and share your thoughts :wink:

Al968

10, Iā€™ve worked on a few systems where malware has disabled Avast.

Who will guess my vote? 8) ;D

Well it is by all accounts penned in for avast 5.0 and we have already had a pre avast 5.0 code drop that was the anti-kill functionality, I feel avast are taking it seriously. But, somehow I doubt it will be introduced before 5.0, considering we are at 4.7.986 hopefully that wonā€™t be too long.

In the mean time prevention has to be the cure, a little proactive self-protection. The only malware that Iā€™m currently aware of that disables avast is the Beagle rootkit variant. So DropMyRights, donā€™t open attachments or click links in unsolicited emails, etc. should help to reduce the risk until we do get self-protection.

Iā€™ve seen a lot of malwares disable Avast :frowning:
If malware writters bother to disable Avast then it must be good ;D

Yes there was a precode on the antikill feature however I had proved it to be ā€œunfinishedā€, I has also proposed in that post (I think) that the Avast Services should try to restart itself if killed or launch an other executable file which would just alert the user that Avast has been disabled(see picture in attachement). I know that this sollution is a very weak protection however I believe that it would still prevent some malware from shutting down Avast.I also believe (with the little programing skills I have) that this feature is very easy to implement.

Al968

Al968

Al, maybe you can help the programmers and drop some code for themā€¦
I really doubt that any of them will recognize that it is an easy task, a programmer never says thisā€¦

i gave it a 12(10) ::slight_smile:

I donā€™t think this would be code-wise and also It would depend on the program itself. The sreenshot I put in my previous post showed the property of an Avast Service, those properties can be changed when creating the installer.

Al968

So what does the Avast staff think about this ??

Al968

Sometimes you must work hard to have an official answer about sales, policies, future plans, etc. ;D