Vista Tutorial - Infection Resolving Team

I know what happens when you overkill your real time protection

Too much firewalls is very bad, I learnt that the hard way

Good point. I know you hve comodo and that has a Buffer Overflow counterattack optition enabled and it is HIGHLY unlikely that it would happen with comodo. But if there was an attack using that, what would happen if they activated Avast. Just a thought.
Ben

I dont follow you, why would the attack activate the AV?

Because it can make prgrams act differently and if it can tell u have 2 AV programs it might try and make them counteract.

Ben

Oh, My understanding of buffer overflow was overwriting data and messing up the system. I didnt think it could take over programs...

My knowledge of security is not as good as I thought...

No worries Fmjc001,

We are both 16. We arent supposed to know EVERYTHING haha. We know what we do and we also learn from others. No one will ever know everything about computers.

No worries bud,
Ben

Hey everyone, Its been a while.
So what are the latest security threats out there?
Anyone know of any very serious ones which need a solution?

Just thought I would post a suggestion;

What I do and I find quite useful is making my task engine start my AV Software as SYSTEM at log-on of any user. So even if he user disables it it is still running in the background

Im not sure if this works, as far as I can see it does. I tried to let a virus into my computer before. I killed the AV that started but when I went to taskmgr I seen it still running as SYSTEM. That would explain why it keep stopping the virus

Good for users who try to install spyware on your computer with physical access. Even another admin would not realise what was wrong

Good Point Fmjc001
That is a very good idea. I do keep my computer locked all the time when i am not on it. But if you are a very forgetful person of just very protective that would work very well.
But i do think that if anyone is smart enough to physically put something harmful onto your computer that they would also realize that they should just go into the task manager and disable all virus protection software. Even though if runs as SYSTEM, they can still see what it is by the description.
That is a very good idea though.
Ben

I know, but most people will not realise. Besides, I am the only user who can call the taskmgr. Not even the built in admin can - Well, not without reconfiguring my security settings, which are also protected

I use the tasksch for about 80% of my security. I have programed all sorts of things to happen. When an administrator logs on unless they have my username the system deletes them from the admin group and restarts the computer lol