F-secure's Process & Task Manager

[boboboi]

Hello

I am trying F-secure Client Security and found that we can *end task* F-secure's processes that easily, how come that could be happened like that ?

Thanks

[MJ-perComp]

Hi,

1) Who are you (I mean what Windows role do you have)

2) What OS are you using

3) What version of CS?

4) What process did you end?

TaskMan is a trusted process so it should be able to do so. But if you use a different program to kill that task it should be blocked. I am not sure if PSKILL could show the effect, because PSKILL is also well known not to be malware.

Anyway, I think you get my point!

BR

[boboboi]

Windows XP Pro & Windows 7 U

FCS V9.30 b381

I tired to end process its all process , am tryin to see what will happen if a user wanted to bypass the antivirus

Well, it is not ok to allow task manager to be able to end f-secure's process becuase i do not trust the end users

[MJ-perComp]

Then giv this a try:

download EICAR.COM from Eicar.org

kill processes (only as normal user, not Admin)

try to open or execute eicar.com

You can stop processes, but you can not stop the drivers.

BTW: some processes will even be restarted automatically

Lets wait for a more detailed comment from F-Secure.

best Regards

[Vad]

Hi boboboi,

Could you, please, specify, what process(es) are you talking about.

As i understand, normal user can see only FSM32.exe - this is F-Icon process (F-Secure icon on the taskbar), ending it doesn't affect the security.

Important processes are running under System or Network Service accounts.

Regards,

Vadim

[tidaltides]

Task Manager can end every program you have in your system and you just have to deal with it.