I am trying F-secure Client Security and found that we can *end task* F-secure's processes that easily, how come that could be happened like that ?
1) Who are you (I mean what Windows role do you have)
2) What OS are you using
3) What version of CS?
4) What process did you end?
TaskMan is a trusted process so it should be able to do so. But if you use a different program to kill that task it should be blocked. I am not sure if PSKILL could show the effect, because PSKILL is also well known not to be malware.
Anyway, I think you get my point!
Windows XP Pro & Windows 7 U
FCS V9.30 b381
I tired to end process its all process , am tryin to see what will happen if a user wanted to bypass the antivirus
Well, it is not ok to allow task manager to be able to end f-secure's process becuase i do not trust the end users
Then giv this a try:
download EICAR.COM from Eicar.org
kill processes (only as normal user, not Admin)
try to open or execute eicar.com
You can stop processes, but you can not stop the drivers.
BTW: some processes will even be restarted automatically
Lets wait for a more detailed comment from F-Secure.
Could you, please, specify, what process(es) are you talking about.
As i understand, normal user can see only FSM32.exe - this is F-Icon process (F-Secure icon on the taskbar), ending it doesn't affect the security.
Important processes are running under System or Network Service accounts.
Task Manager can end every program you have in your system and you just have to deal with it.