Subj : Re: killing processes in win2k To : Rich From : tom Date : Thu Mar 29 2001 04:12 pm From: tom Too much work. But that could be a better way, depending on your point of view. Rich wrote: > > This is silly. If a trojan wants to make it appear that AV > software that was killed is still running it could add an identical > icon to the notification area that didn't disappear when moused over. > > Rich > > > "tom" wrote in message > news:3AC2513D.574E@tcgweb.com... > They are there until you mouse_over. > How often do you mouse_over them? > It only takes seconds, or minutes at the most, for very bad > things to > happen. Do you want to spend your day mousing over icons? > > The point is the processes they represent appear to be > active even > though they are not. > A dangerous thing when dealing with security software. > > I wonder how much cpu time could be set aside to give the > app a chance > to pop a warning or something before the kernel whacks it? > --- BBBS/NT v4.00 MP * Origin: Barktopia Gating Project http://HarborWebs.com:8081 (1:379/45) .