....
My point to having them renamed though is that when the viruses go through their internal list to kill a certain process, they'll skip over the running firewall/anti-virus executable because it is renamed.
In theory, any good program that references itself through its filename should in theory be able to store its running filename in memory (which may or may not be a bad thing) and pass it to whoever needs it.
Although I don't know if that function exists in (this example) the Windows APIs.
__________________
"You looked at me as if I was eating runny eggs in slow motion." - Gord Downie of The Tragically Hip
|