Where is my security software process(es)? I do not see them listed!
During our real-world research, we discovered that some anti-virus software has tamper detection mechanisms that are ‘triggered’ by simply ‘looking at’ their process. Yes, simply looking at them – something I’ve verified with their own engineers. We are working on some work-arounds so that these are listed again for v6, but the thing is that these processes should not be *touched* by the end user. This would not be a problem, BUT these software emit not one ‘tamper detection’ log event, but thousands and thousands — to the point of slowing down some PCs. Don’t ask me why they emit thousands of duplicate tamper detection events, you can ask them that . Anyway, to AVOID this, we do not even touch certain processes.
You may say, but my security software uses a lot of CPU resources, I need to tame it!
Indeed, it does use a lot of CPU and I/O resources, *BUT* it should NEVER be tamed. By design the real time scanners run at the highest available priority already – even if their priority class doesn’t show that, the thread priority is surely real-time or highest. Why? Because you WANT whatever the scanner has to do to be completed as quickly as possible. Other processes must WAIT for the ‘scan’ to complete. Thus, you never want to interfere with this process, NOR do you want to try ‘optimize’ it yourself, as you can seriously jeopardize the synergy of your PC.
Remember, Process Lasso was *never* meant to be a full-fledged task manager. It is an automation and optimization tool. Thus, we focus on THAT, and that alone.
bitsum.com
