Protecting processes by renaming the executables??

[Joe Bloggs]

Hi folks

I'm guessing that if I rename the executable of my firewall program, it will
appear in the process list with the new name. The same thing with other
protective programs as well. Then a nasty intruder couldn't close those
applications because it wouldn't know what they're called.

Am I being far too simplistic? Is this feasible? I'm wondering if the
applications themselves may be a bit sensitive to having their name changed.

Has any one here tried this with any success?


JB

 

[Conor]

Hi folks

I'm guessing that if I rename the executable of my firewall program, it will
appear in the process list with the new name. The same thing with other
protective programs as well. Then a nasty intruder couldn't close those
applications because it wouldn't know what they're called.

Am I being far too simplistic? Is this feasible? I'm wondering if the
applications themselves may be a bit sensitive to having their name changed.

You are being far too simplistic. You're forgetting about the Registry.
It doesn't need to know the program executable name, merely the
registry value. Unless you're prepared to re-write the software then
there's no foolproof way around it.