View Single Post
  #119  
Old 10-20-2015, 05:38 PM
Alaron01 Alaron01 is offline
Large Rat


Join Date: Sep 2010
Posts: 6
Default

Quote:
Originally Posted by simp403 [You must be logged in to view images. Log in or Register.]
The antivirus software detects a foreign dll file simply by virtue of that dll file having been modified by a third party.
I suppose it could. It would need to index and checksum every DLL on the computer... is that why it's so damn slow? I haven't read much about AVs.

Quote:
Originally Posted by simp403 [You must be logged in to view images. Log in or Register.]
However, if the code in that dll file were to, say, try to grant the Everquest process administrative privileges when the program was clearly not designed to do so, wouldn't there be an additional warning or intervention by the antivirus software?
http://stackoverflow.com/questions/1...-administrativ

See Oleg's answer for one method. Would there be a warning for that? Not sure, probably depends on the AV.