Dr.Snatch

Support AM-PPL and AMSI feature on Windows 10

Recommended Posts

https://msdn.microsoft.com/en-us/library/windows/desktop/dn889587(v=vs.85).aspx\
https://msdn.microsoft.com/en-us/library/windows/desktop/dn313124(v=vs.85).aspx

The two features will prevent emsisoft process from virus attacking, and improve self-protection.As I known, Avast, AVG, Kaspersky, ESET and Trend Micro have supported this feature on Windows 10.

Quote

AM processes can run critical user-mode service components as AM-PPL which is at a higher level than an Admin thus can help shield itself from admin level malware

For example, Kaspersky 2019 supported:

amsi.jpg.7fa41f8770e141773089348283514156.jpg
Download Image

ppl.jpg.12afdf07ed46432e2e56498bf2fc4806.jpg
Thanks.
Download Image

 

Share this post


Link to post
Share on other sites

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now

  • Recently Browsing   0 members

    No registered users viewing this page.