3 ms·
This was my immediate thought. Where is rewrite happening? All the options seems icky.
by verytrivial 7y ago
This was my immediate thought. Where is rewrite happening? All the options seems icky.
- chmod775 7y agoI think AV vendors used to do browser addons to provide some functionality. But since browser extensions in all popular browser are now effectively neutered versions of their former selves, they are probably resorting to stuff like this. It can be hard to even get a browser addon installed as a third party program without resorting to hacks (thanks to browsers having taken measures after the toolbar hell).
- GordonS 7y agoWindows AV software is notoriously "icky". Microsoft had been making a effort to push AV vendors towards more"official" means of real-time hooking, but many still use DLL injection, kernel hooking etc.