Re: undestroyable process

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

"azsx" <radu_plugaru@xxxxxxxxx> wrote in message
news:1162247543.048754.301380@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
You started this topic on another forum and got the exact same response -
people's answers aren't going to change no matter how many times you ask.
:) indeed. It's just - i know for sure that there must be a way. Why
don't you agree that pure techniqly it is possible? There are critical
system processes?!


They might be 'critical' but as an administrator I can stop them / kill
them. Sure, it will break the system, but it not possible to stop an
administrator doing whatever he/she wants. There are some pieces of software
out there - notable things like ZoneAlarm or other security-related
softwares - which install hooks to prevent people killing the program via
TaskManager. But even though the admin can't use TaskManager any longer,
this doesn't mean he can't fire up his kernel-debugger and kill the process
that way.

Once again: By definition, the Administrator has complete control over his
system. It is *impossible* to prevent the Adminstrator from killing any
process on his system.

--
James Brown
Microsoft MVP - Windows SDK
www.catch22.net
Free Win32 Tutorials and Sourcecode





.

Relevant Pages

  • "Bearbeiten der Registry vom Administrator Deaktiviert"
    ... Samstag kommt jedes mal wenn ich den taskmanager aufrufen will follgende ... bin ich selbst der Administrator und ich hab niemals den taskamaner ... ich die registry bearbeiten will. ... Tests der Anti Spyware tools haben nur Cookies gefunden. ...
    (microsoft.public.de.german.windowsxp.registry)
  • Re: How to Get Exit status of an Unexpected End of an Exe
    ... > End my process by Choosing Endprocess in Taskmanager). ... That's the point of tray icon. ... primary task in separate worker thread. ... Actually, if user is administrator, you can't do much. ...
    (microsoft.public.vc.language)
  • Re: Task-Manager durch Adminstrator deaktiviert
    ... habe ich keinen Zugang mehr auf Dienstprogramme wie Taskmanager oder Regedit. ... Beim Versuch kommt beim Taskmanager z.B. die Meldung "Der Taskmanager wurde durch den Administrator deaktiviert". ... Ein Versuch mit Ad-Aware, das noch inaktiv in den Tiefen des PC schlummerte, brachte 32 infizierte Stellen zutage. ...
    (microsoft.public.de.german.windowsxp.sonstiges)
  • Re: Symantec LiveState Agent for Windows vulnerability - Local Privilege Escalation
    ... Wouldn't you have to be administrator to kill shstart.exe? ... LocalSystem account has more privilegies then administrator's one. ... As an administrator you can gain SYSTEM privileges at any time. ...
    (Bugtraq)
  • Re: Facebook Hate Group
    ... administrator this can be reported to? ... Incitement to kill must surely be a criminal offence these days? ...
    (uk.rec.cycling)