Re: undestroyable process
- From: "Arkady Frenkel" <arkadyf@xxxxxxxxxxxxxxxx>
- Date: Tue, 31 Oct 2006 11:26:48 +0200
ZoneAlarm install driver too and in kernel mode they can do what they want
( I even can't wrote the words "crash the system" :) ). That's really
strange if they ( ZA ) really crash the system , shame on them...
Driver can use app to enum processes and if no checked app exist can send
custom IOCTL with such info to driver to do the job, but believe me, no one
will want to install your app on the computer in this case
Arkady
"azsx" <radu_plugaru@xxxxxxxxx> wrote in message
news:1162272437.536919.86160@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
They might be 'critical' but as an administrator I can stop them / kill
them. Sure, it will break the system, but it not possible to stop an
administrator doing whatever he/she wants. There are some pieces of
software
out there - notable things like ZoneAlarm or other security-related
softwares - which install hooks to prevent people killing the program via
TaskManager. But even though the admin can't use TaskManager any longer,
this doesn't mean he can't fire up his kernel-debugger and kill the
process
that way.
This is what I need, a system crash when an administrator tries to end
my programm.
Can you describe ZoneAlarm and what it does in this context? It uses
the registry to disable taskmanager or it is something else?
As for kernel-debuggers, here (Moldova) the administrators are not
programmers, mostly they didn't even hear about kernel-debuggers.
Thanks.
.
- References:
- undestroyable process
- From: azsx
- Re: undestroyable process
- From: James Brown
- Re: undestroyable process
- From: azsx
- Re: undestroyable process
- From: James Brown
- Re: undestroyable process
- From: azsx
- Re: undestroyable process
- From: James Brown
- Re: undestroyable process
- From: azsx
- undestroyable process
- Prev by Date: Re: undestroyable process
- Next by Date: SysFreeString - Is the memory mine to use as I please ?
- Previous by thread: Re: undestroyable process
- Next by thread: Re: undestroyable process
- Index(es):
Relevant Pages
|